Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vzR4Y3JKp1cWKf4uWdxA-b_ET8w.roa
File: vzR4Y3JKp1cWKf4uWdxA-b_ET8w.roa (raw, json)
Hash identifier: AMt2k/Hde/esycAMcNQhMmviV3Yv0okzHRpb/fD7+bk=
Subject key identifier: BF:34:78:63:72:4A:A7:57:16:29:FE:2E:59:DC:40:F9:BF:C4:4F:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 487E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vzR4Y3JKp1cWKf4uWdxA-b_ET8w.roa
Signing time: Thu 25 Apr 2024 05:53:17 +0000
ROA not before: Thu 25 Apr 2024 05:53:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18558 (0x487e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 05:53:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF347863724AA7571629FE2E59DC40F9BFC44FCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:20:3d:03:13:4a:3b:b0:af:2e:07:dd:26:
41:eb:29:4d:f0:0d:16:31:f3:1b:a4:bc:f5:52:3a:
4a:33:31:8d:8f:75:91:78:32:93:51:db:0d:a1:17:
ca:7b:25:e4:2f:4f:45:e4:4d:58:ec:0c:47:df:fc:
b7:e7:aa:9c:01:e6:44:11:76:95:71:1f:b4:2c:1a:
df:c9:54:fa:8b:eb:47:9b:7a:b1:ac:ea:02:5b:3c:
eb:2e:69:25:ff:3e:11:5b:bc:76:a2:73:ef:e5:ee:
2b:83:08:86:fb:3a:b1:08:8f:c3:f8:09:7a:16:9f:
26:7a:93:37:3d:be:d9:76:5a:58:81:35:87:74:6d:
3c:88:4f:9b:4d:58:2e:f1:6d:4b:ca:30:b2:c1:f3:
0d:24:68:02:e3:de:fa:8e:9b:e1:57:6f:46:e8:9f:
d5:98:78:ac:91:00:97:6e:81:70:c4:a9:b3:b4:ee:
51:cf:4c:60:a9:b1:a6:bc:cb:d8:a1:67:b8:01:b1:
05:e0:f0:6d:9a:3b:a4:5a:62:c1:6c:5c:9e:7b:78:
b4:ba:88:18:a9:91:1d:0b:8c:4e:47:57:87:51:7f:
cd:b9:07:cb:6b:a8:59:cf:a0:12:f9:98:98:b7:1a:
5c:69:0e:b5:1a:ed:c3:43:4e:37:42:58:1c:5b:50:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:78:63:72:4A:A7:57:16:29:FE:2E:59:DC:40:F9:BF:C4:4F:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vzR4Y3JKp1cWKf4uWdxA-b_ET8w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:74:cb:c2:59:72:b9:f5:de:48:b4:90:78:d3:8e:cf:c0:aa:
55:db:8d:b5:27:1e:5c:39:b5:ee:c3:c6:36:ff:97:cb:c6:29:
8d:8c:46:cd:20:87:cf:9c:c5:9a:9c:c8:07:75:1f:5e:4e:26:
da:be:a1:02:97:14:7b:03:42:52:7e:59:c6:bb:26:ac:10:8f:
7d:3c:15:50:98:50:2e:28:cc:4a:d5:35:e8:a6:d6:76:f5:f0:
4c:16:39:8b:0b:6a:dd:c8:cd:b1:5f:ff:0d:0e:3e:f0:8a:2e:
c8:8c:6d:fb:4f:7b:d2:76:e8:9d:3e:d6:93:e5:3e:fc:67:74:
49:57:1b:6c:f3:d2:00:a1:e7:0f:8c:b6:95:bc:49:f3:9a:6a:
64:c3:49:b6:0e:c6:c6:35:36:01:f8:b9:47:2c:2c:b5:e3:f3:
89:23:35:9c:65:99:2b:2c:2f:0d:c7:ea:0f:0e:ee:0a:f2:d8:
6b:ea:86:e4:76:18:46:57:f4:eb:ee:ef:0e:38:bc:5e:64:13:
e2:fa:e2:07:b2:19:27:5d:67:31:f8:ba:54:bd:93:53:d6:fb:
01:95:93:67:97:6d:1d:44:0d:bf:49:b6:db:29:8f:2a:48:3c:
7c:9c:69:06:a3:75:32:27:28:c8:64:93:65:d2:b4:fb:34:b0:
2f:bb:86:d4
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICSH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUw
NTUzMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJGMzQ3ODYzNzI0QUE3
NTcxNjI5RkUyRTU5REM0MEY5QkZDNDRGQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEjyA9AxNKO7CvLgfdJkHrKU3wDRYx8xukvPVSOkozMY2PdZF4
MpNR2w2hF8p7JeQvT0XkTVjsDEff/LfnqpwB5kQRdpVxH7QsGt/JVPqL60eberGs
6gJbPOsuaSX/PhFbvHaic+/l7iuDCIb7OrEIj8P4CXoWnyZ6kzc9vtl2WliBNYd0
bTyIT5tNWC7xbUvKMLLB8w0kaALj3vqOm+FXb0bon9WYeKyRAJdugXDEqbO07lHP
TGCpsaa8y9ihZ7gBsQXg8G2aO6RaYsFsXJ57eLS6iBipkR0LjE5HV4dRf825B8tr
qFnPoBL5mJi3GlxpDrUa7cNDTjdCWBxbUO8jAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUvzR4Y3JKp1cWKf4uWdxA+b/ET8wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3Z6UjRZM0pLcDFjV0tm
NHVXZHhBLWJfRVQ4dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAOXTLwllyufXeSLSQeNOOz8CqVduNtSce
XDm17sPGNv+Xy8YpjYxGzSCHz5zFmpzIB3UfXk4m2r6hApcUewNCUn5ZxrsmrBCP
fTwVUJhQLijMStU16KbWdvXwTBY5iwtq3cjNsV//DQ4+8IouyIxt+0970nbonT7W
k+U+/Gd0SVcbbPPSAKHnD4y2lbxJ85pqZMNJtg7GxjU2Afi5RywstePziSM1nGWZ
KywvDcfqDw7uCvLYa+qG5HYYRlf06+7vDji8XmQT4vriB7IZJ11nMfi6VL2TU9b7
AZWTZ5dtHUQNv0m22ymPKkg8fJxpBqN1MicoyGSTZdK0+zSwL7uG1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org