Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RzamX7byBZVGpyqYrdWQGLJK01Y.roa
File: RzamX7byBZVGpyqYrdWQGLJK01Y.roa (raw, json)
Hash identifier: vu8WIAKOjWrqSRYhaz9PrKKS54kayEOSPnAOTBx/Clw=
Subject key identifier: 47:36:A6:5F:B6:F2:05:95:46:A7:2A:98:AD:D5:90:18:B2:4A:D3:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FFD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RzamX7byBZVGpyqYrdWQGLJK01Y.roa
Signing time: Sat 13 Apr 2024 21:52:52 +0000
ROA not before: Sat 13 Apr 2024 21:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16381 (0x3ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 21:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4736A65FB6F2059546A72A98ADD59018B24AD356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:75:e6:5c:06:6b:38:ae:a1:13:59:ad:5d:
ad:f2:a2:3f:a6:cb:26:b5:65:2e:cc:d4:34:65:b2:
56:e0:b6:3e:d1:d3:e6:14:67:f3:ff:5f:5f:9a:6d:
91:52:cb:20:a1:5f:af:63:c7:25:21:b7:e0:b0:23:
7f:7b:60:44:d1:bc:58:0c:19:88:89:ba:9a:c6:2c:
c9:a6:de:d7:35:ef:13:9f:bf:2f:0d:b7:a3:9c:3f:
d4:74:c6:13:c1:6e:a9:0f:08:73:ec:f0:dc:81:8c:
5d:a7:32:23:87:48:43:65:3f:f5:dc:67:71:8a:ae:
91:7d:c7:38:b6:16:56:33:0f:5d:21:ec:c1:f5:f0:
97:77:a1:6b:8f:4a:5c:0b:cf:4b:ec:57:08:b2:51:
79:64:fa:0a:33:c5:0b:c6:7a:26:69:a5:3e:d9:fe:
c4:40:d5:e1:e7:82:aa:57:70:f0:1a:93:23:5e:04:
54:4f:d1:11:77:55:77:e5:97:31:41:ea:84:22:f0:
b8:51:73:b4:f1:26:b7:66:5c:ee:8e:f0:ed:3f:11:
99:b6:45:1e:76:a1:9e:ab:74:ce:d6:95:fb:68:35:
fd:64:da:d5:c5:7b:e1:73:c1:e7:a3:fa:9a:07:d1:
71:1b:f6:c1:be:10:a7:02:a3:c2:4d:82:9c:2f:c9:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:36:A6:5F:B6:F2:05:95:46:A7:2A:98:AD:D5:90:18:B2:4A:D3:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RzamX7byBZVGpyqYrdWQGLJK01Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
08:f1:fd:0b:f1:66:1e:39:f7:78:b3:ca:ea:33:39:23:cb:ab:
10:c8:d0:3f:12:7a:a1:b6:47:07:2d:59:ed:31:e3:57:89:0b:
1b:82:0d:11:6a:56:c0:b9:fb:e3:e2:86:e3:00:88:9d:ce:61:
b7:20:d9:e9:73:eb:3c:c2:10:9d:f3:e4:55:7d:23:47:7f:ce:
08:c0:27:5c:e6:e0:4a:ae:1f:d6:98:af:6f:0f:9b:2d:f5:c1:
a5:82:19:53:62:39:fc:5b:0b:5d:e3:16:32:8f:c5:45:28:c7:
bb:f2:bd:81:0c:46:9c:e0:19:ac:ca:22:63:0a:11:e3:8f:0f:
d1:ee:19:4b:e2:c3:d8:cc:b8:32:82:ff:cd:0e:cb:0c:62:a7:
61:fd:12:c3:89:33:c6:86:b5:e6:ed:72:84:3b:d7:23:b6:6a:
df:b9:08:80:b4:3a:a1:1b:71:f7:db:ac:81:48:3d:d2:f2:50:
00:79:93:58:6e:02:94:4c:ec:a7:9c:96:e4:63:0f:20:77:b9:
7b:30:70:88:90:c8:a7:1f:4b:89:bb:21:fa:c5:a0:89:d7:f9:
b8:2d:fe:41:ad:af:e0:94:68:c1:d8:72:dc:09:00:6b:84:bf:
45:7e:a4:02:2d:83:ee:e8:d3:fb:27:b7:cc:6e:19:66:ec:9b:
91:24:bb:57
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICP/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMy
MTUyNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ3MzZBNjVGQjZGMjA1
OTU0NkE3MkE5OEFERDU5MDE4QjI0QUQzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE63XmXAZrOK6hE1mtXa3yoj+myya1ZS7M1DRlslbgtj7R0+YU
Z/P/X1+abZFSyyChX69jxyUht+CwI397YETRvFgMGYiJuprGLMmm3tc17xOfvy8N
t6OcP9R0xhPBbqkPCHPs8NyBjF2nMiOHSENlP/XcZ3GKrpF9xzi2FlYzD10h7MH1
8Jd3oWuPSlwLz0vsVwiyUXlk+gozxQvGeiZppT7Z/sRA1eHngqpXcPAakyNeBFRP
0RF3VXfllzFB6oQi8LhRc7TxJrdmXO6O8O0/EZm2RR52oZ6rdM7WlftoNf1k2tXF
e+Fzweej+poH0XEb9sG+EKcCo8JNgpwvyeHXAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQURzamX7byBZVGpyqYrdWQGLJK01YwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1J6YW1YN2J5QlpWR3B5
cVlyZFdRR0xKSzAxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAAjx/QvxZh4593iz
yuozOSPLqxDI0D8SeqG2RwctWe0x41eJCxuCDRFqVsC5++PihuMAiJ3OYbcg2elz
6zzCEJ3z5FV9I0d/zgjAJ1zm4EquH9aYr28Pmy31waWCGVNiOfxbC13jFjKPxUUo
x7vyvYEMRpzgGazKImMKEeOPD9HuGUviw9jMuDKC/80Oywxip2H9EsOJM8aGtebt
coQ71yO2at+5CIC0OqEbcffbrIFIPdLyUAB5k1huApRM7KecluRjDyB3uXswcIiQ
yKcfS4m7IfrFoInX+bgt/kGtr+CUaMHYctwJAGuEv0V+pAItg+7o0/snt8xuGWbs
m5Eku1c=
-----END CERTIFICATE-----
Generated at Sun Apr 14 06:02:47 2024 by rpki-client on console.sobornost.net