Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/s6MHiDPxL3EuSzmk7CEqMF-Xa1c.roa
File: s6MHiDPxL3EuSzmk7CEqMF-Xa1c.roa (raw, json)
Hash identifier: 7mlcS/p4lhItc7+42jFUjE7Rd53HW2DAqe+zev98gbU=
Subject key identifier: B3:A3:07:88:33:F1:2F:71:2E:4B:39:A4:EC:21:2A:30:5F:97:6B:57
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55CE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s6MHiDPxL3EuSzmk7CEqMF-Xa1c.roa
Signing time: Sun 12 May 2024 23:54:06 +0000
ROA not before: Sun 12 May 2024 23:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21966 (0x55ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 23:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B3A3078833F12F712E4B39A4EC212A305F976B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:50:79:1e:11:06:f0:f6:50:a8:d0:91:9a:
d4:05:2c:34:af:cc:71:a1:20:25:5e:76:ac:16:53:
6f:b8:e9:77:37:ee:0b:b9:12:8b:c1:3c:a9:72:84:
1d:95:8b:90:0f:09:39:b7:33:24:c9:d9:dc:10:c6:
7b:53:b8:09:9d:b2:e9:f1:42:b6:06:9f:15:ac:5e:
db:5a:5e:8d:cd:2d:1e:a0:21:67:71:16:c1:c2:2d:
a4:0b:9b:fc:80:e8:03:d7:8a:2e:f9:cc:23:9b:2f:
a1:95:60:11:2f:80:db:5e:6f:f9:72:7d:f0:3a:18:
c9:d9:f1:60:a3:d7:a3:55:7f:77:f5:5f:7d:5f:77:
ac:6c:36:94:e1:3b:77:23:11:d6:21:97:26:55:ba:
48:b7:77:20:89:88:b2:77:cb:05:c7:b6:1b:36:8a:
7a:f1:4d:29:68:9b:1e:10:63:2c:85:8a:35:10:40:
ce:df:3b:ab:70:53:2f:5f:92:0b:4c:7c:17:d9:56:
2f:e9:d2:4d:98:e6:6a:23:46:f3:b8:ef:bc:97:90:
b9:de:6e:b8:22:03:69:a9:da:53:bc:72:c0:72:7c:
f3:73:2e:cd:62:21:25:ed:e0:4f:1c:ca:fe:2b:92:
83:d7:a6:06:a2:9c:01:84:df:fa:c0:15:39:61:8a:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:07:88:33:F1:2F:71:2E:4B:39:A4:EC:21:2A:30:5F:97:6B:57
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s6MHiDPxL3EuSzmk7CEqMF-Xa1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:c0:f9:db:de:02:6b:13:01:6d:43:19:eb:d5:08:1c:cc:f6:
33:8d:8f:11:56:90:36:03:15:1e:7f:0c:ed:78:e4:3e:30:08:
11:f8:c9:e6:c3:3a:1d:1c:98:d7:f5:6f:0c:b7:c7:56:e2:17:
4c:d2:98:d3:f7:df:75:69:fc:55:ac:d7:f1:4c:ad:89:8c:60:
4d:12:e7:69:1f:38:44:ef:71:d2:77:1b:36:57:37:76:5f:4b:
a9:8e:20:54:fe:23:02:0c:31:6f:20:a5:07:cd:91:2a:c2:d5:
f3:7c:62:88:56:19:ad:07:2b:21:1e:2f:72:96:a1:a0:f7:49:
8a:83:8f:bf:5a:2e:02:27:d5:57:5c:32:ca:21:12:35:b5:84:
f8:73:0a:70:f4:5b:8c:e9:24:94:ff:2c:b0:54:3c:58:39:a0:
d8:db:82:39:7c:84:cd:b5:da:d4:1d:fb:a3:de:c9:8c:96:19:
e6:4c:c2:19:3a:75:74:cc:fa:5d:50:68:7f:81:ae:a8:8d:42:
7d:33:cc:b7:94:b7:37:45:7a:75:e7:5e:ab:14:6d:50:1b:03:
23:91:58:3e:ff:8f:e8:22:16:ae:de:88:a2:4a:d2:ce:a3:1c:
a3:ff:0f:47:31:af:1f:f2:b2:77:dd:e4:24:72:f2:7d:72:70:
84:c5:e2:39
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTIy
MzU0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIzQTMwNzg4MzNGMTJG
NzEyRTRCMzlBNEVDMjEyQTMwNUY5NzZCNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF8lB5HhEG8PZQqNCRmtQFLDSvzHGhICVedqwWU2+46Xc37gu5
EovBPKlyhB2Vi5APCTm3MyTJ2dwQxntTuAmdsunxQrYGnxWsXttaXo3NLR6gIWdx
FsHCLaQLm/yA6APXii75zCObL6GVYBEvgNteb/lyffA6GMnZ8WCj16NVf3f1X31f
d6xsNpThO3cjEdYhlyZVuki3dyCJiLJ3ywXHths2inrxTSlomx4QYyyFijUQQM7f
O6twUy9fkgtMfBfZVi/p0k2Y5mojRvO477yXkLnebrgiA2mp2lO8csByfPNzLs1i
ISXt4E8cyv4rkoPXpgainAGE3/rAFTlhigULAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUs6MHiDPxL3EuSzmk7CEqMF+Xa1cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3M2TUhpRFB4TDNFdVN6
bWs3Q0VxTUYtWGExYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAs8D5294CaxMBbUMZ69UIHMz2M42PEVaQ
NgMVHn8M7XjkPjAIEfjJ5sM6HRyY1/VvDLfHVuIXTNKY0/ffdWn8VazX8UytiYxg
TRLnaR84RO9x0ncbNlc3dl9LqY4gVP4jAgwxbyClB82RKsLV83xiiFYZrQcrIR4v
cpahoPdJioOPv1ouAifVV1wyyiESNbWE+HMKcPRbjOkklP8ssFQ8WDmg2NuCOXyE
zbXa1B37o97JjJYZ5kzCGTp1dMz6XVBof4GuqI1CfTPMt5S3N0V6dedeqxRtUBsD
I5FYPv+P6CIWrt6IokrSzqMco/8PRzGvH/Kyd93kJHLyfXJwhMXiOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org