Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u8BW0pH8RDAn4xTRaiIEDF8LLB0.roa
File: u8BW0pH8RDAn4xTRaiIEDF8LLB0.roa (raw, json)
Hash identifier: HFiyEF+/BEia/aZGPnlITGIl8eprdVdCyWKm+DAJDeM=
Subject key identifier: BB:C0:56:D2:91:FC:44:30:27:E3:14:D1:6A:22:04:0C:5F:0B:2C:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F8A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u8BW0pH8RDAn4xTRaiIEDF8LLB0.roa
Signing time: Sat 04 May 2024 15:23:49 +0000
ROA not before: Sat 04 May 2024 15:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20362 (0x4f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 15:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BBC056D291FC443027E314D16A22040C5F0B2C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:c7:c7:dd:fd:44:14:55:32:40:73:12:42:
2b:dd:4b:20:23:8f:a3:be:24:1a:dc:0c:fe:94:e5:
49:d3:87:ed:9a:d5:da:96:8b:11:04:40:7a:cb:28:
09:e7:bf:cd:d3:b4:10:90:d8:f5:81:91:6b:de:87:
e3:01:26:0c:07:fd:c1:bf:5d:6d:24:7e:6b:49:61:
16:45:ee:1d:c1:f5:71:6a:bf:c8:71:36:c7:f5:ed:
7f:c6:f5:23:70:d1:eb:f0:0d:e7:1b:e1:e4:0e:b5:
78:7f:a3:5d:bc:b9:31:84:77:2e:00:98:9d:eb:20:
d8:c2:96:07:87:a8:3f:b8:ec:7e:55:b7:eb:91:e9:
c4:c7:0e:36:7a:e2:b8:6f:7e:f2:4a:7d:99:7c:29:
f4:f4:da:d0:6a:dc:7d:3d:94:a5:65:bc:94:9f:0a:
bd:7d:85:c4:69:06:9f:ce:5f:a5:87:81:64:a3:70:
34:da:8b:04:02:c0:02:54:e2:72:c6:9c:b9:1c:7e:
8e:d4:d1:52:7b:5e:c3:35:1a:ac:c7:6f:82:47:08:
84:bc:90:ff:c6:bd:ff:13:f9:2f:1d:e6:ab:37:a0:
90:11:ac:be:f6:86:28:5f:b7:3c:43:51:4d:e2:07:
80:38:06:b6:32:ee:39:90:24:5e:e2:5a:0b:af:a6:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:56:D2:91:FC:44:30:27:E3:14:D1:6A:22:04:0C:5F:0B:2C:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u8BW0pH8RDAn4xTRaiIEDF8LLB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:5a:96:2a:d5:22:28:69:e2:60:8d:b1:21:23:08:18:97:ad:
19:e8:f6:3e:3c:ea:17:95:97:33:c4:09:e8:1c:20:37:e5:e1:
60:44:f8:9a:af:55:10:ea:a9:f0:7a:bf:11:13:1f:79:bf:38:
81:a5:b9:2d:4e:1d:cf:23:a4:71:18:6b:e2:f9:9d:9b:f6:e1:
bc:3c:34:68:09:06:ad:d8:78:2c:27:b2:51:83:dc:e3:dc:05:
42:7a:33:73:3f:49:2d:da:75:f0:0f:67:6c:ba:1d:87:a9:94:
69:3d:bf:1a:e9:09:c2:01:55:3e:08:cc:a7:8b:68:bd:fd:28:
af:ef:89:ea:78:46:5b:c0:d8:b6:da:84:ca:1e:99:6c:ba:73:
79:79:2f:b6:89:a3:9d:7b:02:97:c8:1c:16:a3:a2:33:a3:ec:
3f:75:33:b2:83:a4:0e:a9:4a:3c:0e:ec:59:8d:77:b9:5b:85:
c3:4e:40:67:6b:a3:ef:84:bd:84:53:08:56:8a:ab:ec:b3:56:
86:3d:5e:d6:da:24:a7:b8:01:5f:33:ad:22:7b:14:ff:76:82:
00:1a:2f:6a:d6:47:13:38:ee:25:13:45:d2:34:69:36:fa:f6:
ac:b4:76:c7:01:e5:2e:1f:25:e1:07:f8:60:f2:ac:4a:c5:41:
dd:07:4e:34
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICT4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQx
NTIzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJCQzA1NkQyOTFGQzQ0
MzAyN0UzMTREMTZBMjIwNDBDNUYwQjJDMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrwMfH3f1EFFUyQHMSQivdSyAjj6O+JBrcDP6U5UnTh+2a1dqW
ixEEQHrLKAnnv83TtBCQ2PWBkWveh+MBJgwH/cG/XW0kfmtJYRZF7h3B9XFqv8hx
Nsf17X/G9SNw0evwDecb4eQOtXh/o128uTGEdy4AmJ3rINjClgeHqD+47H5Vt+uR
6cTHDjZ64rhvfvJKfZl8KfT02tBq3H09lKVlvJSfCr19hcRpBp/OX6WHgWSjcDTa
iwQCwAJU4nLGnLkcfo7U0VJ7XsM1GqzHb4JHCIS8kP/Gvf8T+S8d5qs3oJARrL72
hihftzxDUU3iB4A4BrYy7jmQJF7iWguvpgyrAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUu8BW0pH8RDAn4xTRaiIEDF8LLB0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3U4QlcwcEg4UkRBbjR4
VFJhaUlFREY4TExCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAjlqWKtUiKGniYI2xISMIGJetGej2Pjzq
F5WXM8QJ6BwgN+XhYET4mq9VEOqp8Hq/ERMfeb84gaW5LU4dzyOkcRhr4vmdm/bh
vDw0aAkGrdh4LCeyUYPc49wFQnozcz9JLdp18A9nbLodh6mUaT2/GukJwgFVPgjM
p4tovf0or++J6nhGW8DYttqEyh6ZbLpzeXkvtomjnXsCl8gcFqOiM6PsP3UzsoOk
DqlKPA7sWY13uVuFw05AZ2uj74S9hFMIVoqr7LNWhj1e1tokp7gBXzOtInsU/3aC
ABovatZHEzjuJRNF0jRpNvr2rLR2xwHlLh8l4Qf4YPKsSsVB3QdONA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org