Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yY_Q-pD3v8kV4_WmwK8IJFNoc_w.roa
File: yY_Q-pD3v8kV4_WmwK8IJFNoc_w.roa (raw, json)
Hash identifier: GWhsaMsPGdxHw6A5gGOvj9OG2IkPDZYdAQkuFSXRFOI=
Subject key identifier: C9:8F:D0:FA:90:F7:BF:C9:15:E3:F5:A6:C0:AF:08:24:53:68:73:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 425E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yY_Q-pD3v8kV4_WmwK8IJFNoc_w.roa
Signing time: Wed 17 Apr 2024 01:52:58 +0000
ROA not before: Wed 17 Apr 2024 01:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16990 (0x425e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 01:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C98FD0FA90F7BFC915E3F5A6C0AF0824536873FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:74:78:f8:6e:eb:9a:c7:c9:95:95:5a:af:
42:4d:57:a2:83:70:bd:3d:5e:0a:f8:7e:a4:f5:4f:
6f:9b:4a:e8:da:9c:d3:62:81:19:bc:32:58:f6:75:
34:78:da:de:cd:ec:ca:4a:5d:61:2f:28:81:1b:97:
e7:e4:d8:2d:29:53:80:8f:17:49:57:a7:39:66:f7:
bd:22:8d:a3:aa:07:71:2f:07:c9:3a:0d:9c:5d:bd:
b9:13:1d:03:94:89:40:ed:84:9e:a6:d3:17:59:9e:
85:8a:12:5a:f4:55:53:97:27:b7:f0:63:a9:36:a1:
de:dc:d2:4f:6c:e5:ed:9d:78:17:a7:d1:01:b2:37:
d3:d3:2f:64:cf:30:a4:86:81:c1:cd:b1:40:32:e1:
a3:d1:bd:1c:b5:0c:e1:a1:27:be:02:02:6a:65:3a:
f2:cf:29:53:70:de:06:ea:4a:d8:4b:21:66:e0:61:
d6:46:79:57:6a:07:1a:4c:87:12:32:be:d0:d4:f7:
1c:26:f5:d7:1d:41:3a:ad:34:2d:64:e1:35:43:ed:
ad:7a:9d:9a:eb:11:73:bf:b6:e2:4f:24:a9:f5:e4:
00:8f:34:48:67:76:14:d1:b3:84:80:87:20:39:40:
e6:5f:30:a7:a3:f2:0c:84:c5:cd:5b:13:c4:8d:3e:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:D0:FA:90:F7:BF:C9:15:E3:F5:A6:C0:AF:08:24:53:68:73:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yY_Q-pD3v8kV4_WmwK8IJFNoc_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:ea:23:82:63:14:6b:be:f8:fb:84:59:33:16:f3:65:e5:4d:
81:21:30:8b:32:53:30:e7:9d:ce:a0:48:d5:62:b0:a5:a0:6d:
b7:1b:00:dc:9f:3a:0f:8d:c2:42:41:46:98:49:87:3c:94:4e:
e3:f1:63:70:94:25:45:bd:a4:b2:06:9b:8a:c7:d7:d3:4c:e2:
d1:01:bc:db:40:b7:38:15:38:45:7d:24:8d:06:cb:66:b3:3a:
a8:fd:96:7d:44:53:ad:78:c3:14:15:7e:5c:63:9e:dc:f0:f4:
87:70:cc:bb:7d:52:ec:a9:0a:89:0b:6f:8f:21:90:42:6d:9d:
cf:a1:71:d2:52:e3:5c:0d:19:03:c4:2a:d4:88:8d:5d:12:f2:
64:cb:a5:7e:e8:58:26:04:71:b3:9a:55:17:a3:ba:20:f9:1b:
e2:35:f9:80:6f:a9:4d:12:fc:e4:e2:4c:f9:46:a1:07:db:22:
cb:f8:9c:11:02:b2:48:93:90:65:04:85:d1:7a:f5:53:fd:99:
4f:60:14:b4:0c:ed:dc:9d:6d:b2:96:42:3e:9f:16:30:6d:4a:
65:27:fa:7e:0a:b2:6a:ec:e2:fc:48:c9:dd:a7:4a:96:a6:ed:
cd:31:a7:1b:88:ea:c4:17:0d:06:20:6b:b5:e0:cb:9d:b9:4c:
13:c1:61:8b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
MTUyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM5OEZEMEZBOTBGN0JG
QzkxNUUzRjVBNkMwQUYwODI0NTM2ODczRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1mXR4+G7rmsfJlZVar0JNV6KDcL09Xgr4fqT1T2+bSujanNNi
gRm8Mlj2dTR42t7N7MpKXWEvKIEbl+fk2C0pU4CPF0lXpzlm970ijaOqB3EvB8k6
DZxdvbkTHQOUiUDthJ6m0xdZnoWKElr0VVOXJ7fwY6k2od7c0k9s5e2deBen0QGy
N9PTL2TPMKSGgcHNsUAy4aPRvRy1DOGhJ74CAmplOvLPKVNw3gbqSthLIWbgYdZG
eVdqBxpMhxIyvtDU9xwm9dcdQTqtNC1k4TVD7a16nZrrEXO/tuJPJKn15ACPNEhn
dhTRs4SAhyA5QOZfMKej8gyExc1bE8SNPqrLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUyY/Q+pD3v8kV4/WmwK8IJFNoc/wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lZX1EtcEQzdjhrVjRf
V213SzhJSkZOb2Nfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAAuojgmMUa774+4RZMxbzZeVNgSEwizJT
MOedzqBI1WKwpaBttxsA3J86D43CQkFGmEmHPJRO4/FjcJQlRb2ksgabisfX00zi
0QG820C3OBU4RX0kjQbLZrM6qP2WfURTrXjDFBV+XGOe3PD0h3DMu31S7KkKiQtv
jyGQQm2dz6Fx0lLjXA0ZA8Qq1IiNXRLyZMulfuhYJgRxs5pVF6O6IPkb4jX5gG+p
TRL85OJM+UahB9siy/icEQKySJOQZQSF0Xr1U/2ZT2AUtAzt3J1tspZCPp8WMG1K
ZSf6fgqyauzi/EjJ3adKlqbtzTGnG4jqxBcNBiBrteDLnblME8Fhiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:21 2024 by rpki-client on console-ams.rpki-client.org