Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/svKDWTW-HQ0KFx7w37kAfLFeBZc.roa
File: svKDWTW-HQ0KFx7w37kAfLFeBZc.roa (raw, json)
Hash identifier: qTQyjBWCDuKnCpSVLT5q/LjHg6wgWx9xjHBeVv0hjhE=
Subject key identifier: B2:F2:83:59:35:BE:1D:0D:0A:17:1E:F0:DF:B9:00:7C:B1:5E:05:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F4E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/svKDWTW-HQ0KFx7w37kAfLFeBZc.roa
Signing time: Sat 04 May 2024 07:53:50 +0000
ROA not before: Sat 04 May 2024 07:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20302 (0x4f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 07:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B2F2835935BE1D0D0A171EF0DFB9007CB15E0597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:2b:7d:0c:01:a4:97:f7:c7:4e:6f:58:dc:
44:d9:a6:25:00:4b:37:22:4b:0e:bf:be:65:5f:3a:
b4:9a:bc:ef:da:05:a8:6d:91:f9:f3:ac:ba:f9:c5:
db:23:40:08:f7:6c:b0:dd:68:30:c6:f2:71:96:55:
ae:fa:16:d7:c3:da:a3:5f:88:57:57:cf:6a:b7:ea:
a8:3b:6d:62:00:25:52:6a:d3:4f:b0:d3:b6:50:c9:
bc:31:52:ef:79:48:bb:a6:6e:44:53:80:70:02:ee:
c5:ff:a1:af:0e:ac:69:71:0c:96:5a:65:5c:76:8b:
95:47:df:3d:78:f9:e4:38:fc:13:d6:0c:e4:33:43:
f5:b1:76:9e:06:56:ef:18:34:25:67:d8:61:37:c8:
5a:22:67:94:9f:65:09:65:f6:0b:59:41:3c:1f:72:
00:48:34:e4:eb:e7:7e:bd:fa:a5:3d:a3:3a:29:7b:
9a:69:00:ac:ec:05:c8:b5:b8:1f:5a:bb:93:3c:13:
88:b9:ec:9f:f8:56:f7:6d:b5:dd:84:ab:a4:94:00:
d4:f0:b6:28:f6:3e:d6:94:84:8a:82:cd:31:8c:03:
86:8b:d9:9e:89:c3:26:98:c8:d0:3f:74:72:2b:e0:
2c:4e:0c:fa:e9:e7:18:39:89:fb:ec:9e:e6:a1:d9:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:83:59:35:BE:1D:0D:0A:17:1E:F0:DF:B9:00:7C:B1:5E:05:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/svKDWTW-HQ0KFx7w37kAfLFeBZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:28:2d:8e:0a:0a:82:41:01:b8:6f:2d:46:9e:dd:13:49:7e:
48:c2:5e:48:d5:75:63:12:9a:52:e8:49:98:ef:a3:1b:ea:f2:
58:44:b0:be:1c:3d:60:a5:64:85:46:0d:6c:8b:80:5f:81:37:
3d:ff:44:50:4c:d8:31:91:fc:1b:04:8e:26:2e:f3:37:42:60:
1a:d7:21:67:fe:90:a4:c5:2e:2d:fc:48:f5:3b:c9:70:62:2d:
03:10:e5:2d:3b:a0:bd:69:02:43:ec:40:3f:e8:c5:d5:31:4b:
2f:46:2f:c5:80:67:88:4f:01:ce:42:71:68:10:ae:9a:fa:98:
a2:73:96:35:6c:ab:89:34:1a:5a:98:db:10:5d:21:0d:d8:c1:
3b:e3:81:ec:c7:a5:4f:89:b0:44:8a:25:0f:a3:71:e5:b4:aa:
5f:02:13:0b:e2:ca:64:8b:95:f7:eb:5b:71:d5:34:aa:96:c7:
06:c2:e5:ee:65:ea:51:a0:8a:e7:6f:02:0c:90:f1:aa:4a:2d:
8e:c0:85:a7:e8:1b:7b:c5:0b:67:44:e3:37:05:69:e8:4a:4c:
41:e8:8a:95:ef:45:a3:76:ad:e5:ad:c2:dd:a2:60:cb:7d:1b:
40:db:c8:7d:a0:3f:15:a1:30:e8:bb:f1:59:15:7d:6c:e7:72:
1b:62:b1:a3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICT04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQw
NzUzNTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIyRjI4MzU5MzVCRTFE
MEQwQTE3MUVGMERGQjkwMDdDQjE1RTA1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMdSt9DAGkl/fHTm9Y3ETZpiUASzciSw6/vmVfOrSavO/aBaht
kfnzrLr5xdsjQAj3bLDdaDDG8nGWVa76FtfD2qNfiFdXz2q36qg7bWIAJVJq00+w
07ZQybwxUu95SLumbkRTgHAC7sX/oa8OrGlxDJZaZVx2i5VH3z14+eQ4/BPWDOQz
Q/Wxdp4GVu8YNCVn2GE3yFoiZ5SfZQll9gtZQTwfcgBINOTr5369+qU9ozope5pp
AKzsBci1uB9au5M8E4i57J/4Vvdttd2Eq6SUANTwtij2PtaUhIqCzTGMA4aL2Z6J
wyaYyNA/dHIr4CxODPrp5xg5ifvsnuah2fHPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUsvKDWTW+HQ0KFx7w37kAfLFeBZcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3N2S0RXVFctSFEwS0Z4
N3czN2tBZkxGZUJaYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAXSgtjgoKgkEBuG8tRp7dE0l+SMJeSNV1
YxKaUuhJmO+jG+ryWESwvhw9YKVkhUYNbIuAX4E3Pf9EUEzYMZH8GwSOJi7zN0Jg
GtchZ/6QpMUuLfxI9TvJcGItAxDlLTugvWkCQ+xAP+jF1TFLL0YvxYBniE8BzkJx
aBCumvqYonOWNWyriTQaWpjbEF0hDdjBO+OB7MelT4mwRIolD6Nx5bSqXwITC+LK
ZIuV9+tbcdU0qpbHBsLl7mXqUaCK528CDJDxqkotjsCFp+gbe8ULZ0TjNwVp6EpM
QeiKle9Fo3at5a3C3aJgy30bQNvIfaA/FaEw6LvxWRV9bOdyG2Kxow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org