Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u4q_WEjK_KMRVj9hscvIM8W-FLk.roa
File: u4q_WEjK_KMRVj9hscvIM8W-FLk.roa (raw, json)
Hash identifier: tuNo0FpRYykeQaXVXUVS2hrhhjWsOrYU9HypdMUX/TQ=
Subject key identifier: BB:8A:BF:58:48:CA:FC:A3:11:56:3F:61:B1:CB:C8:33:C5:BE:14:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3652
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u4q_WEjK_KMRVj9hscvIM8W-FLk.roa
Signing time: Mon 01 Apr 2024 00:22:10 +0000
ROA not before: Mon 01 Apr 2024 00:22:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13906 (0x3652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 00:22:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB8ABF5848CAFCA311563F61B1CBC833C5BE14B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:9c:ec:63:b3:1a:0c:a3:f4:43:b0:99:f1:
83:c1:cf:31:b7:c6:c4:e5:a6:52:52:1e:c4:a3:99:
86:57:ce:1f:20:e6:2e:15:b7:28:a4:3d:df:f4:45:
de:e7:64:e7:18:42:98:25:ea:83:a2:dc:ab:92:12:
1c:90:31:97:4a:3a:a9:be:58:df:af:e0:9f:e6:f4:
54:be:a5:6f:f4:6f:c5:e6:6f:ed:bd:84:ac:c1:8c:
4a:a7:7e:60:43:00:58:65:b1:05:18:3c:d2:a8:fe:
b1:05:a0:15:08:12:07:2d:ad:ad:45:c2:00:e9:cb:
c8:ab:a5:94:ae:2c:91:11:3c:ca:0d:f8:d6:d1:d5:
06:80:79:b6:f6:b1:9a:24:b0:07:a3:df:dd:02:e7:
f3:c9:4b:94:a1:6b:34:c4:6d:56:c8:8e:1d:ec:d3:
fc:ab:96:05:36:32:7b:7b:49:d9:a3:db:aa:07:49:
e4:fe:33:3a:07:02:e2:56:d2:42:80:70:86:bd:7f:
c4:83:e3:71:bc:a1:2f:f9:1a:53:a9:45:12:71:bb:
5a:0f:3b:de:a0:04:35:86:d1:66:9a:9a:48:03:3c:
0a:97:77:5f:b1:c7:4b:0a:1c:3f:17:83:ac:bb:07:
41:df:ac:1a:09:f5:03:1a:11:8f:83:8b:c0:a4:69:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:BF:58:48:CA:FC:A3:11:56:3F:61:B1:CB:C8:33:C5:BE:14:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u4q_WEjK_KMRVj9hscvIM8W-FLk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:68:fb:ba:6c:de:7c:0f:76:0f:f7:18:33:4c:b1:2c:92:de:
76:d2:a6:2d:93:ea:46:28:b3:e9:8e:38:06:75:9b:cc:34:13:
15:31:b9:09:5b:26:bb:6c:39:44:10:32:4c:b6:50:ab:65:0d:
eb:40:1e:e2:e8:b8:d8:8a:6a:ab:0e:95:cc:d3:57:27:07:2a:
89:60:c7:74:32:5b:c6:3f:5e:f8:ec:aa:53:c7:e9:14:c2:61:
e8:d5:0d:46:4c:70:a2:62:09:d9:a7:11:03:c9:81:2d:d7:28:
7f:e1:57:b8:6a:5f:44:3a:21:82:2c:63:ac:50:33:14:07:00:
8c:7c:bd:a4:b9:7b:b2:6b:13:33:10:cc:29:8a:77:86:6c:e0:
fa:ca:14:f7:21:25:9a:ae:c0:70:bb:3c:ff:e8:3c:c1:e3:64:
48:b8:53:5a:65:37:3d:86:eb:ac:36:ad:95:9f:21:82:9b:b0:
46:40:db:f8:59:b1:fc:ec:75:6e:84:a8:62:96:be:42:52:36:
43:0c:45:e4:e4:5f:0c:a1:b8:b4:ab:d7:68:36:fc:81:fe:cb:
d2:5a:d5:65:2a:6b:e8:c3:34:3f:8f:34:d6:19:ae:b9:0f:06:
f6:37:23:69:d8:cc:63:f2:cd:13:bc:38:5f:d8:17:b8:63:9a:
a7:cd:35:a5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICNlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEw
MDIyMTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJCOEFCRjU4NDhDQUZD
QTMxMTU2M0Y2MUIxQ0JDODMzQzVCRTE0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChV5zsY7MaDKP0Q7CZ8YPBzzG3xsTlplJSHsSjmYZXzh8g5i4V
tyikPd/0Rd7nZOcYQpgl6oOi3KuSEhyQMZdKOqm+WN+v4J/m9FS+pW/0b8Xmb+29
hKzBjEqnfmBDAFhlsQUYPNKo/rEFoBUIEgctra1FwgDpy8irpZSuLJERPMoN+NbR
1QaAebb2sZoksAej390C5/PJS5ShazTEbVbIjh3s0/yrlgU2Mnt7Sdmj26oHSeT+
MzoHAuJW0kKAcIa9f8SD43G8oS/5GlOpRRJxu1oPO96gBDWG0WaamkgDPAqXd1+x
x0sKHD8Xg6y7B0HfrBoJ9QMaEY+Di8CkaamZAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUu4q/WEjK/KMRVj9hscvIM8W+FLkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3U0cV9XRWpLX0tNUlZq
OWhzY3ZJTThXLUZMay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEABmj7umzefA92D/cYM0yxLJLedtKmLZPq
Riiz6Y44BnWbzDQTFTG5CVsmu2w5RBAyTLZQq2UN60Ae4ui42Ipqqw6VzNNXJwcq
iWDHdDJbxj9e+OyqU8fpFMJh6NUNRkxwomIJ2acRA8mBLdcof+FXuGpfRDohgixj
rFAzFAcAjHy9pLl7smsTMxDMKYp3hmzg+soU9yElmq7AcLs8/+g8weNkSLhTWmU3
PYbrrDatlZ8hgpuwRkDb+Fmx/Ox1boSoYpa+QlI2QwxF5ORfDKG4tKvXaDb8gf7L
0lrVZSpr6MM0P4801hmuuQ8G9jcjadjMY/LNE7w4X9gXuGOap801pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:16 2024 by rpki-client on console-ams.rpki-client.org