Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3dw0NT77AHvVyPR6-wyGvjEeuXw.roa
File: 3dw0NT77AHvVyPR6-wyGvjEeuXw.roa (raw, json)
Hash identifier: 1YWwZFdBxierw1DtHhacd+dLrZQOGa4K0/TlZw3IY1U=
Subject key identifier: DD:DC:34:35:3E:FB:00:7B:D5:C8:F4:7A:FB:0C:86:BE:31:1E:B9:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3822
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3dw0NT77AHvVyPR6-wyGvjEeuXw.roa
Signing time: Wed 03 Apr 2024 10:22:22 +0000
ROA not before: Wed 03 Apr 2024 10:22:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14370 (0x3822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 10:22:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DDDC34353EFB007BD5C8F47AFB0C86BE311EB97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:e6:83:77:2b:8c:7b:b3:9e:46:a6:26:2f:
76:dc:83:9d:44:5a:7c:30:c3:d7:87:5e:8f:02:a5:
7a:46:73:65:cc:92:1e:f4:32:ee:eb:20:76:34:5e:
42:06:46:0f:4a:c6:d2:19:12:31:60:b9:65:9c:5b:
aa:c2:e5:e4:58:b8:68:ed:43:b1:cd:99:1a:ff:d7:
12:a8:45:fb:b7:06:e8:7c:bd:56:d7:c3:c2:7b:1d:
ff:36:b5:9a:08:21:26:34:37:82:3a:37:57:9b:f6:
53:32:0c:d9:cc:74:54:1e:63:f0:f4:45:34:0b:b4:
ce:84:d5:b0:aa:45:62:d6:1c:38:87:69:e8:c7:58:
a0:86:e3:ac:ff:14:28:66:5e:2d:39:26:bc:b1:e3:
f9:24:a4:3b:0f:36:b2:21:dd:73:16:8c:8d:67:03:
1f:d6:3b:77:9d:48:ae:1b:76:12:ad:3f:74:1c:e9:
07:87:52:77:a0:fa:8b:64:c2:4e:27:67:18:0b:6d:
df:97:dc:71:cb:86:d4:e0:a5:20:d0:95:5c:22:3a:
86:67:aa:97:04:67:ca:9d:2f:4d:d5:8d:f4:bb:e8:
ac:83:ec:5a:b6:10:11:a0:7c:a8:5f:41:82:5e:f3:
8a:74:57:e3:b1:84:fc:cc:e4:6d:d3:b1:8d:4d:bd:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:34:35:3E:FB:00:7B:D5:C8:F4:7A:FB:0C:86:BE:31:1E:B9:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3dw0NT77AHvVyPR6-wyGvjEeuXw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:63:d4:4f:b6:79:1c:be:84:51:84:33:8a:15:24:70:88:7a:
1b:16:45:d9:65:49:6e:d1:8e:a3:70:18:e6:87:a4:33:6e:96:
14:9c:4c:c7:cd:31:e3:70:ea:32:47:7d:87:45:82:65:f0:ae:
f0:3d:a2:84:92:4d:0b:4e:14:57:47:30:dc:9e:8e:0c:41:b6:
2f:01:42:e4:61:f3:e1:37:ed:ea:46:b2:31:cc:14:5b:dd:d9:
8d:ef:bf:a4:39:a1:df:76:54:ae:c3:d7:b1:27:f4:f4:22:71:
e6:6b:25:db:e8:72:36:6d:d4:5b:65:55:e2:7f:2d:97:7c:33:
4b:bc:bd:1d:c4:09:7b:4f:8a:d3:30:aa:37:15:d1:6b:26:ba:
1a:0b:1e:25:b9:a9:4f:c6:32:cc:42:e2:38:f0:3a:5f:3f:69:
78:23:4d:02:69:c6:2d:8f:76:09:5b:91:eb:28:4b:22:dd:08:
9f:95:97:b3:99:e9:48:02:b8:63:39:e7:d7:12:0c:76:ec:f0:
f0:b0:73:3e:da:13:88:db:29:c0:e6:a5:1b:bf:3b:0a:7b:66:
08:e8:78:04:c7:49:0d:d4:38:66:67:31:f2:66:1a:69:ea:36:
68:89:c4:27:28:b0:78:30:f3:d4:9f:d3:fe:ca:b4:93:10:0c:
d9:f0:76:97
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDMx
MDIyMjJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEREREMzNDM1M0VGQjAw
N0JENUM4RjQ3QUZCMEM4NkJFMzExRUI5N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyg+aDdyuMe7OeRqYmL3bcg51EWnwww9eHXo8CpXpGc2XMkh70
Mu7rIHY0XkIGRg9KxtIZEjFguWWcW6rC5eRYuGjtQ7HNmRr/1xKoRfu3Buh8vVbX
w8J7Hf82tZoIISY0N4I6N1eb9lMyDNnMdFQeY/D0RTQLtM6E1bCqRWLWHDiHaejH
WKCG46z/FChmXi05Jryx4/kkpDsPNrIh3XMWjI1nAx/WO3edSK4bdhKtP3Qc6QeH
Uneg+otkwk4nZxgLbd+X3HHLhtTgpSDQlVwiOoZnqpcEZ8qdL03VjfS76KyD7Fq2
EBGgfKhfQYJe84p0V+OxhPzM5G3TsY1NvVltAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU3dw0NT77AHvVyPR6+wyGvjEeuXwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzNkdzBOVDc3QUh2VnlQ
UjYtd3lHdmpFZXVYdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAFmPUT7Z5HL6EUYQzihUkcIh6GxZF2WVJ
btGOo3AY5oekM26WFJxMx80x43DqMkd9h0WCZfCu8D2ihJJNC04UV0cw3J6ODEG2
LwFC5GHz4Tft6kayMcwUW93Zje+/pDmh33ZUrsPXsSf09CJx5msl2+hyNm3UW2VV
4n8tl3wzS7y9HcQJe0+K0zCqNxXRaya6GgseJbmpT8YyzELiOPA6Xz9peCNNAmnG
LY92CVuR6yhLIt0In5WXs5npSAK4Yznn1xIMduzw8LBzPtoTiNspwOalG787Cntm
COh4BMdJDdQ4Zmcx8mYaaeo2aInEJyiweDDz1J/T/sq0kxAM2fB2lw==
-----END CERTIFICATE-----
Generated at Wed Apr 3 16:33:21 2024 by rpki-client on console.sobornost.net