Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ul-tZxF105zO9YhqHLR5NyjPo9U.roa
File: ul-tZxF105zO9YhqHLR5NyjPo9U.roa (raw, json)
Hash identifier: iwykYnz+cwxGC8KRGFXiJltzMzP2Cjy6ArkYKeh4GKU=
Subject key identifier: BA:5F:AD:67:11:75:D3:9C:CE:F5:88:6A:1C:B4:79:37:28:CF:A3:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 561A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ul-tZxF105zO9YhqHLR5NyjPo9U.roa
Signing time: Mon 13 May 2024 09:24:08 +0000
ROA not before: Mon 13 May 2024 09:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22042 (0x561a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 09:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BA5FAD671175D39CCEF5886A1CB4793728CFA3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:bc:ce:01:71:cc:d8:77:22:fe:38:e5:4c:
40:50:cb:8f:6d:8e:de:c5:f7:1a:40:c2:d3:4f:00:
24:c4:30:1d:dd:db:a4:bc:a9:33:eb:34:85:68:bb:
52:8f:4e:08:59:0e:cc:1f:63:33:e9:8d:ef:f0:82:
cc:c1:64:37:4d:ff:fd:61:af:a3:46:13:74:19:a2:
c3:46:70:b8:f4:14:e8:6a:75:1b:31:d6:9a:50:39:
2e:3d:90:70:79:0f:2c:70:20:b8:83:87:64:5a:06:
68:94:dd:9d:d0:8a:90:1a:34:48:5a:21:22:ad:af:
a9:c8:38:13:f8:14:08:76:4b:9b:c0:3a:10:96:e6:
9f:c9:7b:e0:97:c8:39:1c:7b:5e:8a:b8:15:17:16:
39:b4:0a:22:fd:36:76:e0:09:b1:dc:a7:0f:41:38:
d0:80:36:47:d3:c5:e7:c6:a5:02:76:67:68:49:60:
92:1e:1b:00:9b:9f:12:30:10:8a:2f:99:fa:31:59:
0a:9b:81:f0:74:0e:97:63:ad:46:32:3c:35:84:44:
6f:41:33:37:9c:2c:95:4e:59:6c:7d:6a:1b:45:55:
3a:99:71:5f:ec:d6:a9:fd:56:59:4c:a3:af:92:93:
db:46:67:99:b4:37:0d:3d:57:38:a3:82:4d:e2:fb:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:AD:67:11:75:D3:9C:CE:F5:88:6A:1C:B4:79:37:28:CF:A3:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ul-tZxF105zO9YhqHLR5NyjPo9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:5d:c8:eb:26:8f:fc:bf:c9:16:c9:93:e8:6b:57:a0:a7:fc:
b4:59:6a:a9:f2:d9:98:2b:14:d6:9c:79:17:aa:23:f0:d1:cf:
15:d0:59:bc:dd:02:ce:36:b5:47:a9:2b:87:4b:ce:f4:5c:71:
9a:4b:74:c8:b2:99:9f:91:22:6c:1a:fc:4b:6a:72:a7:eb:44:
f9:0b:e7:26:92:97:93:d4:36:16:4e:25:ed:37:dc:eb:93:94:
ac:64:10:ed:e0:ae:0b:68:43:18:99:70:8e:27:7f:e4:9b:ed:
2a:5a:be:bc:03:46:e9:b7:1a:4c:3c:d8:5e:60:19:03:16:0c:
cf:f1:0d:e4:06:fc:03:23:f8:28:79:c5:71:4b:f7:c9:b2:ae:
06:79:f3:be:d7:28:c9:b3:f7:0e:63:c7:ec:a0:ca:53:b6:0a:
f7:8e:32:c8:25:1a:25:ea:e2:e1:9d:12:19:d0:be:36:2c:b2:
12:e9:e5:2c:57:f7:e1:50:df:5a:36:0e:72:71:07:ed:35:bc:
ad:ca:e7:10:19:9d:b7:f5:16:9c:2a:ba:89:96:5f:73:11:56:
96:04:5d:c2:a3:0a:49:b3:cb:c6:0d:22:2b:06:12:d1:c1:2e:
4f:5b:0f:81:28:d0:15:fa:99:37:97:2b:bb:24:4c:ba:9c:b0:
97:8c:f9:ff
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICVhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTMw
OTI0MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJBNUZBRDY3MTE3NUQz
OUNDRUY1ODg2QTFDQjQ3OTM3MjhDRkEzRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDodbzOAXHM2Hci/jjlTEBQy49tjt7F9xpAwtNPACTEMB3d26S8
qTPrNIVou1KPTghZDswfYzPpje/wgszBZDdN//1hr6NGE3QZosNGcLj0FOhqdRsx
1ppQOS49kHB5DyxwILiDh2RaBmiU3Z3QipAaNEhaISKtr6nIOBP4FAh2S5vAOhCW
5p/Je+CXyDkce16KuBUXFjm0CiL9NnbgCbHcpw9BONCANkfTxefGpQJ2Z2hJYJIe
GwCbnxIwEIovmfoxWQqbgfB0DpdjrUYyPDWERG9BMzecLJVOWWx9ahtFVTqZcV/s
1qn9VllMo6+Sk9tGZ5m0Nw09Vzijgk3i+1GBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUul+tZxF105zO9YhqHLR5NyjPo9UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3VsLXRaeEYxMDV6TzlZ
aHFITFI1TnlqUG85VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAuF3I6yaP/L/JFsmT6GtXoKf8tFlqqfLZ
mCsU1px5F6oj8NHPFdBZvN0Czja1R6krh0vO9Fxxmkt0yLKZn5EibBr8S2pyp+tE
+QvnJpKXk9Q2Fk4l7Tfc65OUrGQQ7eCuC2hDGJlwjid/5JvtKlq+vANG6bcaTDzY
XmAZAxYMz/EN5Ab8AyP4KHnFcUv3ybKuBnnzvtcoybP3DmPH7KDKU7YK944yyCUa
Jeri4Z0SGdC+NiyyEunlLFf34VDfWjYOcnEH7TW8rcrnEBmdt/UWnCq6iZZfcxFW
lgRdwqMKSbPLxg0iKwYS0cEuT1sPgSjQFfqZN5cruyRMupywl4z5/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org