Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/k0aTnCv1G7kArm5GEasV0Rwe2Gs.roa
File: k0aTnCv1G7kArm5GEasV0Rwe2Gs.roa (raw, json)
Hash identifier: HcMkbnzefxlkWMr+7iaf0DX648G5B1yLR0vg4/3J6z0=
Subject key identifier: 93:46:93:9C:2B:F5:1B:B9:00:AE:6E:46:11:AB:15:D1:1C:1E:D8:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 438A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k0aTnCv1G7kArm5GEasV0Rwe2Gs.roa
Signing time: Thu 18 Apr 2024 15:23:01 +0000
ROA not before: Thu 18 Apr 2024 15:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17290 (0x438a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 15:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9346939C2BF51BB900AE6E4611AB15D11C1ED86B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:70:2e:bd:80:4b:02:87:89:97:14:35:03:
30:85:69:3a:34:33:06:a2:a9:a3:e8:46:01:89:a8:
08:22:75:3a:83:0a:76:b7:c9:f9:f6:6b:c8:e7:f8:
96:64:74:58:54:36:30:2a:80:c7:70:d8:57:b2:23:
1b:03:7a:0e:fe:19:93:01:ac:64:86:b4:59:53:b5:
05:40:3e:a2:c8:94:b6:fe:56:6b:2d:19:3a:92:6b:
55:b9:4c:d7:7a:ed:02:59:64:73:9f:91:a6:e9:a5:
3e:a8:c8:d6:58:3e:ce:c7:0f:84:0a:1f:3b:69:6f:
0d:ad:95:d6:65:b3:5f:d3:1f:f5:ed:e8:c4:f3:d1:
0b:75:4b:38:94:4a:e5:ab:ac:a4:57:b3:66:15:a7:
06:5f:ac:a4:6e:35:41:ca:28:47:de:3c:9e:1c:b5:
89:7e:7e:87:d8:ec:88:a0:1a:7d:9b:1c:fa:b5:d3:
8d:51:e1:69:5d:47:45:dc:07:f3:eb:9d:f6:4d:4b:
34:5b:08:3e:d3:b6:f6:9d:e5:a7:9c:e7:90:f1:62:
9e:6e:58:53:0c:eb:2b:4b:6a:ba:cc:4e:18:b1:7c:
35:f9:c2:60:62:eb:eb:ec:d7:52:93:2d:85:03:3e:
f2:cb:d7:5c:22:0f:62:04:a0:8d:7f:b7:1f:55:3d:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:46:93:9C:2B:F5:1B:B9:00:AE:6E:46:11:AB:15:D1:1C:1E:D8:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/k0aTnCv1G7kArm5GEasV0Rwe2Gs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:5e:e0:8c:3d:9a:64:a7:5a:36:7c:84:bb:73:11:67:6f:b4:
f6:84:d7:4d:3a:ac:a0:67:10:33:93:4e:ea:2d:c5:32:e0:2f:
d6:65:15:e5:48:3e:8b:a3:7f:e0:d9:53:91:0c:c5:0e:50:91:
fb:08:eb:f1:6a:b8:1d:b2:bb:c0:73:cf:e9:6b:4c:50:2c:69:
2b:c6:12:d1:04:f8:3b:90:ac:33:46:b7:36:e6:52:7c:14:b2:
d5:c8:d3:e4:26:ba:0c:a4:63:28:43:dd:b7:ce:10:7c:b9:9d:
a3:a2:9c:e7:e1:7e:2a:74:b1:49:3d:71:6a:68:a1:08:ca:91:
ac:d5:95:c6:73:1b:a2:ea:93:ef:52:4d:47:1e:ed:09:a2:c7:
14:d1:2a:66:d5:1c:9d:5f:71:93:5e:50:dd:be:59:35:f3:fc:
2f:21:9e:f7:ea:b2:93:3b:f1:ab:81:b7:b0:7b:6f:c1:d0:5f:
6d:e1:52:49:a2:c8:1c:33:ee:0f:14:30:65:c3:b7:d8:f4:88:
48:93:87:6a:e2:34:74:d4:35:9f:d9:d3:2e:42:cd:7a:62:4d:
7e:8f:1e:75:05:c8:98:d3:d5:de:6b:c3:8b:06:eb:1a:56:5c:
44:0d:40:22:50:6a:3e:0c:02:50:9a:11:4e:b8:52:7e:45:4e:
db:6a:e2:40
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQ4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgx
NTIzMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkzNDY5MzlDMkJGNTFC
QjkwMEFFNkU0NjExQUIxNUQxMUMxRUQ4NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDi3AuvYBLAoeJlxQ1AzCFaTo0MwaiqaPoRgGJqAgidTqDCna3
yfn2a8jn+JZkdFhUNjAqgMdw2FeyIxsDeg7+GZMBrGSGtFlTtQVAPqLIlLb+Vmst
GTqSa1W5TNd67QJZZHOfkabppT6oyNZYPs7HD4QKHztpbw2tldZls1/TH/Xt6MTz
0Qt1SziUSuWrrKRXs2YVpwZfrKRuNUHKKEfePJ4ctYl+fofY7IigGn2bHPq1041R
4WldR0XcB/PrnfZNSzRbCD7Ttvad5aec55DxYp5uWFMM6ytLarrMThixfDX5wmBi
6+vs11KTLYUDPvLL11wiD2IEoI1/tx9VPfwPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUk0aTnCv1G7kArm5GEasV0Rwe2GswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2swYVRuQ3YxRzdrQXJt
NUdFYXNWMFJ3ZTJHcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAHF7gjD2aZKdaNnyEu3MRZ2+09oTXTTqs
oGcQM5NO6i3FMuAv1mUV5Ug+i6N/4NlTkQzFDlCR+wjr8Wq4HbK7wHPP6WtMUCxp
K8YS0QT4O5CsM0a3NuZSfBSy1cjT5Ca6DKRjKEPdt84QfLmdo6Kc5+F+KnSxST1x
amihCMqRrNWVxnMbouqT71JNRx7tCaLHFNEqZtUcnV9xk15Q3b5ZNfP8LyGe9+qy
kzvxq4G3sHtvwdBfbeFSSaLIHDPuDxQwZcO32PSISJOHauI0dNQ1n9nTLkLNemJN
fo8edQXImNPV3mvDiwbrGlZcRA1AIlBqPgwCUJoRTrhSfkVO22riQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org