Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rV3mUehOuoAsNb_g3pvCwuVgPgY.roa
File: rV3mUehOuoAsNb_g3pvCwuVgPgY.roa (raw, json)
Hash identifier: SP4MkunA7EQn9R6vQ5PbWChL83b6i5+v8d+WWhs01fg=
Subject key identifier: AD:5D:E6:51:E8:4E:BA:80:2C:35:BF:E0:DE:9B:C2:C2:E5:60:3E:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C5A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rV3mUehOuoAsNb_g3pvCwuVgPgY.roa
Signing time: Tue 30 Apr 2024 09:23:32 +0000
ROA not before: Tue 30 Apr 2024 09:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19546 (0x4c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 09:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AD5DE651E84EBA802C35BFE0DE9BC2C2E5603E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:48:ad:50:75:e4:2f:39:cd:36:2d:86:37:
7a:d5:a2:97:ca:c6:17:82:d2:1e:e8:5c:36:d8:1a:
36:8e:b4:af:1e:91:79:65:3a:27:72:ed:ec:46:b5:
d1:3b:1f:be:cc:a3:5c:c6:04:55:36:e5:df:bd:dc:
3a:2b:56:6b:bd:eb:73:aa:45:18:6a:6c:dd:ce:af:
05:7c:2b:80:ec:99:42:62:31:28:db:2c:9b:8e:ea:
10:7a:48:a5:0e:d6:23:e1:84:6f:ab:cb:12:1a:08:
51:9e:20:38:cf:b2:d1:3b:17:9e:2c:94:2e:8d:ef:
3d:51:e4:fa:39:73:1c:47:04:2a:d1:14:ae:4c:55:
bc:ff:f7:04:7f:56:e2:2a:77:39:c2:6a:e4:77:9d:
78:b1:94:4c:db:19:cd:3d:8d:8a:f3:76:15:b4:b7:
d5:ef:62:60:6b:ba:3a:e7:9e:7c:66:20:4f:91:c5:
59:cd:c1:7b:36:90:7a:79:b6:69:68:b4:63:9a:39:
c4:41:bb:cd:61:e2:31:2e:a4:e8:20:3a:f3:df:35:
fe:c1:fd:2f:fa:01:e0:49:ee:99:5b:4d:f6:02:04:
a8:6e:34:c2:b8:2b:6a:45:dc:47:d6:b7:de:5a:b3:
55:4a:47:a9:83:11:72:ff:55:df:48:d3:fa:86:8c:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:E6:51:E8:4E:BA:80:2C:35:BF:E0:DE:9B:C2:C2:E5:60:3E:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rV3mUehOuoAsNb_g3pvCwuVgPgY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:8a:1a:c6:db:20:80:e3:74:69:84:dd:f2:52:47:11:e6:93:
c6:dc:7b:b3:ef:cc:50:e5:5a:8a:24:f3:76:06:c8:d8:8c:a8:
b6:e1:a6:a2:94:7a:d7:00:1c:3f:d1:10:93:18:fd:67:32:ed:
6e:ea:30:02:8f:e8:4a:ae:53:55:eb:6e:66:5e:75:37:6b:1a:
83:16:34:7a:55:78:36:d7:7b:fb:8d:cc:d5:ba:99:32:7e:fc:
cc:e2:6a:5e:ab:f5:26:6a:0f:32:20:5c:29:33:13:56:8c:e2:
c3:0b:f8:c6:98:ef:eb:82:2f:31:48:90:99:82:7e:97:4c:bd:
30:6f:e5:9a:08:36:d4:9a:3a:ae:37:e1:b9:33:3a:d7:b1:a6:
a6:b3:14:5f:cb:10:ce:47:b7:8b:48:9c:ae:03:bb:03:69:c9:
0a:03:d9:cd:ee:38:bc:7f:a0:5d:fe:48:3d:02:27:97:7c:83:
59:c1:28:e9:ec:8d:96:ed:d8:d4:1a:f4:94:8a:69:95:a0:30:
c3:7b:29:8a:ce:0f:c5:88:e3:e6:7c:41:c3:f3:35:a4:ed:69:
bb:58:0f:6a:8c:61:ae:e3:a6:5b:b5:a6:f6:35:ca:98:77:c3:
8a:3b:89:cb:83:9a:af:81:c8:01:18:55:6f:d7:25:b5:7b:32:
6e:b0:86:9a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MzAw
OTIzMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFENURFNjUxRTg0RUJB
ODAyQzM1QkZFMERFOUJDMkMyRTU2MDNFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvQkitUHXkLznNNi2GN3rVopfKxheC0h7oXDbYGjaOtK8ekXll
Oidy7exGtdE7H77Mo1zGBFU25d+93DorVmu963OqRRhqbN3OrwV8K4DsmUJiMSjb
LJuO6hB6SKUO1iPhhG+ryxIaCFGeIDjPstE7F54slC6N7z1R5Po5cxxHBCrRFK5M
Vbz/9wR/VuIqdznCauR3nXixlEzbGc09jYrzdhW0t9XvYmBrujrnnnxmIE+RxVnN
wXs2kHp5tmlotGOaOcRBu81h4jEupOggOvPfNf7B/S/6AeBJ7plbTfYCBKhuNMK4
K2pF3EfWt95as1VKR6mDEXL/Vd9I0/qGjPDtAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrV3mUehOuoAsNb/g3pvCwuVgPgYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3JWM21VZWhPdW9Bc05i
X2czcHZDd3VWZ1BnWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAuIoaxtsggON0aYTd8lJHEeaTxtx7s+/M
UOVaiiTzdgbI2IyotuGmopR61wAcP9EQkxj9ZzLtbuowAo/oSq5TVetuZl51N2sa
gxY0elV4Ntd7+43M1bqZMn78zOJqXqv1JmoPMiBcKTMTVoziwwv4xpjv64IvMUiQ
mYJ+l0y9MG/lmgg21Jo6rjfhuTM617GmprMUX8sQzke3i0icrgO7A2nJCgPZze44
vH+gXf5IPQInl3yDWcEo6eyNlu3Y1Br0lIpplaAww3spis4PxYjj5nxBw/M1pO1p
u1gPaoxhruOmW7Wm9jXKmHfDijuJy4Oar4HIARhVb9cltXsybrCGmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:49 2024 by rpki-client on console-fra.rpki-client.org