Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zZ8FRbCjc2LP2I0iLUQUL44E78A.roa
File: zZ8FRbCjc2LP2I0iLUQUL44E78A.roa (raw, json)
Hash identifier: xmN0JHvJMHKVG2qYhGqMtmKqXaWfxCP4RnHEzfgUymE=
Subject key identifier: CD:9F:05:45:B0:A3:73:62:CF:D8:8D:22:2D:44:14:2F:8E:04:EF:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4556
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zZ8FRbCjc2LP2I0iLUQUL44E78A.roa
Signing time: Sun 21 Apr 2024 00:53:05 +0000
ROA not before: Sun 21 Apr 2024 00:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17750 (0x4556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 00:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD9F0545B0A37362CFD88D222D44142F8E04EFC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:81:fc:f6:01:62:11:2d:80:a1:77:2c:ae:
aa:fb:c9:6d:bc:06:5e:66:d9:07:49:05:e5:78:87:
f0:8f:f3:d8:e2:07:95:d6:eb:3c:6c:70:47:63:f9:
73:c8:ca:f3:ef:59:f8:d4:b3:d9:00:33:83:a8:70:
b5:31:25:0f:33:9c:e9:d4:1e:ae:be:ca:db:bb:b9:
31:ba:22:30:23:8e:5d:bc:d4:8a:6a:94:b9:45:f7:
d2:f2:6b:cc:0d:82:81:bd:4c:70:c7:44:e2:5d:7b:
d6:69:4d:91:49:fe:85:ad:d4:4d:16:90:a5:40:49:
03:25:d9:e0:6c:8e:3f:85:82:b7:57:21:4f:d1:af:
14:aa:d9:b4:d9:aa:8f:54:78:c9:5c:f6:15:0e:4d:
73:3d:bb:f2:1f:37:53:9b:40:b4:64:a6:fb:db:da:
0c:9d:40:67:b7:af:8d:dc:7d:da:9b:10:32:3f:f8:
60:cd:fa:8b:52:9b:73:96:67:aa:9a:58:f2:54:31:
c7:ef:8b:57:72:bf:b3:28:3b:bd:14:a4:ac:3b:1f:
fe:d3:bd:ce:b2:07:71:82:cf:f6:ee:27:f1:30:0b:
e4:34:44:8e:6e:83:41:36:ef:08:1f:39:a1:d7:02:
f8:3c:81:5d:ff:fa:c4:ca:6b:ec:10:b4:3a:c1:52:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:05:45:B0:A3:73:62:CF:D8:8D:22:2D:44:14:2F:8E:04:EF:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zZ8FRbCjc2LP2I0iLUQUL44E78A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:f2:e0:34:d2:73:54:e1:41:b8:4a:ed:d8:03:55:10:98:18:
f4:7f:35:ab:a8:33:30:7e:38:ba:5a:a3:53:52:f9:ad:e4:65:
e0:a9:08:3a:84:ba:db:c8:a9:81:ed:6f:ea:ba:57:59:9e:98:
82:2e:5c:50:19:97:20:e3:85:87:c0:9f:bf:e4:e2:5e:e6:93:
94:0a:e4:d9:4f:a8:ef:76:e1:a9:13:f8:d9:10:14:bf:71:a7:
09:d9:48:c7:4d:0f:41:21:d3:07:d4:21:f6:12:7e:cf:ca:fd:
c9:c1:53:35:30:ca:30:71:35:2b:c2:2c:e4:cc:89:a2:d2:b0:
25:0f:cb:14:b5:05:1b:db:70:fc:03:e8:c8:cb:36:6c:10:25:
12:ab:fa:9f:78:a4:33:57:f3:4b:55:36:b0:47:20:ee:ee:5b:
f7:ed:16:46:61:08:5c:14:78:f2:cd:16:2e:7d:a5:21:53:71:
26:74:09:3b:b4:47:67:1f:64:b6:38:af:5d:81:ee:85:c2:ce:
0e:2e:31:c9:6a:cd:34:a0:de:0c:c6:84:3a:9c:1c:37:b2:48:
df:81:95:c5:d9:74:ef:f0:f8:5d:92:12:6e:25:1b:84:1c:bf:
41:7a:fe:b1:fc:b0:8e:0d:2e:78:9d:e0:18:63:4b:74:92:2a:
0f:d7:a1:1f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICRVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjEw
MDUzMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENEOUYwNTQ1QjBBMzcz
NjJDRkQ4OEQyMjJENDQxNDJGOEUwNEVGQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8C4H89gFiES2AoXcsrqr7yW28Bl5m2QdJBeV4h/CP89jiB5XW
6zxscEdj+XPIyvPvWfjUs9kAM4OocLUxJQ8znOnUHq6+ytu7uTG6IjAjjl281Ipq
lLlF99Lya8wNgoG9THDHROJde9ZpTZFJ/oWt1E0WkKVASQMl2eBsjj+FgrdXIU/R
rxSq2bTZqo9UeMlc9hUOTXM9u/IfN1ObQLRkpvvb2gydQGe3r43cfdqbEDI/+GDN
+otSm3OWZ6qaWPJUMcfvi1dyv7MoO70UpKw7H/7Tvc6yB3GCz/buJ/EwC+Q0RI5u
g0E27wgfOaHXAvg8gV3/+sTKa+wQtDrBUngrAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzZ8FRbCjc2LP2I0iLUQUL44E78AwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3paOEZSYkNqYzJMUDJJ
MGlMVVFVTDQ0RTc4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAk/LgNNJzVOFBuErt2ANVEJgY9H81q6gz
MH44ulqjU1L5reRl4KkIOoS628ipge1v6rpXWZ6Ygi5cUBmXIOOFh8Cfv+TiXuaT
lArk2U+o73bhqRP42RAUv3GnCdlIx00PQSHTB9Qh9hJ+z8r9ycFTNTDKMHE1K8Is
5MyJotKwJQ/LFLUFG9tw/APoyMs2bBAlEqv6n3ikM1fzS1U2sEcg7u5b9+0WRmEI
XBR48s0WLn2lIVNxJnQJO7RHZx9ktjivXYHuhcLODi4xyWrNNKDeDMaEOpwcN7JI
34GVxdl07/D4XZISbiUbhBy/QXr+sfywjg0ueJ3gGGNLdJIqD9ehHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org