Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tJvF5fQrgzujtFZ7tExcGaO5Q1o.roa
File: tJvF5fQrgzujtFZ7tExcGaO5Q1o.roa (raw, json)
Hash identifier: sqRz9dv2jV1NLoZ0IvN28NHYos9DIGMCZsQmi2QYOck=
Subject key identifier: B4:9B:C5:E5:F4:2B:83:3B:A3:B4:56:7B:B4:4C:5C:19:A3:B9:43:5A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44EE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJvF5fQrgzujtFZ7tExcGaO5Q1o.roa
Signing time: Sat 20 Apr 2024 11:53:10 +0000
ROA not before: Sat 20 Apr 2024 11:53:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17646 (0x44ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 11:53:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B49BC5E5F42B833BA3B4567BB44C5C19A3B9435A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:02:6a:34:a6:ef:a0:20:c0:79:30:4f:70:
63:ba:ba:d2:57:3c:43:84:0f:f6:ca:00:1b:59:f6:
c0:2a:23:ab:f2:fd:5c:fb:f9:4b:cb:68:42:b1:73:
9b:9f:13:08:fc:68:d6:14:0e:34:0d:7d:62:19:41:
8b:da:5d:7c:3d:62:61:2c:ca:2f:af:96:85:fd:fc:
61:d4:aa:d8:a5:ad:e2:60:6b:ad:0d:19:6b:e2:70:
af:c6:fa:82:88:08:90:0b:ca:a0:02:7d:85:0a:eb:
5b:2a:a7:5c:5c:21:44:15:d5:bb:a8:22:c7:81:d1:
85:73:e5:09:bd:1b:dc:1b:02:bd:84:95:a3:74:81:
1b:1b:e1:73:05:d5:fb:b7:71:d7:bf:96:84:ae:e7:
0d:c3:33:fd:9f:2b:99:f4:fe:9c:a3:e0:88:c0:7d:
de:f0:29:c8:e1:1e:e0:02:23:af:6a:63:a7:00:03:
32:90:1a:34:98:cc:87:80:b7:91:e8:b9:87:92:d5:
b7:32:66:9d:55:6e:3f:3d:17:08:73:70:a9:68:f5:
c2:33:05:1e:2d:02:cb:d3:b6:93:7b:ee:88:7a:86:
d5:45:8e:e6:13:a7:9e:81:be:52:6d:a5:17:06:0c:
fe:e2:b5:e7:37:8f:b6:73:1f:97:71:dc:95:bb:69:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:C5:E5:F4:2B:83:3B:A3:B4:56:7B:B4:4C:5C:19:A3:B9:43:5A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tJvF5fQrgzujtFZ7tExcGaO5Q1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:14:8b:77:dd:b2:a5:f2:05:8f:49:bd:b7:f1:a2:67:d1:79:
ad:90:a6:88:55:a7:d8:8a:c3:89:ad:cc:3b:87:e7:44:7e:2b:
88:20:03:e8:b7:3d:6f:23:62:d7:60:8f:4b:b8:87:35:17:27:
e7:5e:57:ab:ea:41:71:73:2c:de:d9:9e:55:f6:59:8b:cf:60:
51:cf:2c:24:ca:d5:da:6a:2f:be:df:87:6f:4c:af:d1:bf:73:
e3:d7:3c:90:1a:36:a7:1c:42:b3:c2:d7:c8:82:a6:25:36:00:
8a:a2:dc:28:94:cc:e1:09:b2:fb:64:b0:19:3a:a1:19:eb:e4:
43:2c:1a:d9:ea:cd:59:e2:ad:31:cb:da:ec:8c:88:35:ec:59:
e7:23:9d:da:56:23:1d:df:9c:ad:0c:a9:49:0d:f5:a3:20:62:
eb:60:18:b7:2c:65:f6:28:4b:df:ca:c4:53:12:07:e0:b3:70:
dd:b0:bf:1a:d3:fa:ce:d5:da:5d:5d:3e:7d:5f:19:51:87:e8:
76:b7:b9:78:60:fc:44:65:a8:15:9a:76:2f:aa:7a:ca:08:c3:
39:dc:19:d1:38:cb:ec:c9:8d:3c:8b:63:03:d4:24:d4:f0:d5:
76:19:f4:d7:b4:6e:8e:4e:3f:d3:54:34:48:f8:c0:56:ae:8f:
57:a2:f8:b5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICRO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
MTUzMTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI0OUJDNUU1RjQyQjgz
M0JBM0I0NTY3QkI0NEM1QzE5QTNCOTQzNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbKQJqNKbvoCDAeTBPcGO6utJXPEOED/bKABtZ9sAqI6vy/Vz7
+UvLaEKxc5ufEwj8aNYUDjQNfWIZQYvaXXw9YmEsyi+vloX9/GHUqtilreJga60N
GWvicK/G+oKICJALyqACfYUK61sqp1xcIUQV1buoIseB0YVz5Qm9G9wbAr2ElaN0
gRsb4XMF1fu3cde/loSu5w3DM/2fK5n0/pyj4IjAfd7wKcjhHuACI69qY6cAAzKQ
GjSYzIeAt5HouYeS1bcyZp1Vbj89FwhzcKlo9cIzBR4tAsvTtpN77oh6htVFjuYT
p56BvlJtpRcGDP7itec3j7ZzH5dx3JW7aXxlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUtJvF5fQrgzujtFZ7tExcGaO5Q1owHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3RKdkY1ZlFyZ3p1anRG
Wjd0RXhjR2FPNVExby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAAxSLd92ypfIFj0m9t/GiZ9F5rZCmiFWn
2IrDia3MO4fnRH4riCAD6Lc9byNi12CPS7iHNRcn515Xq+pBcXMs3tmeVfZZi89g
Uc8sJMrV2movvt+Hb0yv0b9z49c8kBo2pxxCs8LXyIKmJTYAiqLcKJTM4Qmy+2Sw
GTqhGevkQywa2erNWeKtMcva7IyINexZ5yOd2lYjHd+crQypSQ31oyBi62AYtyxl
9ihL38rEUxIH4LNw3bC/GtP6ztXaXV0+fV8ZUYfodre5eGD8RGWoFZp2L6p6ygjD
OdwZ0TjL7MmNPItjA9Qk1PDVdhn017Rujk4/01Q0SPjAVq6PV6L4tQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org