Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vbcNyw0JJWQpiZOW-nboM2cKbHI.roa
File: vbcNyw0JJWQpiZOW-nboM2cKbHI.roa (raw, json)
Hash identifier: pZYkcSYxxYolBss4HsymPMx0HtFipnAkI6RazVlzmU0=
Subject key identifier: BD:B7:0D:CB:0D:09:25:64:29:89:93:96:FA:76:E8:33:67:0A:6C:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 426E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vbcNyw0JJWQpiZOW-nboM2cKbHI.roa
Signing time: Wed 17 Apr 2024 03:52:58 +0000
ROA not before: Wed 17 Apr 2024 03:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17006 (0x426e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 03:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BDB70DCB0D09256429899396FA76E833670A6C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:9f:10:e4:f2:72:6f:38:a1:43:d7:45:93:
06:8f:ad:c0:53:9d:cc:7c:44:10:67:f8:99:f6:79:
28:10:38:e0:50:d7:c0:08:9c:2e:68:7c:31:65:00:
95:56:01:62:40:a1:dd:36:95:59:bc:21:dc:18:ab:
7f:d6:de:50:56:5a:55:35:bc:0a:f6:15:a9:b6:45:
cf:ab:dd:57:48:9d:75:62:c3:90:c4:25:69:a8:75:
37:05:32:9c:fa:7d:96:65:8a:71:99:3b:f8:4e:b1:
05:c3:fd:ce:d8:ec:27:37:e9:2b:a8:bb:98:04:41:
34:f8:ef:11:a1:72:e1:58:f5:31:c6:08:f8:00:e3:
e0:31:f8:49:48:84:a6:d1:4b:a8:50:04:7c:ba:ef:
57:33:4f:7d:44:5d:de:2c:f5:91:0b:f9:ff:43:2c:
49:b6:24:26:4a:1a:62:93:d1:86:bd:a9:f8:65:d1:
8d:a8:d4:d6:d3:d4:4b:95:cb:de:6e:b7:0b:a9:33:
ad:52:6f:c8:87:b6:94:7d:1d:91:31:53:0f:87:7a:
af:4e:48:40:41:1b:eb:ae:d4:5e:4c:f1:63:d6:76:
05:1e:32:9a:72:29:69:6e:1c:52:df:19:97:85:44:
b8:68:c4:f5:9b:fb:21:82:98:2b:e6:9c:12:7f:c6:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:0D:CB:0D:09:25:64:29:89:93:96:FA:76:E8:33:67:0A:6C:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vbcNyw0JJWQpiZOW-nboM2cKbHI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:1a:6c:30:de:c0:c4:58:57:2e:27:e0:56:38:a3:66:13:b3:
8a:28:2a:bf:d7:bd:5a:81:16:e6:60:20:40:41:0f:1a:9e:33:
39:d9:32:5b:d1:e5:71:29:50:e2:76:95:b5:e2:35:ee:ea:f5:
4c:21:b0:0b:23:ab:1b:12:71:28:75:81:06:d5:fb:e0:b0:66:
db:1a:56:6e:bf:1c:e1:c1:9c:2b:51:db:f3:ce:bc:36:13:6e:
0d:8d:62:10:a3:10:dc:ca:f1:dd:08:af:92:f7:17:05:0e:8e:
2e:25:a5:7a:ba:47:eb:d5:fe:53:4c:18:15:0e:ae:19:92:c0:
5f:2e:6d:20:11:5a:43:31:1a:f3:c4:bd:9c:40:a8:10:6b:2c:
79:ee:40:a5:ac:e6:03:3c:79:99:e0:5d:76:ef:93:8b:5e:57:
86:a0:15:46:b0:c3:f2:01:90:0c:27:9c:b6:a4:7c:04:9c:34:
0f:11:66:0f:c1:e0:d8:0f:62:39:a3:07:dc:e5:33:07:8d:57:
b0:0c:47:79:8e:4a:09:b9:8f:ae:89:31:2e:6d:f7:68:ff:98:
af:b4:2f:71:96:07:67:c5:1f:9a:7b:7a:c6:f3:2c:49:e2:fd:
0b:e7:da:62:a0:c6:08:1f:12:a0:31:22:c5:bc:3a:25:b6:9b:
62:4d:b1:b8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
MzUyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJEQjcwRENCMEQwOTI1
NjQyOTg5OTM5NkZBNzZFODMzNjcwQTZDNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaPp8Q5PJybzihQ9dFkwaPrcBTncx8RBBn+Jn2eSgQOOBQ18AI
nC5ofDFlAJVWAWJAod02lVm8IdwYq3/W3lBWWlU1vAr2Fam2Rc+r3VdInXViw5DE
JWmodTcFMpz6fZZlinGZO/hOsQXD/c7Y7Cc36Suou5gEQTT47xGhcuFY9THGCPgA
4+Ax+ElIhKbRS6hQBHy671czT31EXd4s9ZEL+f9DLEm2JCZKGmKT0Ya9qfhl0Y2o
1NbT1EuVy95utwupM61Sb8iHtpR9HZExUw+Heq9OSEBBG+uu1F5M8WPWdgUeMppy
KWluHFLfGZeFRLhoxPWb+yGCmCvmnBJ/xpPLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUvbcNyw0JJWQpiZOW+nboM2cKbHIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZiY055dzBKSldRcGla
T1ctbmJvTTJjS2JISS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAFhpsMN7AxFhXLifgVjijZhOziigqv9e9
WoEW5mAgQEEPGp4zOdkyW9HlcSlQ4naVteI17ur1TCGwCyOrGxJxKHWBBtX74LBm
2xpWbr8c4cGcK1Hb8868NhNuDY1iEKMQ3Mrx3QivkvcXBQ6OLiWlerpH69X+U0wY
FQ6uGZLAXy5tIBFaQzEa88S9nECoEGssee5ApazmAzx5meBddu+Ti15XhqAVRrDD
8gGQDCectqR8BJw0DxFmD8Hg2A9iOaMH3OUzB41XsAxHeY5KCbmProkxLm33aP+Y
r7QvcZYHZ8Ufmnt6xvMsSeL9C+faYqDGCB8SoDEixbw6JbabYk2xuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org