Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/viZ2bpJyqFqgDvLzIv2NqCvx8DQ.roa
File: viZ2bpJyqFqgDvLzIv2NqCvx8DQ.roa (raw, json)
Hash identifier: vU2/5YB7wjeGQBVZA5ed1uCQV/X9X5/Z3V87z5Jo18w=
Subject key identifier: BE:26:76:6E:92:72:A8:5A:A0:0E:F2:F3:22:FD:8D:A8:2B:F1:F0:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 391E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/viZ2bpJyqFqgDvLzIv2NqCvx8DQ.roa
Signing time: Thu 04 Apr 2024 17:52:21 +0000
ROA not before: Thu 04 Apr 2024 17:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14622 (0x391e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 17:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BE26766E9272A85AA00EF2F322FD8DA82BF1F034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:a6:0e:3e:54:22:2b:bf:8c:88:f3:6a:db:
89:92:a0:b7:28:cc:ab:2f:58:ab:fb:ea:d6:71:22:
17:9f:c3:7f:27:3a:c9:2f:5d:a9:48:8f:84:58:5c:
bd:b5:d3:eb:03:a8:7a:42:88:da:30:96:35:90:71:
4a:eb:a0:49:f3:d8:29:8d:5e:e0:d2:b1:fd:ea:80:
44:5c:9a:81:a3:cb:96:3a:70:05:c0:5b:d8:5b:f4:
54:14:c4:3f:9d:f1:54:a0:b3:74:b7:c3:f8:77:6c:
2c:44:26:71:95:9f:3f:95:e1:b5:e4:00:39:9c:a0:
be:2a:a9:9c:99:e5:6d:7d:cb:66:0d:52:19:89:79:
1a:b3:dd:e3:8a:da:64:d3:90:56:a9:b6:9d:9d:dd:
0d:f0:b2:f1:22:10:82:3d:3a:82:54:26:ad:b2:32:
45:72:b9:ec:82:b9:de:c5:e2:2a:0d:ce:e3:7e:52:
12:1d:d8:44:38:90:61:12:80:be:d5:03:8d:64:5e:
49:ba:e0:ef:61:f0:ef:dd:e3:ba:c2:6c:bc:50:61:
17:75:45:27:f1:6a:e3:a9:84:4b:2b:76:87:3e:80:
58:6a:cd:72:e7:da:f0:4d:31:d0:5d:53:e6:a9:7e:
27:8a:18:af:7d:15:a1:51:59:66:0f:2f:74:1c:1d:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:76:6E:92:72:A8:5A:A0:0E:F2:F3:22:FD:8D:A8:2B:F1:F0:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/viZ2bpJyqFqgDvLzIv2NqCvx8DQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:02:71:46:b3:7a:01:5e:47:3b:cf:9f:fd:56:d9:82:4a:77:
7c:ec:2b:a7:ee:f2:eb:da:56:9d:70:5b:77:2b:4a:d0:28:45:
1d:1d:59:bb:00:af:d3:b8:4c:08:d3:bc:38:c3:15:82:dd:04:
28:91:d3:86:b9:9c:bf:cd:84:e2:0a:10:9a:43:df:3d:7c:81:
bb:ab:f0:13:b2:78:bf:bf:dd:19:57:46:41:9a:19:01:64:8e:
63:cd:07:74:f5:77:98:d7:60:95:7e:4d:97:7c:95:b0:ce:ae:
a1:ea:46:50:d8:f5:5b:5f:0f:15:53:29:f2:5b:c8:80:25:43:
6e:4a:45:7a:76:7a:18:a0:5d:90:71:cd:90:c3:2a:b1:dd:7b:
22:c9:c8:89:58:fa:32:7d:50:09:87:ff:e4:25:15:a3:df:b6:
d4:51:bb:10:57:37:e3:79:a5:d7:49:be:ca:7f:db:85:20:86:
32:47:d8:23:de:9a:ab:60:9e:b2:ac:6c:40:7f:d6:eb:d9:4f:
eb:00:d9:ca:1c:a1:a3:74:ab:a6:30:7f:2c:04:5e:51:7e:0d:
38:be:68:c4:fd:5a:92:80:81:85:4a:e8:05:dc:7a:a3:d5:78:
c7:b6:2c:7b:2c:8b:09:f2:1e:b9:f4:f5:0c:73:3f:1e:84:61:
fd:de:68:37
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQx
NzUyMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJFMjY3NjZFOTI3MkE4
NUFBMDBFRjJGMzIyRkQ4REE4MkJGMUYwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1LKYOPlQiK7+MiPNq24mSoLcozKsvWKv76tZxIhefw38nOskv
XalIj4RYXL210+sDqHpCiNowljWQcUrroEnz2CmNXuDSsf3qgERcmoGjy5Y6cAXA
W9hb9FQUxD+d8VSgs3S3w/h3bCxEJnGVnz+V4bXkADmcoL4qqZyZ5W19y2YNUhmJ
eRqz3eOK2mTTkFaptp2d3Q3wsvEiEII9OoJUJq2yMkVyueyCud7F4ioNzuN+UhId
2EQ4kGESgL7VA41kXkm64O9h8O/d47rCbLxQYRd1RSfxauOphEsrdoc+gFhqzXLn
2vBNMdBdU+apfieKGK99FaFRWWYPL3QcHe+LAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUviZ2bpJyqFqgDvLzIv2NqCvx8DQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZpWjJicEp5cUZxZ0R2
THpJdjJOcUN2eDhEUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAcAJxRrN6AV5HO8+f/VbZgkp3fOwrp+7y
69pWnXBbdytK0ChFHR1ZuwCv07hMCNO8OMMVgt0EKJHThrmcv82E4goQmkPfPXyB
u6vwE7J4v7/dGVdGQZoZAWSOY80HdPV3mNdglX5Nl3yVsM6uoepGUNj1W18PFVMp
8lvIgCVDbkpFenZ6GKBdkHHNkMMqsd17IsnIiVj6Mn1QCYf/5CUVo9+21FG7EFc3
43ml10m+yn/bhSCGMkfYI96aq2CesqxsQH/W69lP6wDZyhyho3SrpjB/LAReUX4N
OL5oxP1akoCBhUroBdx6o9V4x7YseyyLCfIeufT1DHM/HoRh/d5oNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org