Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jJK990qqQ4sX6CcLr5-BbpANz2w.roa
File: jJK990qqQ4sX6CcLr5-BbpANz2w.roa (raw, json)
Hash identifier: wkO2CURi+61rmWtzLnoTUemtPOvQ7lQ8t5Ns1Fd+6F0=
Subject key identifier: 8C:92:BD:F7:4A:AA:43:8B:17:E8:27:0B:AF:9F:81:6E:90:0D:CF:6C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jJK990qqQ4sX6CcLr5-BbpANz2w.roa
Signing time: Mon 01 Apr 2024 17:52:12 +0000
ROA not before: Mon 01 Apr 2024 17:52:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14046 (0x36de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 17:52:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8C92BDF74AAA438B17E8270BAF9F816E900DCF6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:7e:bd:1a:ce:e4:88:b7:2a:6c:5d:dd:05:
c1:a5:4e:1e:1f:2e:8e:6b:45:25:51:6d:ea:01:c7:
ba:a2:a5:59:86:02:db:92:d6:67:67:b8:2b:ce:a9:
92:36:ce:72:46:90:6e:8a:3f:2f:27:21:37:a1:7c:
37:ba:da:e5:7c:22:7e:45:65:c3:73:73:df:05:89:
3d:17:14:d3:1e:0f:45:02:f8:40:4b:d7:08:a6:da:
76:92:fb:b6:83:80:95:20:1e:93:ba:2e:f3:de:55:
c3:7c:23:87:c2:2a:d8:39:2d:d1:70:53:5d:60:de:
e5:09:f1:b0:82:1d:7d:7a:43:fa:8a:dd:2e:9c:40:
b8:54:86:46:e2:82:69:f4:3c:ee:be:de:1c:f2:98:
7b:81:e6:f0:06:c3:7b:ed:2e:13:3d:e7:3f:52:81:
b3:3e:f6:e4:64:0e:d0:3c:7b:eb:89:21:89:31:bc:
c8:1d:0b:e4:dc:de:1c:d3:90:14:44:f6:82:0f:31:
0f:e8:60:4f:3c:23:c2:ef:a1:7a:d7:5a:4f:68:6f:
58:a6:1d:bc:b1:64:94:63:98:39:86:91:9d:47:e7:
a8:e2:e8:e6:c0:36:38:99:74:df:6c:18:81:cf:bf:
5f:8a:49:2f:76:6f:e8:94:03:55:42:a9:d1:32:41:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:BD:F7:4A:AA:43:8B:17:E8:27:0B:AF:9F:81:6E:90:0D:CF:6C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jJK990qqQ4sX6CcLr5-BbpANz2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:ab:25:de:0a:4b:d9:b3:64:9a:72:99:81:f9:64:e4:d0:63:
ba:9c:46:cb:a8:7a:66:15:31:fc:16:fa:22:1f:fc:39:ec:50:
54:8a:73:17:f5:d9:7c:4c:10:33:5c:3c:e9:6d:43:c8:54:8b:
0f:5c:e5:92:31:fd:1c:53:3c:8e:8e:0f:fd:e2:5a:79:5e:e8:
9f:07:0b:01:d6:18:f5:13:72:7a:99:80:b9:f2:8f:5d:af:53:
d8:a0:88:a2:c4:d3:c2:9e:9e:ba:2d:ed:05:7e:49:28:b1:d5:
26:c9:c7:3a:8e:7b:03:c9:ea:21:7d:e3:9a:7b:a1:10:6e:b3:
88:18:a6:19:07:0b:93:e9:44:95:e6:40:cb:9f:78:e1:a3:1e:
b3:88:9d:0f:3e:3b:03:cf:4f:12:96:72:24:f0:e1:e7:53:cd:
bf:27:20:2a:67:86:c2:d2:61:47:60:8c:33:35:f5:a5:a3:06:
ac:2d:75:e2:b0:e0:0f:2a:9d:e9:05:a0:2d:e0:90:e1:ee:01:
d2:7b:41:86:1c:a8:bf:6e:d4:93:9e:b7:de:3c:63:84:e8:55:
31:27:8d:2c:b3:04:d5:f1:2d:c5:ae:33:c3:08:02:9c:36:a5:
c6:86:97:3f:02:3a:e3:e5:c6:96:d8:55:81:dd:37:25:bb:1e:
75:92:16:5f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICNt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEx
NzUyMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhDOTJCREY3NEFBQTQz
OEIxN0U4MjcwQkFGOUY4MTZFOTAwRENGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfnn69Gs7kiLcqbF3dBcGlTh4fLo5rRSVRbeoBx7qipVmGAtuS
1mdnuCvOqZI2znJGkG6KPy8nITehfDe62uV8In5FZcNzc98FiT0XFNMeD0UC+EBL
1wim2naS+7aDgJUgHpO6LvPeVcN8I4fCKtg5LdFwU11g3uUJ8bCCHX16Q/qK3S6c
QLhUhkbigmn0PO6+3hzymHuB5vAGw3vtLhM95z9SgbM+9uRkDtA8e+uJIYkxvMgd
C+Tc3hzTkBRE9oIPMQ/oYE88I8LvoXrXWk9ob1imHbyxZJRjmDmGkZ1H56ji6ObA
NjiZdN9sGIHPv1+KSS92b+iUA1VCqdEyQSK5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUjJK990qqQ4sX6CcLr5+BbpANz2wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2pKSzk5MHFxUTRzWDZD
Y0xyNS1CYnBBTnoydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAt6sl3gpL2bNkmnKZgflk5NBjupxGy6h6
ZhUx/Bb6Ih/8OexQVIpzF/XZfEwQM1w86W1DyFSLD1zlkjH9HFM8jo4P/eJaeV7o
nwcLAdYY9RNyepmAufKPXa9T2KCIosTTwp6eui3tBX5JKLHVJsnHOo57A8nqIX3j
mnuhEG6ziBimGQcLk+lEleZAy5944aMes4idDz47A89PEpZyJPDh51PNvycgKmeG
wtJhR2CMMzX1paMGrC114rDgDyqd6QWgLeCQ4e4B0ntBhhyov27Uk5633jxjhOhV
MSeNLLME1fEtxa4zwwgCnDalxoaXPwI64+XGlthVgd03JbsedZIWXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org