Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zGSGXnkncIx4s6-pHfR36HJ7K-4.roa
File: zGSGXnkncIx4s6-pHfR36HJ7K-4.roa (raw, json)
Hash identifier: bWT36uO024nAs3Ce4uVimg74DMeTonjxiXh9JldQzbQ=
Subject key identifier: CC:64:86:5E:79:27:70:8C:78:B3:AF:A9:1D:F4:77:E8:72:7B:2B:EE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zGSGXnkncIx4s6-pHfR36HJ7K-4.roa
Signing time: Sat 04 May 2024 11:53:49 +0000
ROA not before: Sat 04 May 2024 11:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20334 (0x4f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 11:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CC64865E7927708C78B3AFA91DF477E8727B2BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:54:ef:8c:85:79:91:21:a5:9d:94:ee:38:
b3:44:0c:59:90:48:8d:88:87:a8:90:e7:1e:fb:2a:
ba:9b:b1:24:59:57:fb:06:7e:2f:a0:bb:48:65:2a:
f7:ab:64:ff:4a:f2:36:78:f2:e9:06:fb:7b:b8:3d:
d5:45:d8:2c:b0:54:3c:eb:cb:58:15:db:29:7a:2b:
3d:5d:86:1b:03:5f:a8:bb:8b:1e:25:c6:f2:25:7f:
f9:73:d6:3a:39:0b:ee:e1:88:51:ba:eb:ec:ef:81:
fc:82:13:01:9a:bd:e5:1d:c9:c9:d0:d6:1b:32:d2:
2e:8e:a9:f5:6a:e6:00:2f:24:1b:cf:2a:0a:5d:cc:
c9:52:40:76:02:1e:d5:a5:97:95:af:6f:16:ba:70:
bd:77:65:ca:e0:84:ac:35:42:56:2a:85:80:8e:ff:
00:59:89:bd:61:c2:3f:e2:5f:3b:90:e3:72:8f:6c:
e3:67:2f:ed:34:d6:50:15:d9:72:26:8a:a3:68:f6:
9c:ac:34:f9:73:9e:e8:e2:59:e6:c2:d1:ce:47:d3:
9a:b7:a4:92:f1:e4:e1:36:87:23:b4:08:fc:c4:e8:
a4:ac:49:09:a9:af:76:92:a3:92:86:02:db:a5:76:
5e:78:03:4d:59:36:18:12:61:e7:5e:72:a3:81:cd:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:86:5E:79:27:70:8C:78:B3:AF:A9:1D:F4:77:E8:72:7B:2B:EE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zGSGXnkncIx4s6-pHfR36HJ7K-4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:f6:30:4c:4e:93:12:0e:4c:37:7a:53:51:37:8d:86:45:9b:
5d:44:59:cd:c1:14:6e:77:fe:4a:d9:0e:8b:b3:ff:53:97:43:
03:31:be:e3:7e:cc:13:2a:ec:c7:95:e9:51:8b:84:09:14:f3:
1e:44:ea:f2:2f:eb:b8:40:3b:69:68:a6:f4:ed:f0:a4:55:57:
64:8f:54:b9:b2:26:0c:70:5c:74:6e:e4:37:d2:87:a3:05:6c:
19:e5:8e:00:39:50:7a:17:9e:d4:03:65:5c:89:59:14:96:6b:
6b:8f:0e:14:c4:eb:16:f9:06:f5:82:bd:19:79:ea:b5:c3:51:
f7:cd:eb:98:2a:c4:94:62:94:9c:0b:d9:5b:87:e8:3d:96:de:
7e:9a:53:b2:0e:84:30:68:d2:a8:3d:20:97:e8:22:1b:5e:63:
74:7a:10:76:b8:b6:67:d7:2f:f9:a3:c7:cf:20:b0:bc:9d:91:
e0:9a:bf:10:8b:07:a8:bc:ec:6b:d5:6c:72:bb:ef:c0:15:1c:
a3:96:6d:e7:da:21:04:7a:53:21:98:17:25:6f:21:04:9a:39:
00:f3:14:66:a3:6e:e7:06:3c:8e:ac:0a:3c:94:60:04:83:51:
c3:7b:b5:6d:35:f1:f6:d4:21:d7:6e:0a:cb:bb:83:af:92:3b:
fa:77:ea:98
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICT24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQx
MTUzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENDNjQ4NjVFNzkyNzcw
OEM3OEIzQUZBOTFERjQ3N0U4NzI3QjJCRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8W1TvjIV5kSGlnZTuOLNEDFmQSI2Ih6iQ5x77KrqbsSRZV/sG
fi+gu0hlKverZP9K8jZ48ukG+3u4PdVF2CywVDzry1gV2yl6Kz1dhhsDX6i7ix4l
xvIlf/lz1jo5C+7hiFG66+zvgfyCEwGaveUdycnQ1hsy0i6OqfVq5gAvJBvPKgpd
zMlSQHYCHtWll5Wvbxa6cL13ZcrghKw1QlYqhYCO/wBZib1hwj/iXzuQ43KPbONn
L+001lAV2XImiqNo9pysNPlznujiWebC0c5H05q3pJLx5OE2hyO0CPzE6KSsSQmp
r3aSo5KGAtuldl54A01ZNhgSYedecqOBzQklAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzGSGXnkncIx4s6+pHfR36HJ7K+4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3pHU0dYbmtuY0l4NHM2
LXBIZlIzNkhKN0stNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAaPYwTE6TEg5MN3pTUTeNhkWbXURZzcEU
bnf+StkOi7P/U5dDAzG+437MEyrsx5XpUYuECRTzHkTq8i/ruEA7aWim9O3wpFVX
ZI9UubImDHBcdG7kN9KHowVsGeWOADlQehee1ANlXIlZFJZra48OFMTrFvkG9YK9
GXnqtcNR983rmCrElGKUnAvZW4foPZbefppTsg6EMGjSqD0gl+giG15jdHoQdri2
Z9cv+aPHzyCwvJ2R4Jq/EIsHqLzsa9VscrvvwBUco5Zt59ohBHpTIZgXJW8hBJo5
APMUZqNu5wY8jqwKPJRgBINRw3u1bTXx9tQh124Ky7uDr5I7+nfqmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org