Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iv43Jbd_2-m_SPLx01jmD3ss7hI.roa
File: iv43Jbd_2-m_SPLx01jmD3ss7hI.roa (raw, json)
Hash identifier: DIin2WP9e8qRh9GlwKS/77g5hrcW45bcqreaeURF+qw=
Subject key identifier: 8A:FE:37:25:B7:7F:DB:E9:BF:48:F2:F1:D3:58:E6:0F:7B:2C:EE:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iv43Jbd_2-m_SPLx01jmD3ss7hI.roa
Signing time: Mon 06 May 2024 05:54:06 +0000
ROA not before: Mon 06 May 2024 05:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20670 (0x50be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 05:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8AFE3725B77FDBE9BF48F2F1D358E60F7B2CEE12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:ed:de:14:97:74:e6:ca:bf:8f:a6:54:3f:
f6:f6:ab:e9:d8:59:45:72:8a:09:0a:84:63:2d:c5:
63:e1:e5:19:b2:6f:12:0d:7b:6e:2b:c4:6f:7a:09:
d4:ce:3c:3b:8a:5f:91:32:70:98:c5:eb:9d:f0:d3:
67:0d:e9:18:d2:2b:d6:0c:f9:c6:97:9a:ce:bc:8a:
be:33:40:6d:e0:94:d9:4c:86:0b:ac:b8:8b:d1:9f:
06:f3:a6:74:70:a4:08:ce:66:7d:1e:94:97:13:28:
13:14:c5:fe:c2:b9:88:b6:0d:55:8d:5f:59:ed:b6:
ff:73:52:9f:91:52:31:88:a6:9d:af:08:c1:06:20:
22:80:dc:0d:4e:57:a4:91:b1:aa:46:45:a2:ce:21:
98:59:d3:8d:da:bb:a3:b6:7e:35:28:68:5a:f4:6c:
e9:1f:82:ef:70:cc:06:c3:79:c9:8f:db:5c:93:eb:
91:a2:9c:4a:a8:f6:ad:5b:46:55:6a:8c:8a:fc:2b:
46:0f:de:04:93:dd:8f:43:0b:32:38:4e:2e:5f:2a:
ee:65:21:56:d4:22:3d:e9:d3:2a:5c:69:e7:6a:29:
67:75:8a:a8:43:e2:ff:bf:0c:2a:be:6a:2b:40:bc:
dd:bc:26:6c:f7:3e:e3:99:10:c6:f3:ef:62:6c:8e:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:37:25:B7:7F:DB:E9:BF:48:F2:F1:D3:58:E6:0F:7B:2C:EE:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iv43Jbd_2-m_SPLx01jmD3ss7hI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:bc:55:60:c1:07:9b:af:fa:a3:59:24:8d:2e:ea:3e:dc:01:
40:ce:28:6e:05:24:e3:fd:30:9d:f1:f2:16:87:0e:9a:6d:e9:
c2:77:ca:e2:34:e4:94:3d:5c:8b:12:89:79:55:f3:04:92:30:
5a:3b:da:8a:ea:d1:26:a1:a7:8f:94:5a:76:0a:a6:ed:75:7c:
9d:88:57:3d:19:9a:ac:d3:3c:d8:79:b9:25:91:33:fb:b1:9e:
5e:7f:bd:01:f3:b8:89:6a:66:ff:bc:3e:20:89:03:77:21:8e:
e1:f4:5f:48:cf:86:50:0b:1a:b2:dd:60:7a:3d:d2:2e:8f:15:
4f:f2:fa:83:80:66:70:29:d9:5d:e7:02:e7:86:76:e9:1b:10:
90:a9:7b:c4:a8:a2:79:2b:82:bb:46:da:44:c1:88:98:e3:0d:
e0:16:dd:4a:0a:eb:58:52:0b:49:6d:9f:93:0c:e7:cd:b8:bb:
3f:c2:a1:c1:5f:00:26:aa:74:78:4c:f0:f8:5a:47:d0:36:e7:
5a:61:26:8c:5e:5c:91:a2:cf:f5:3a:e8:9f:61:b9:8f:9f:be:
77:20:f1:2b:d3:81:76:6a:d3:82:1d:8d:d6:c6:bc:18:ae:12:
ad:11:82:ba:8e:99:51:6c:d6:e2:77:37:40:5d:23:0e:d4:d3:
c4:26:52:e8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICUL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDYw
NTU0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhBRkUzNzI1Qjc3RkRC
RTlCRjQ4RjJGMUQzNThFNjBGN0IyQ0VFMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe+O3eFJd05sq/j6ZUP/b2q+nYWUVyigkKhGMtxWPh5RmybxIN
e24rxG96CdTOPDuKX5EycJjF653w02cN6RjSK9YM+caXms68ir4zQG3glNlMhgus
uIvRnwbzpnRwpAjOZn0elJcTKBMUxf7CuYi2DVWNX1nttv9zUp+RUjGIpp2vCMEG
ICKA3A1OV6SRsapGRaLOIZhZ043au6O2fjUoaFr0bOkfgu9wzAbDecmP21yT65Gi
nEqo9q1bRlVqjIr8K0YP3gST3Y9DCzI4Ti5fKu5lIVbUIj3p0ypcaedqKWd1iqhD
4v+/DCq+aitAvN28Jmz3PuOZEMbz72JsjqmzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUiv43Jbd/2+m/SPLx01jmD3ss7hIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2l2NDNKYmRfMi1tX1NQ
THgwMWptRDNzczdoSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAHLxVYMEHm6/6o1kkjS7qPtwBQM4obgUk
4/0wnfHyFocOmm3pwnfK4jTklD1cixKJeVXzBJIwWjvaiurRJqGnj5Radgqm7XV8
nYhXPRmarNM82Hm5JZEz+7GeXn+9AfO4iWpm/7w+IIkDdyGO4fRfSM+GUAsast1g
ej3SLo8VT/L6g4BmcCnZXecC54Z26RsQkKl7xKiieSuCu0baRMGImOMN4BbdSgrr
WFILSW2fkwznzbi7P8KhwV8AJqp0eEzw+FpH0DbnWmEmjF5ckaLP9Tron2G5j5++
dyDxK9OBdmrTgh2N1sa8GK4SrRGCuo6ZUWzW4nc3QF0jDtTTxCZS6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org