Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wf1J0ayJXmFOhxU-hx8jqx_ypPY.roa
File: wf1J0ayJXmFOhxU-hx8jqx_ypPY.roa (raw, json)
Hash identifier: zxmaGhWZw393C75GJ31HH5z63eH8Xj8VnP2c0Jb72Lg=
Subject key identifier: C1:FD:49:D1:AC:89:5E:61:4E:87:15:3E:87:1F:23:AB:1F:F2:A4:F6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A2E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wf1J0ayJXmFOhxU-hx8jqx_ypPY.roa
Signing time: Sat 06 Apr 2024 03:52:27 +0000
ROA not before: Sat 06 Apr 2024 03:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14894 (0x3a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 03:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1FD49D1AC895E614E87153E871F23AB1FF2A4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:b1:98:48:f7:11:da:2d:0a:81:1a:51:f8:
04:a3:c7:c8:8f:cf:37:1a:75:b7:7a:16:ce:75:41:
4b:b6:33:81:df:09:98:6a:a4:d2:c2:a4:95:d2:fa:
d2:66:81:5d:09:4e:a8:30:1b:b9:cd:2b:b4:2c:39:
88:50:1d:76:73:91:35:bb:46:dc:ae:12:76:0b:28:
8f:95:50:9c:7d:3c:2b:3e:fc:2e:52:5e:f7:c5:f6:
80:5e:23:75:17:22:d6:ce:97:7a:a0:5d:11:05:61:
24:b8:11:20:39:d5:e2:7f:e3:48:74:50:e4:b5:33:
e3:58:f4:3a:52:4c:0b:8c:d2:9c:84:97:16:e8:a1:
a5:94:34:a2:55:71:f7:50:74:3a:1a:a5:3f:43:ef:
55:df:d9:d1:92:89:cb:1a:57:fb:17:9f:54:9a:60:
64:9a:35:ab:ea:8a:c6:e0:50:e6:f6:67:b3:37:39:
a6:99:d2:a2:ed:73:61:01:ab:8b:5d:7c:77:e7:2d:
f8:89:f9:67:a6:0e:92:8a:6b:79:f4:68:16:d4:38:
fe:4e:15:0e:52:df:ae:11:36:ca:9c:c4:a7:d9:a5:
cd:53:02:b4:11:76:92:3d:7a:79:3a:63:d8:73:9a:
37:3f:ef:0c:84:02:3b:51:ca:05:17:29:6d:f0:e6:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:49:D1:AC:89:5E:61:4E:87:15:3E:87:1F:23:AB:1F:F2:A4:F6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wf1J0ayJXmFOhxU-hx8jqx_ypPY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:ad:cd:89:7f:50:fc:a9:ed:78:64:05:f7:0b:0f:7b:f5:40:
3a:49:81:ee:8e:88:5b:ad:98:b1:18:1f:35:ac:33:31:c7:32:
30:07:ab:cf:04:f1:88:94:7f:a4:bb:01:25:0f:39:c4:db:47:
12:85:82:79:49:f2:0f:52:ee:a5:ae:2d:50:2f:a4:d4:4f:46:
e6:ca:28:8f:87:d5:b8:f8:34:70:9b:d3:56:39:d8:69:2a:ab:
86:37:3e:67:0c:c0:50:84:0f:05:d2:85:7a:6c:97:b4:6e:32:
0c:c3:5e:86:06:9e:bc:28:bc:1a:c2:75:05:c9:4f:25:ed:3d:
4b:40:31:89:0a:dd:85:c7:31:a1:e1:a3:a9:4f:bc:99:1d:32:
2a:9c:24:e6:97:a6:0a:a8:11:fc:94:ab:8c:da:50:3c:a4:d3:
09:73:8c:4f:58:16:55:b1:27:ab:28:44:37:a6:96:f4:e1:57:
76:21:51:c7:20:a6:65:35:a8:b6:71:df:73:15:d2:f7:7f:97:
0d:9a:a7:b8:c8:b2:14:3c:53:77:cb:a2:2b:7f:3b:49:07:aa:
bf:9b:b6:b1:57:d4:b5:12:1a:40:8f:46:be:e9:10:7f:aa:d9:
70:ec:bb:71:46:a5:73:f3:13:0d:39:76:cd:b2:18:b3:78:b8:
30:c6:8e:19
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDYw
MzUyMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMxRkQ0OUQxQUM4OTVF
NjE0RTg3MTUzRTg3MUYyM0FCMUZGMkE0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLfrGYSPcR2i0KgRpR+ASjx8iPzzcadbd6Fs51QUu2M4HfCZhq
pNLCpJXS+tJmgV0JTqgwG7nNK7QsOYhQHXZzkTW7RtyuEnYLKI+VUJx9PCs+/C5S
XvfF9oBeI3UXItbOl3qgXREFYSS4ESA51eJ/40h0UOS1M+NY9DpSTAuM0pyElxbo
oaWUNKJVcfdQdDoapT9D71Xf2dGSicsaV/sXn1SaYGSaNavqisbgUOb2Z7M3OaaZ
0qLtc2EBq4tdfHfnLfiJ+WemDpKKa3n0aBbUOP5OFQ5S364RNsqcxKfZpc1TArQR
dpI9enk6Y9hzmjc/7wyEAjtRygUXKW3w5k71AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUwf1J0ayJXmFOhxU+hx8jqx/ypPYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3dmMUowYXlKWG1GT2h4
VS1oeDhqcXhfeXBQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAZa3NiX9Q/KnteGQF9wsPe/VAOkmB7o6I
W62YsRgfNawzMccyMAerzwTxiJR/pLsBJQ85xNtHEoWCeUnyD1Lupa4tUC+k1E9G
5sooj4fVuPg0cJvTVjnYaSqrhjc+ZwzAUIQPBdKFemyXtG4yDMNehgaevCi8GsJ1
BclPJe09S0AxiQrdhccxoeGjqU+8mR0yKpwk5pemCqgR/JSrjNpQPKTTCXOMT1gW
VbEnqyhEN6aW9OFXdiFRxyCmZTWotnHfcxXS93+XDZqnuMiyFDxTd8uiK387SQeq
v5u2sVfUtRIaQI9GvukQf6rZcOy7cUalc/MTDTl2zbIYs3i4MMaOGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org