Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qf0PJ2g8OSQSUhfg-UJnHEgTqkk.roa
File: qf0PJ2g8OSQSUhfg-UJnHEgTqkk.roa (raw, json)
Hash identifier: SEnqibyAu8+GlY0J4B4YEvfoAPZBGaD7AcQ3uRKjmsg=
Subject key identifier: A9:FD:0F:27:68:3C:39:24:12:52:17:E0:F9:42:67:1C:48:13:AA:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5692
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qf0PJ2g8OSQSUhfg-UJnHEgTqkk.roa
Signing time: Tue 14 May 2024 00:24:08 +0000
ROA not before: Tue 14 May 2024 00:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22162 (0x5692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 00:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9FD0F27683C3924125217E0F942671C4813AA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:46:ac:c7:46:d1:97:c4:e4:7c:ef:6a:be:
6c:d8:f2:3a:1e:63:87:95:f2:6a:c5:76:54:eb:64:
05:a0:da:cc:95:a9:8f:77:1a:dc:83:8a:4a:00:41:
35:95:c2:b2:8e:b7:6a:3c:e7:35:d1:16:dc:85:e1:
79:7e:05:57:53:55:3f:f8:63:b7:27:57:be:32:a1:
88:0f:db:91:a0:aa:a2:7a:39:a3:8b:fb:9f:26:58:
f4:eb:4e:48:f2:f1:c4:a0:ea:96:ea:68:cd:15:14:
bb:a5:87:e6:0a:e4:1a:86:be:66:d9:e0:2b:34:23:
58:9e:8c:f1:c6:7d:0e:e9:4b:db:8b:fb:2d:6b:59:
27:df:f8:b4:65:0a:78:c9:64:7f:60:18:6e:b6:95:
28:3f:5e:c4:72:75:77:c0:9a:1e:b4:47:d9:23:2c:
b3:09:48:15:35:52:4a:fc:9f:d9:ca:07:33:38:52:
30:65:58:3d:b3:84:6f:b7:f8:78:1e:e9:f0:4c:78:
59:4f:cb:17:21:4c:6a:e4:c3:01:d4:e9:f8:5f:cb:
57:7a:cb:a2:b8:07:fe:42:7f:d3:a9:a6:f4:9d:cd:
92:a0:98:ed:3d:03:69:ff:b7:8c:35:f5:34:16:1f:
fe:21:dc:d2:e2:32:e1:1c:76:d3:1e:a5:d7:d5:78:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:0F:27:68:3C:39:24:12:52:17:E0:F9:42:67:1C:48:13:AA:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qf0PJ2g8OSQSUhfg-UJnHEgTqkk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:c3:9f:0c:47:ce:9d:13:7d:ce:c8:5d:9d:a7:be:de:a1:56:
65:d9:46:eb:39:56:bc:2d:00:6a:42:8b:87:3b:7c:75:70:00:
c5:46:44:60:88:8b:ae:ae:32:0c:0f:78:93:cc:7a:95:9a:c5:
ac:88:66:68:4e:4e:64:57:cb:73:89:01:8c:75:fa:31:f5:34:
1b:fc:99:bc:9b:31:3b:53:4d:7a:4f:bc:91:12:76:8c:45:6c:
d6:5c:c4:10:fb:f2:6b:bc:7a:26:52:36:0f:fc:7a:0a:b2:02:
b2:a6:5d:8e:ee:79:66:7a:ce:fa:8c:4e:3d:9b:be:5e:f6:8e:
9c:3b:a5:71:f4:61:ac:3f:63:f4:bc:f6:c4:dd:1e:55:7b:77:
f6:19:53:69:9e:5d:4b:87:1d:25:41:54:46:b1:b4:19:0e:54:
a4:fd:92:e3:e4:6e:55:66:42:b2:9d:97:ed:7d:d8:66:13:51:
9f:78:b3:51:f0:42:18:61:1a:51:b2:46:e1:b9:44:de:a4:fa:
7a:91:3a:9a:47:40:64:9a:5d:ba:02:65:2e:df:41:98:85:65:
a1:19:69:cc:4e:df:ee:b7:fa:6a:6d:7f:28:74:b5:f2:23:1a:
a5:e5:6f:50:59:c2:56:50:00:7c:42:45:fc:2a:d1:d2:d3:58:
13:90:50:93
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTQw
MDI0MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE5RkQwRjI3NjgzQzM5
MjQxMjUyMTdFMEY5NDI2NzFDNDgxM0FBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz5Uasx0bRl8TkfO9qvmzY8joeY4eV8mrFdlTrZAWg2syVqY93
GtyDikoAQTWVwrKOt2o85zXRFtyF4Xl+BVdTVT/4Y7cnV74yoYgP25GgqqJ6OaOL
+58mWPTrTkjy8cSg6pbqaM0VFLulh+YK5BqGvmbZ4Cs0I1iejPHGfQ7pS9uL+y1r
WSff+LRlCnjJZH9gGG62lSg/XsRydXfAmh60R9kjLLMJSBU1Ukr8n9nKBzM4UjBl
WD2zhG+3+Hge6fBMeFlPyxchTGrkwwHU6fhfy1d6y6K4B/5Cf9OppvSdzZKgmO09
A2n/t4w19TQWH/4h3NLiMuEcdtMepdfVePCXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqf0PJ2g8OSQSUhfg+UJnHEgTqkkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3FmMFBKMmc4T1NRU1Vo
ZmctVUpuSEVnVHFray5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAqsOfDEfOnRN9zshdnae+3qFWZdlG6zlW
vC0AakKLhzt8dXAAxUZEYIiLrq4yDA94k8x6lZrFrIhmaE5OZFfLc4kBjHX6MfU0
G/yZvJsxO1NNek+8kRJ2jEVs1lzEEPvya7x6JlI2D/x6CrICsqZdju55ZnrO+oxO
PZu+XvaOnDulcfRhrD9j9Lz2xN0eVXt39hlTaZ5dS4cdJUFURrG0GQ5UpP2S4+Ru
VWZCsp2X7X3YZhNRn3izUfBCGGEaUbJG4blE3qT6epE6mkdAZJpdugJlLt9BmIVl
oRlpzE7f7rf6am1/KHS18iMapeVvUFnCVlAAfEJF/CrR0tNYE5BQkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org