Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yRSbhh4_KxIcSJwCRuQGsnBKHOE.roa
File: yRSbhh4_KxIcSJwCRuQGsnBKHOE.roa (raw, json)
Hash identifier: u+dSPsXWpVy/ArYYGS1c0CdZQryKhD6htwCW9G/H5yo=
Subject key identifier: C9:14:9B:86:1E:3F:2B:12:1C:48:9C:02:46:E4:06:B2:70:4A:1C:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A72
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yRSbhh4_KxIcSJwCRuQGsnBKHOE.roa
Signing time: Sat 06 Apr 2024 12:22:30 +0000
ROA not before: Sat 06 Apr 2024 12:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14962 (0x3a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 12:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C9149B861E3F2B121C489C0246E406B2704A1CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:10:c4:32:fb:c9:80:7b:b4:7b:67:ae:62:b0:
66:f5:32:53:ae:ca:db:6b:62:8d:21:7b:68:ca:d5:
06:1c:8b:d5:d5:d9:77:f8:3a:c1:35:48:fa:81:81:
c4:e3:de:0f:2a:e9:1f:2d:dd:4a:74:c3:d6:c4:fc:
74:8c:be:22:e0:75:83:6b:89:93:51:1a:50:ac:1e:
4d:33:1d:7f:bf:29:fe:cb:55:f0:a7:4e:45:94:b5:
66:8a:9f:94:16:0c:7c:6a:60:01:4b:65:35:1a:c8:
77:ce:8f:51:41:9e:f9:7c:51:69:94:a3:db:21:61:
84:33:2d:cc:3a:8c:a4:29:a8:64:43:30:41:6d:87:
17:0b:b7:24:ec:dc:48:ab:81:4b:6c:70:ac:1b:05:
8a:2f:ae:a6:51:69:0d:d9:92:2f:20:a9:34:69:38:
7f:b5:fa:b7:78:5f:06:3d:1d:8c:61:88:c9:89:58:
69:48:50:1d:ac:99:78:ce:b3:5f:aa:b9:aa:f1:76:
45:9b:26:51:78:50:1d:3b:32:7e:25:43:be:c5:db:
ea:82:66:4a:c5:22:c0:44:f4:98:33:dd:01:31:99:
5c:fc:8e:e4:a1:97:77:61:ed:f7:0a:3b:d8:93:3b:
e0:22:16:2a:3a:69:7f:c2:5e:1c:d7:b0:92:95:f1:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:9B:86:1E:3F:2B:12:1C:48:9C:02:46:E4:06:B2:70:4A:1C:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yRSbhh4_KxIcSJwCRuQGsnBKHOE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:74:20:d2:3d:aa:4a:3b:cd:f5:79:82:26:0d:9e:f9:a5:26:
f7:40:e1:39:1b:5f:55:4e:12:6b:a9:dd:f7:e8:8f:40:d7:6e:
af:9a:c7:00:e2:d1:be:e8:66:d4:6e:be:19:0e:86:6d:f4:41:
f4:df:8e:2e:66:be:70:09:c4:f4:ad:59:62:d9:b3:aa:da:86:
ce:ae:fb:52:52:f3:0b:01:ea:1f:8f:48:91:0e:43:38:a5:37:
ee:ff:45:6f:ff:d1:be:1c:c5:c8:7b:e2:2c:49:b1:6b:b4:95:
b4:f1:68:94:ab:b3:39:90:ba:a2:db:ed:e2:9f:92:d4:ae:93:
ff:86:7e:cd:3a:6b:61:77:78:d8:b0:87:50:a8:58:64:8e:5c:
94:08:d1:93:5d:cd:f8:eb:59:6f:b8:d2:31:ee:f3:b7:36:0c:
1d:f5:33:73:e6:c1:a2:c6:fd:05:7b:e1:24:55:44:43:ab:ea:
c5:ab:0e:67:d3:3c:62:7f:6e:97:01:0c:4f:88:e6:42:cb:92:
1d:ff:47:13:58:96:73:e3:90:d4:91:eb:ee:37:d2:e9:25:7a:
41:05:64:38:2c:cd:99:dc:2c:ec:df:9a:6d:67:fc:70:0f:fd:
76:d5:48:9e:57:ed:e2:1b:26:28:3f:ad:b4:97:b5:10:f2:67:
5a:88:ee:ee
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDYx
MjIyMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM5MTQ5Qjg2MUUzRjJC
MTIxQzQ4OUMwMjQ2RTQwNkIyNzA0QTFDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8EMQy+8mAe7R7Z65isGb1MlOuyttrYo0he2jK1QYci9XV2Xf4
OsE1SPqBgcTj3g8q6R8t3Up0w9bE/HSMviLgdYNriZNRGlCsHk0zHX+/Kf7LVfCn
TkWUtWaKn5QWDHxqYAFLZTUayHfOj1FBnvl8UWmUo9shYYQzLcw6jKQpqGRDMEFt
hxcLtyTs3EirgUtscKwbBYovrqZRaQ3Zki8gqTRpOH+1+rd4XwY9HYxhiMmJWGlI
UB2smXjOs1+quarxdkWbJlF4UB07Mn4lQ77F2+qCZkrFIsBE9Jgz3QExmVz8juSh
l3dh7fcKO9iTO+AiFio6aX/CXhzXsJKV8UBpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUyRSbhh4/KxIcSJwCRuQGsnBKHOEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lSU2JoaDRfS3hJY1NK
d0NSdVFHc25CS0hPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAanQg0j2qSjvN9XmCJg2e+aUm90DhORtf
VU4Sa6nd9+iPQNdur5rHAOLRvuhm1G6+GQ6GbfRB9N+OLma+cAnE9K1ZYtmzqtqG
zq77UlLzCwHqH49IkQ5DOKU37v9Fb//RvhzFyHviLEmxa7SVtPFolKuzOZC6otvt
4p+S1K6T/4Z+zTprYXd42LCHUKhYZI5clAjRk13N+OtZb7jSMe7ztzYMHfUzc+bB
osb9BXvhJFVEQ6vqxasOZ9M8Yn9ulwEMT4jmQsuSHf9HE1iWc+OQ1JHr7jfS6SV6
QQVkOCzNmdws7N+abWf8cA/9dtVInlft4hsmKD+ttJe1EPJnWoju7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org