Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OrstzIWcsGBJ_06iNMhTMinMLsY.roa
File: OrstzIWcsGBJ_06iNMhTMinMLsY.roa (raw, json)
Hash identifier: 1lYYE8hdpMkO+Eyx8vh3ugEL538fk8RGu8Z4WNEPUfA=
Subject key identifier: 3A:BB:2D:CC:85:9C:B0:60:49:FF:4E:A2:34:C8:53:32:29:CC:2E:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4822
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OrstzIWcsGBJ_06iNMhTMinMLsY.roa
Signing time: Wed 24 Apr 2024 18:23:28 +0000
ROA not before: Wed 24 Apr 2024 18:23:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18466 (0x4822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 18:23:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3ABB2DCC859CB06049FF4EA234C8533229CC2EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:35:b5:23:eb:9c:13:f7:18:a6:9b:b4:f4:
77:ec:77:28:2c:22:66:a9:4a:a3:db:a4:cd:be:4f:
be:4a:94:85:2c:04:59:64:ba:9e:56:50:75:cb:49:
71:47:0c:e8:26:00:93:98:d4:88:8b:13:2c:36:80:
2a:89:dd:88:b3:52:ef:3d:2f:9e:7f:79:d1:42:0d:
a3:5e:f3:1f:0e:6f:b9:4c:b0:86:6e:8c:93:f3:0b:
76:3e:42:01:32:3b:48:a2:65:3d:9f:5d:68:22:9c:
59:9e:88:fc:3e:e2:4c:13:7f:c9:e2:dd:10:ca:50:
07:60:e8:d4:2a:c5:79:60:4f:91:b1:78:6f:e3:36:
51:88:7f:03:5e:5d:99:52:c8:8f:60:3c:06:c6:4b:
25:7f:85:2f:28:ab:10:16:8c:35:2e:26:a0:05:d4:
d8:89:2f:22:2b:f6:80:80:89:69:82:13:5e:c2:3f:
04:80:a8:a1:30:10:19:fd:cb:ff:81:38:08:8b:88:
cf:2f:28:8a:37:b7:fb:b7:31:a4:0e:2a:ab:68:28:
da:74:cd:56:b3:29:45:d8:bb:53:16:56:92:c9:ac:
0d:f2:7c:2a:c5:d4:e0:74:e9:97:0e:ea:1d:b3:f4:
e7:af:69:22:1d:a3:03:ce:84:68:c2:aa:37:85:97:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:2D:CC:85:9C:B0:60:49:FF:4E:A2:34:C8:53:32:29:CC:2E:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OrstzIWcsGBJ_06iNMhTMinMLsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:3e:16:88:88:e6:11:4c:26:54:82:ae:f6:81:4e:53:55:d8:
2a:18:d2:05:f5:43:3b:ea:7f:f5:00:08:90:ae:a0:ac:c8:3c:
b9:bf:80:a4:24:d0:3d:4c:1d:f1:73:9d:02:bf:26:c3:63:62:
bc:32:12:c5:6c:89:c0:bb:5b:09:9f:e5:02:d3:28:fd:2c:cb:
ba:8f:41:09:7b:b0:a7:6e:4a:29:9b:d3:e0:0c:ca:17:53:17:
66:91:39:46:30:1f:53:20:39:40:bb:72:e7:6e:2d:92:ef:1a:
20:b6:e9:b3:9f:44:c6:db:cc:38:8d:e0:7b:8c:6c:db:97:ba:
80:8d:ea:f2:21:bc:db:aa:b8:66:ea:5b:31:55:cd:94:c5:70:
bb:f0:62:50:63:f4:5b:95:34:ec:38:9a:d7:42:16:88:c1:18:
bb:88:60:c3:de:f5:75:ea:f4:44:aa:9b:11:0d:16:c5:bf:1a:
34:55:94:af:71:31:22:7d:59:34:96:c0:45:22:7f:d3:e9:17:
54:47:e0:94:d0:eb:af:ab:bb:00:c2:3e:d3:39:20:3f:89:94:
ae:42:b3:28:8f:16:07:9a:8a:32:99:0b:8e:ef:3d:74:9c:cc:
87:d6:a0:27:59:00:fb:32:33:88:b9:49:75:8a:06:42:ca:b9:
12:0a:3f:1a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICSCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQx
ODIzMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBQkIyRENDODU5Q0Iw
NjA0OUZGNEVBMjM0Qzg1MzMyMjlDQzJFQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO+DW1I+ucE/cYppu09HfsdygsImapSqPbpM2+T75KlIUsBFlk
up5WUHXLSXFHDOgmAJOY1IiLEyw2gCqJ3YizUu89L55/edFCDaNe8x8Ob7lMsIZu
jJPzC3Y+QgEyO0iiZT2fXWginFmeiPw+4kwTf8ni3RDKUAdg6NQqxXlgT5GxeG/j
NlGIfwNeXZlSyI9gPAbGSyV/hS8oqxAWjDUuJqAF1NiJLyIr9oCAiWmCE17CPwSA
qKEwEBn9y/+BOAiLiM8vKIo3t/u3MaQOKqtoKNp0zVazKUXYu1MWVpLJrA3yfCrF
1OB06ZcO6h2z9OevaSIdowPOhGjCqjeFlyqbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUOrstzIWcsGBJ/06iNMhTMinMLsYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L09yc3R6SVdjc0dCSl8w
NmlOTWhUTWluTUxzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAuD4WiIjmEUwmVIKu9oFOU1XYKhjSBfVD
O+p/9QAIkK6grMg8ub+ApCTQPUwd8XOdAr8mw2NivDISxWyJwLtbCZ/lAtMo/SzL
uo9BCXuwp25KKZvT4AzKF1MXZpE5RjAfUyA5QLty524tku8aILbps59ExtvMOI3g
e4xs25e6gI3q8iG826q4ZupbMVXNlMVwu/BiUGP0W5U07Dia10IWiMEYu4hgw971
der0RKqbEQ0Wxb8aNFWUr3ExIn1ZNJbARSJ/0+kXVEfglNDrr6u7AMI+0zkgP4mU
rkKzKI8WB5qKMpkLju89dJzMh9agJ1kA+zIziLlJdYoGQsq5Ego/Gg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:29:22 2024 by rpki-client on console.sobornost.net