Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bjLQRP0Tf3y_YeREnzn8JsgVmvc.roa
File: bjLQRP0Tf3y_YeREnzn8JsgVmvc.roa (raw, json)
Hash identifier: KiIjm58lLEEH6duFC6DHhI2PRd9n4ymO0NuP55ZvGsE=
Subject key identifier: 6E:32:D0:44:FD:13:7F:7C:BF:61:E4:44:9F:39:FC:26:C8:15:9A:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4546
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bjLQRP0Tf3y_YeREnzn8JsgVmvc.roa
Signing time: Sat 20 Apr 2024 22:53:12 +0000
ROA not before: Sat 20 Apr 2024 22:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17734 (0x4546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 22:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6E32D044FD137F7CBF61E4449F39FC26C8159AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:0a:38:ca:5b:5f:74:96:f8:05:1f:70:36:
49:b6:88:34:c8:14:43:e0:57:81:e9:3c:dd:58:f8:
b1:44:06:5a:73:48:4a:fe:b1:f2:38:15:cd:97:71:
c0:e9:cd:f9:f6:60:32:24:36:94:e1:e4:56:57:67:
d5:3e:28:e9:8b:b1:3f:9f:be:90:e6:d7:fe:94:4c:
86:9c:28:0b:93:0f:bb:66:0c:f3:f1:74:ad:a7:2f:
20:5f:7b:50:d5:83:36:3a:bd:e2:7a:a3:5f:05:6a:
bb:69:ee:7f:5d:a0:9f:9e:48:83:f6:92:4c:78:33:
5b:b0:1d:cd:42:f4:3f:ad:1e:f1:06:22:3d:6e:55:
ff:04:e2:1f:00:9f:55:19:d3:67:a3:65:ff:78:8b:
54:67:82:f3:b4:65:32:67:cc:61:f2:0a:24:58:16:
42:28:8c:56:77:a7:a9:c2:e4:b9:e6:ca:a6:8c:c1:
a6:f4:98:38:63:80:6f:ac:a3:a2:d6:4d:5f:36:58:
25:37:72:bf:84:b2:5c:a6:a5:2a:bd:d6:c9:89:53:
61:24:02:66:59:b8:d0:52:4d:42:97:e1:35:98:c5:
b6:d2:52:a2:56:47:95:8b:b8:3d:1e:08:52:f1:ad:
ff:18:66:d1:38:90:a5:8e:69:2f:c9:27:21:a6:45:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:32:D0:44:FD:13:7F:7C:BF:61:E4:44:9F:39:FC:26:C8:15:9A:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bjLQRP0Tf3y_YeREnzn8JsgVmvc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:72:67:0f:b4:f6:62:e8:ad:be:dd:e7:ce:83:a8:45:ba:cf:
45:69:f4:58:62:04:97:24:7b:7e:db:45:d0:d1:59:f6:78:7c:
90:16:c4:95:a7:db:ef:9f:3b:56:40:6a:fd:c6:46:74:7a:a6:
90:2f:c9:44:eb:75:e1:ed:b3:73:17:5c:ed:e0:1b:65:86:56:
3e:10:d9:27:6d:b4:0a:95:4a:58:a9:c4:e7:05:d2:fe:48:50:
c0:7e:9a:56:01:bd:e8:90:6d:91:a2:13:9b:4c:de:1a:e3:9d:
fe:c6:f7:01:4e:25:17:d2:da:3f:3b:58:2f:8c:ed:12:10:db:
a4:e6:d2:78:9e:16:c2:c8:0d:aa:f7:b8:1f:49:75:93:0e:05:
1e:ff:3a:64:41:de:17:6f:28:23:11:ce:47:73:62:a1:39:7b:
0e:e7:eb:58:ef:14:4b:18:2f:6b:f8:e7:58:e3:ca:59:ce:2c:
ae:b6:36:f4:d6:6b:e3:5b:c8:7d:22:35:a8:97:9b:42:84:c4:
a0:1d:47:ed:43:b3:6c:ef:fa:1e:85:c0:27:94:72:d3:45:32:
52:f7:6c:bf:19:45:25:32:e5:30:b9:ba:a2:b0:72:f4:55:f4:
0b:a8:12:31:42:7a:ed:08:c1:db:60:18:26:16:76:1a:76:2a:
41:c4:d6:22
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICRUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAy
MjUzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZFMzJEMDQ0RkQxMzdG
N0NCRjYxRTQ0NDlGMzlGQzI2QzgxNTlBRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4tQo4yltfdJb4BR9wNkm2iDTIFEPgV4HpPN1Y+LFEBlpzSEr+
sfI4Fc2XccDpzfn2YDIkNpTh5FZXZ9U+KOmLsT+fvpDm1/6UTIacKAuTD7tmDPPx
dK2nLyBfe1DVgzY6veJ6o18Fartp7n9doJ+eSIP2kkx4M1uwHc1C9D+tHvEGIj1u
Vf8E4h8An1UZ02ejZf94i1RngvO0ZTJnzGHyCiRYFkIojFZ3p6nC5LnmyqaMwab0
mDhjgG+so6LWTV82WCU3cr+EslympSq91smJU2EkAmZZuNBSTUKX4TWYxbbSUqJW
R5WLuD0eCFLxrf8YZtE4kKWOaS/JJyGmRcMLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUbjLQRP0Tf3y/YeREnzn8JsgVmvcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2JqTFFSUDBUZjN5X1ll
UkVuem44SnNnVm12Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAS3JnD7T2Yuitvt3nzoOoRbrPRWn0WGIE
lyR7fttF0NFZ9nh8kBbElafb7587VkBq/cZGdHqmkC/JROt14e2zcxdc7eAbZYZW
PhDZJ220CpVKWKnE5wXS/khQwH6aVgG96JBtkaITm0zeGuOd/sb3AU4lF9LaPztY
L4ztEhDbpObSeJ4WwsgNqve4H0l1kw4FHv86ZEHeF28oIxHOR3NioTl7DufrWO8U
Sxgva/jnWOPKWc4srrY29NZr41vIfSI1qJebQoTEoB1H7UOzbO/6HoXAJ5Ry00Uy
UvdsvxlFJTLlMLm6orBy9FX0C6gSMUJ67QjB22AYJhZ2GnYqQcTWIg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:15:56 2025 by rpki-client