Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ1UIOiIpKKPkLUwE4FzFAS38nY.roa
File: tJ1UIOiIpKKPkLUwE4FzFAS38nY.roa (raw, json)
Hash identifier: lhGs/yw/YjrjSiMS2K1+EZZQSdS1SqW5reVLys7UvA4=
Subject key identifier: B4:9D:54:20:E8:88:A4:A2:8F:90:B5:30:13:81:73:14:04:B7:F2:76
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 428A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ1UIOiIpKKPkLUwE4FzFAS38nY.roa
Signing time: Wed 17 Apr 2024 07:23:26 +0000
ROA not before: Wed 17 Apr 2024 07:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17034 (0x428a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 07:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B49D5420E888A4A28F90B5301381731404B7F276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:14:5b:84:e4:57:a7:4a:9c:8a:9a:28:df:
65:fc:95:33:01:1e:c4:39:fa:60:19:b2:b8:18:74:
b3:80:1b:75:a8:23:b2:de:96:1e:71:e0:a5:6f:3e:
00:d7:a9:ac:13:dd:0a:c1:74:01:5a:e3:53:3f:57:
a0:7c:e1:a9:b4:0f:55:74:af:ae:bc:51:46:3c:fa:
21:eb:48:69:e0:fe:f2:73:d3:47:da:c8:37:2a:95:
14:f3:60:1a:81:e3:95:81:4c:93:74:5f:c8:c9:ed:
1f:5e:53:ab:73:51:f2:8e:a7:eb:3f:e0:55:75:3a:
f2:bd:88:8f:f4:5b:94:2c:a3:4d:e1:55:83:09:44:
74:1e:f5:35:6a:09:bd:6c:61:08:1c:70:ba:84:e0:
fa:b1:aa:29:81:d7:54:9b:f6:b7:1e:d2:1d:5b:17:
25:f8:5c:31:4e:2a:c3:b7:1a:a6:9d:83:aa:56:31:
d0:f4:f5:77:df:50:3d:3d:f5:fa:07:eb:b9:26:1f:
d8:30:88:29:3c:7f:6c:f1:27:fe:39:3f:a2:f4:00:
f1:fa:37:c4:92:db:85:60:e3:32:fb:00:58:8a:e4:
14:17:3d:bf:11:c4:5e:02:4d:03:67:ec:0a:69:da:
35:91:4b:d2:d4:fe:fa:42:a2:ab:c1:92:c4:00:13:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:54:20:E8:88:A4:A2:8F:90:B5:30:13:81:73:14:04:B7:F2:76
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJ1UIOiIpKKPkLUwE4FzFAS38nY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:f0:bb:87:b7:9f:dd:cb:08:0b:60:71:73:13:eb:6e:2a:cf:
dc:80:dc:87:ad:52:7d:a0:15:f5:1b:58:96:6d:40:ee:65:3e:
7e:a5:41:4b:eb:d4:a4:e8:2d:8e:34:04:09:fa:19:b2:84:24:
01:60:52:c4:df:e3:4f:4b:3b:b0:21:b3:ec:a6:6e:11:4c:23:
24:ab:b4:78:d4:51:1f:ea:17:c4:d3:fe:0d:11:56:92:37:44:
43:32:b7:f4:f1:fc:e7:10:d5:cf:00:53:3d:6c:f9:76:9e:f9:
76:a0:52:62:09:83:7e:52:2e:b1:0d:97:4a:54:13:d6:1c:4b:
87:d3:0d:ef:58:ae:70:15:91:50:76:f9:2d:d8:42:ab:02:cc:
68:a8:c4:28:82:05:ef:5b:bf:9d:79:a6:7b:e8:38:2d:48:db:
50:a5:47:e5:ea:a8:04:68:6f:2b:70:4a:0e:bc:ef:a8:e2:cf:
37:82:86:d2:8c:84:3e:b7:cd:b4:48:32:90:32:d1:85:52:ec:
53:47:b2:01:72:0a:37:50:5b:6a:b4:35:0a:97:a9:06:cf:61:
39:83:22:c3:59:d2:90:23:dd:ac:6f:2e:b3:d0:da:74:fb:68:
46:4e:4e:12:64:1c:48:e7:e0:43:11:91:5a:29:f9:d5:24:97:
85:37:44:30
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
NzIzMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0OUQ1NDIwRTg4OEE0
QTI4RjkwQjUzMDEzODE3MzE0MDRCN0YyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOcBRbhORXp0qcipoo32X8lTMBHsQ5+mAZsrgYdLOAG3WoI7Le
lh5x4KVvPgDXqawT3QrBdAFa41M/V6B84am0D1V0r668UUY8+iHrSGng/vJz00fa
yDcqlRTzYBqB45WBTJN0X8jJ7R9eU6tzUfKOp+s/4FV1OvK9iI/0W5Qso03hVYMJ
RHQe9TVqCb1sYQgccLqE4PqxqimB11Sb9rce0h1bFyX4XDFOKsO3Gqadg6pWMdD0
9XffUD099foH67kmH9gwiCk8f2zxJ/45P6L0APH6N8SS24Vg4zL7AFiK5BQXPb8R
xF4CTQNn7App2jWRS9LU/vpCoqvBksQAE/rXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUtJ1UIOiIpKKPkLUwE4FzFAS38nYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3RKMVVJT2lJcEtLUGtM
VXdFNEZ6RkFTMzhuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAu/C7h7ef3csIC2BxcxPrbirP3IDch61S
faAV9RtYlm1A7mU+fqVBS+vUpOgtjjQECfoZsoQkAWBSxN/jT0s7sCGz7KZuEUwj
JKu0eNRRH+oXxNP+DRFWkjdEQzK39PH85xDVzwBTPWz5dp75dqBSYgmDflIusQ2X
SlQT1hxLh9MN71iucBWRUHb5LdhCqwLMaKjEKIIF71u/nXmme+g4LUjbUKVH5eqo
BGhvK3BKDrzvqOLPN4KG0oyEPrfNtEgykDLRhVLsU0eyAXIKN1BbarQ1CpepBs9h
OYMiw1nSkCPdrG8us9DadPtoRk5OEmQcSOfgQxGRWin51SSXhTdEMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:15 2024 by rpki-client on console-ams.rpki-client.org