Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xpk8zGb61g5lbAIf-cu2v0EeVdk.roa
File: xpk8zGb61g5lbAIf-cu2v0EeVdk.roa (raw, json)
Hash identifier: W/VZ4B42zGMcJJdbKDVnrTbRxXEn/qSnFr/x5UxLB3E=
Subject key identifier: C6:99:3C:CC:66:FA:D6:0E:65:6C:02:1F:F9:CB:B6:BF:41:1E:55:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C02
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xpk8zGb61g5lbAIf-cu2v0EeVdk.roa
Signing time: Mon 08 Apr 2024 14:22:34 +0000
ROA not before: Mon 08 Apr 2024 14:22:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15362 (0x3c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 14:22:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6993CCC66FAD60E656C021FF9CBB6BF411E55D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:69:1a:24:a2:7e:b6:3a:b9:9f:09:3c:f4:
6e:16:08:18:93:9a:f4:3a:c3:af:99:0a:f2:3e:97:
95:5b:54:74:03:5a:1b:a0:c9:ed:ad:53:40:cf:9d:
b1:b7:55:0b:42:4e:21:f3:b2:27:4b:ec:3e:dc:7c:
f4:11:64:74:f9:72:88:23:ed:19:7c:7f:80:2b:27:
31:8e:54:47:f9:f3:b1:a8:d7:85:de:df:87:33:d3:
a9:21:ef:90:fa:43:10:9b:0b:91:6a:4b:a1:4c:cc:
ef:d0:d5:25:eb:ee:22:ae:2a:7b:e3:93:3d:5d:61:
22:cd:79:61:b2:62:94:a8:f8:e0:13:14:2d:f2:3f:
ab:ba:34:e7:f0:e3:d2:47:c8:38:95:7e:16:f5:d8:
85:1e:4b:37:96:1b:4b:3b:3f:b1:db:c9:45:b3:86:
4a:76:b7:99:e1:7f:e4:ae:4d:23:83:ef:c0:41:d7:
54:56:95:aa:70:4a:42:35:c3:b3:2b:d9:96:81:4f:
6d:83:a3:82:80:ea:34:f3:91:97:ca:e3:4e:17:73:
a0:cc:c4:1d:24:a0:90:8c:97:74:c7:09:8f:93:cf:
ae:84:ee:76:86:ff:bf:22:79:a5:77:9d:8d:56:71:
b7:86:8b:de:7d:2e:57:8e:5c:af:33:3d:65:70:6e:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:3C:CC:66:FA:D6:0E:65:6C:02:1F:F9:CB:B6:BF:41:1E:55:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xpk8zGb61g5lbAIf-cu2v0EeVdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:f8:89:6e:eb:e7:28:ce:d1:bb:7b:63:ec:89:8f:d2:2d:b5:
30:6b:85:23:e3:cd:31:8f:16:43:8d:1f:07:64:61:6b:98:97:
5a:50:a7:dd:2f:bb:3a:d0:e7:24:35:8d:dc:57:40:fe:32:c7:
6d:fd:5b:11:b5:bc:bc:83:2a:01:f6:32:b2:87:48:71:c8:e9:
16:21:ec:a9:b7:69:ec:58:6e:81:be:84:1e:72:36:79:6a:84:
5c:b2:5d:14:61:80:23:17:cb:c2:54:a7:e0:d2:b6:99:a1:c3:
fb:ce:f0:11:80:c3:9e:3c:27:bf:66:d6:07:92:ec:c4:c2:1e:
3b:39:58:b3:83:23:25:99:c7:ec:93:27:36:60:20:c2:32:b4:
77:7a:92:50:58:47:3e:c6:1e:0a:84:d2:8f:ee:d8:5d:e5:b4:
64:0a:6e:f4:78:45:c3:87:54:df:c3:b8:56:15:4d:2e:35:c3:
f8:72:16:81:6e:b7:89:f5:c2:e8:7c:84:c1:06:54:7c:95:fd:
b3:f2:a8:44:d4:29:8d:ea:e0:8c:3a:ec:14:82:73:23:69:2a:
af:4f:d6:cc:2f:fe:c6:31:c7:ff:7a:90:96:e8:de:d9:51:7c:
5c:18:d9:33:81:5b:11:ad:cc:de:6e:7f:2d:71:99:0f:53:c8:
94:22:be:97
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICPAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgx
NDIyMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM2OTkzQ0NDNjZGQUQ2
MEU2NTZDMDIxRkY5Q0JCNkJGNDExRTU1RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLu2kaJKJ+tjq5nwk89G4WCBiTmvQ6w6+ZCvI+l5VbVHQDWhug
ye2tU0DPnbG3VQtCTiHzsidL7D7cfPQRZHT5cogj7Rl8f4ArJzGOVEf587Go14Xe
34cz06kh75D6QxCbC5FqS6FMzO/Q1SXr7iKuKnvjkz1dYSLNeWGyYpSo+OATFC3y
P6u6NOfw49JHyDiVfhb12IUeSzeWG0s7P7HbyUWzhkp2t5nhf+SuTSOD78BB11RW
lapwSkI1w7Mr2ZaBT22Do4KA6jTzkZfK404Xc6DMxB0koJCMl3THCY+Tz66E7naG
/78ieaV3nY1WcbeGi959LleOXK8zPWVwbibxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUxpk8zGb61g5lbAIf+cu2v0EeVdkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3hwazh6R2I2MWc1bGJB
SWYtY3UydjBFZVZkay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAEfiJbuvnKM7Ru3tj7ImP0i21MGuFI+PN
MY8WQ40fB2Rha5iXWlCn3S+7OtDnJDWN3FdA/jLHbf1bEbW8vIMqAfYysodIccjp
FiHsqbdp7Fhugb6EHnI2eWqEXLJdFGGAIxfLwlSn4NK2maHD+87wEYDDnjwnv2bW
B5LsxMIeOzlYs4MjJZnH7JMnNmAgwjK0d3qSUFhHPsYeCoTSj+7YXeW0ZApu9HhF
w4dU38O4VhVNLjXD+HIWgW63ifXC6HyEwQZUfJX9s/KoRNQpjergjDrsFIJzI2kq
r0/WzC/+xjHH/3qQluje2VF8XBjZM4FbEa3M3m5/LXGZD1PIlCK+lw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org