Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W3ZDcccruI5oSb-XoEp789Pdm6A.roa
File: W3ZDcccruI5oSb-XoEp789Pdm6A.roa (raw, json)
Hash identifier: PgZvxunejMKc4muXH+mRIaW+p6US+BBVwENdGJ2yWYw=
Subject key identifier: 5B:76:43:71:C7:2B:B8:8E:68:49:BF:97:A0:4A:7B:F3:D3:DD:9B:A0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F0E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W3ZDcccruI5oSb-XoEp789Pdm6A.roa
Signing time: Fri 03 May 2024 23:54:02 +0000
ROA not before: Fri 03 May 2024 23:54:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20238 (0x4f0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 23:54:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5B764371C72BB88E6849BF97A04A7BF3D3DD9BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:a0:c8:f0:fe:33:eb:8d:db:a8:cf:24:60:
cc:0e:79:fd:ed:ca:b0:52:e1:9d:c9:26:6f:35:f8:
7f:75:33:fd:b6:8e:fb:5b:ee:56:0e:7b:9e:fa:7f:
7f:23:68:c8:43:4c:7e:ae:7b:4c:7f:9c:c5:fe:f2:
39:95:c5:06:fa:d7:9e:c4:5f:89:0c:92:0c:a8:6d:
27:35:1c:99:01:cb:17:48:93:1b:ff:c3:e7:76:67:
f4:67:01:43:5d:65:69:8c:b2:e4:33:f6:bf:77:57:
0f:1e:3e:88:23:e5:61:ee:f1:17:e4:ab:0d:db:aa:
70:82:b1:73:50:bb:f5:89:0d:d3:32:b8:c6:0b:0f:
89:bc:c7:ed:e7:00:a4:04:bc:15:91:a1:22:ad:68:
bf:df:02:e7:f0:6e:c5:77:98:e3:e7:58:41:a9:36:
3c:a5:2d:f7:72:5c:67:a9:87:d9:01:c2:7a:7a:3c:
f2:6e:77:31:73:34:a5:71:64:35:cf:ad:10:fc:13:
0e:0e:89:0d:39:a6:55:d3:92:d5:19:ff:3c:2b:f8:
ae:82:01:47:06:d3:06:3c:40:0b:5c:94:dd:9a:57:
2e:38:f6:52:ef:fb:09:8d:3f:c9:01:2e:74:aa:6c:
b5:43:c7:2d:6f:91:e9:23:c2:0d:4d:68:f1:3b:fd:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:43:71:C7:2B:B8:8E:68:49:BF:97:A0:4A:7B:F3:D3:DD:9B:A0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W3ZDcccruI5oSb-XoEp789Pdm6A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:94:03:23:a6:c8:40:b6:71:b7:4c:e0:47:5e:f4:d1:d6:77:
f5:38:19:e0:d7:a6:c2:ae:81:dd:c4:e3:ce:b6:98:8e:7b:3d:
82:51:47:c5:d0:84:d9:ba:41:f2:86:1c:77:80:29:59:29:36:
9c:9e:87:9a:ee:81:d7:0c:1a:9e:16:ab:46:4a:ce:af:8f:d7:
dc:39:f6:66:68:d5:c4:1a:61:d1:ff:04:16:b6:9e:ac:19:e3:
ad:56:29:aa:95:1a:43:12:b5:6d:a7:17:5d:77:2c:14:b4:99:
e4:05:2c:8f:68:33:3c:63:17:83:9e:be:02:fa:0d:6d:e6:a6:
b6:45:72:12:42:72:d0:34:5d:1e:3c:c0:dc:72:d2:bf:98:f8:
0d:03:4c:f0:8b:e8:4d:56:c9:5d:b7:b1:8d:7a:1d:7a:a7:1f:
50:ff:4a:c5:0f:fc:95:44:51:6f:8f:a6:45:ef:26:ac:d4:6b:
18:e1:6f:31:f1:31:56:cc:ec:c9:41:a6:99:c6:f0:0e:e7:25:
5e:37:89:c4:a2:5f:eb:94:2a:05:ed:c1:35:d3:17:7d:82:6e:
3c:48:9d:e6:23:97:59:f1:d9:0d:e1:bd:e6:61:a5:ce:d4:be:
94:28:79:94:2c:85:13:87:37:c0:e4:c7:da:e9:c5:fc:9b:4c:
bb:ae:7f:f1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMy
MzU0MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVCNzY0MzcxQzcyQkI4
OEU2ODQ5QkY5N0EwNEE3QkYzRDNERDlCQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcSqDI8P4z643bqM8kYMwOef3tyrBS4Z3JJm81+H91M/22jvtb
7lYOe576f38jaMhDTH6ue0x/nMX+8jmVxQb6157EX4kMkgyobSc1HJkByxdIkxv/
w+d2Z/RnAUNdZWmMsuQz9r93Vw8ePogj5WHu8Rfkqw3bqnCCsXNQu/WJDdMyuMYL
D4m8x+3nAKQEvBWRoSKtaL/fAufwbsV3mOPnWEGpNjylLfdyXGeph9kBwnp6PPJu
dzFzNKVxZDXPrRD8Ew4OiQ05plXTktUZ/zwr+K6CAUcG0wY8QAtclN2aVy449lLv
+wmNP8kBLnSqbLVDxy1vkekjwg1NaPE7/ZmrAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUW3ZDcccruI5oSb+XoEp789Pdm6AwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1czWkRjY2NydUk1b1Ni
LVhvRXA3ODlQZG02QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEArpQDI6bIQLZxt0zgR1700dZ39TgZ4Nem
wq6B3cTjzraYjns9glFHxdCE2bpB8oYcd4ApWSk2nJ6Hmu6B1wwanharRkrOr4/X
3Dn2ZmjVxBph0f8EFraerBnjrVYpqpUaQxK1bacXXXcsFLSZ5AUsj2gzPGMXg56+
AvoNbeamtkVyEkJy0DRdHjzA3HLSv5j4DQNM8IvoTVbJXbexjXodeqcfUP9KxQ/8
lURRb4+mRe8mrNRrGOFvMfExVszsyUGmmcbwDuclXjeJxKJf65QqBe3BNdMXfYJu
PEid5iOXWfHZDeG95mGlztS+lCh5lCyFE4c3wOTH2unF/JtMu65/8Q==
-----END CERTIFICATE-----
Generated at Thu May 9 03:53:50 2024 by rpki-client on console.sobornost.net