Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W9zKmSiJ6AqEReNbufcRsaXD3_w.roa
File: W9zKmSiJ6AqEReNbufcRsaXD3_w.roa (raw, json)
Hash identifier: shTqhuTm9hdToMnucuX3PNcoBYauJuRiPoivu8k1E9k=
Subject key identifier: 5B:DC:CA:99:28:89:E8:0A:84:45:E3:5B:B9:F7:11:B1:A5:C3:DF:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E06
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W9zKmSiJ6AqEReNbufcRsaXD3_w.roa
Signing time: Thu 02 May 2024 14:53:42 +0000
ROA not before: Thu 02 May 2024 14:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19974 (0x4e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 14:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5BDCCA992889E80A8445E35BB9F711B1A5C3DFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:99:5c:c5:57:7b:2d:3f:a4:9b:4c:71:23:
7c:d2:32:c0:d9:36:ff:d3:6d:47:a0:89:c9:13:98:
e5:98:a8:cf:f1:84:97:cc:b4:49:84:88:58:bb:62:
a1:f5:b8:de:c2:80:24:1e:75:37:c3:28:74:fa:a1:
75:3b:39:d5:27:0e:d1:d6:51:b3:c1:9c:71:ff:15:
91:d3:cb:12:5f:d9:ed:11:41:05:9c:f7:0d:dd:74:
c9:27:d4:14:c0:b5:9a:da:94:18:b6:dd:53:34:41:
47:00:cc:da:81:0d:56:63:47:e4:49:9b:bc:cb:46:
59:2f:6f:a2:d2:45:5d:dd:b3:2c:da:4f:40:a1:76:
a3:d4:e7:1e:ea:12:6b:b6:e8:bc:c7:a8:4d:f2:0c:
27:98:1d:1b:f8:80:5e:b2:d5:18:bb:a3:03:07:39:
ee:33:d5:ce:aa:66:84:c1:8d:c4:19:94:95:18:d9:
9c:ed:12:63:f6:ca:f6:3b:a6:01:c6:73:3f:65:a8:
06:3b:f7:10:21:58:67:88:fe:ec:b9:5d:5a:2d:b3:
ca:f4:e5:ef:61:a3:40:ab:2a:13:8e:e6:79:c9:a9:
90:51:9d:0e:aa:22:d6:c2:ee:07:cc:34:6f:97:c5:
3e:f5:cc:64:ee:ba:33:28:b4:51:f7:a8:db:53:e5:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:CA:99:28:89:E8:0A:84:45:E3:5B:B9:F7:11:B1:A5:C3:DF:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W9zKmSiJ6AqEReNbufcRsaXD3_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:e9:62:1e:8a:af:c2:a5:46:e7:90:b4:92:b0:1f:87:09:7e:
23:7c:ca:22:90:17:9e:23:c4:15:3d:f7:dc:f1:7d:bd:6b:60:
88:22:f0:97:cf:55:d0:3d:33:91:b3:39:77:b7:a2:e9:bc:f0:
01:41:7f:e4:07:99:34:a6:0b:ca:bc:49:74:d1:8c:dc:9c:25:
fa:f5:d5:11:5d:6d:a1:be:c4:65:6c:b4:bb:9c:2c:fe:43:d1:
21:47:ef:3b:64:36:a7:da:12:19:bc:66:d5:de:b0:0a:b2:1b:
da:9a:bf:78:b5:a9:26:81:00:4b:e6:33:33:dd:65:dd:54:22:
ae:b3:d7:b8:01:67:62:5c:5d:7e:8a:bb:2b:94:d4:35:49:c1:
5e:80:f9:61:50:24:1f:08:ab:4b:a3:a0:66:6d:6f:0a:2c:5b:
34:dc:aa:91:98:33:b0:dc:6c:c9:2b:7a:c0:e5:1b:3b:61:d2:
85:b6:21:28:ac:8e:05:76:86:e0:3c:9e:4a:40:dc:5c:b5:41:
0e:93:6c:fd:ec:13:f2:72:02:b9:f8:28:2a:fb:fd:7d:a6:a3:
84:32:f9:4b:65:f2:9f:63:2a:2b:e2:aa:6c:98:25:11:ee:67:
51:68:ce:f7:16:5e:9c:82:a7:f2:a5:0a:e4:36:ee:42:a0:bd:
06:ec:8e:e1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIx
NDUzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVCRENDQTk5Mjg4OUU4
MEE4NDQ1RTM1QkI5RjcxMUIxQTVDM0RGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIEZlcxVd7LT+km0xxI3zSMsDZNv/TbUegickTmOWYqM/xhJfM
tEmEiFi7YqH1uN7CgCQedTfDKHT6oXU7OdUnDtHWUbPBnHH/FZHTyxJf2e0RQQWc
9w3ddMkn1BTAtZralBi23VM0QUcAzNqBDVZjR+RJm7zLRlkvb6LSRV3dsyzaT0Ch
dqPU5x7qEmu26LzHqE3yDCeYHRv4gF6y1Ri7owMHOe4z1c6qZoTBjcQZlJUY2Zzt
EmP2yvY7pgHGcz9lqAY79xAhWGeI/uy5XVots8r05e9ho0CrKhOO5nnJqZBRnQ6q
ItbC7gfMNG+XxT71zGTuujMotFH3qNtT5SyXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUW9zKmSiJ6AqEReNbufcRsaXD3/wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1c5ekttU2lKNkFxRVJl
TmJ1ZmNSc2FYRDNfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAt+liHoqvwqVG55C0krAfhwl+I3zKIpAX
niPEFT333PF9vWtgiCLwl89V0D0zkbM5d7ei6bzwAUF/5AeZNKYLyrxJdNGM3Jwl
+vXVEV1tob7EZWy0u5ws/kPRIUfvO2Q2p9oSGbxm1d6wCrIb2pq/eLWpJoEAS+Yz
M91l3VQirrPXuAFnYlxdfoq7K5TUNUnBXoD5YVAkHwirS6OgZm1vCixbNNyqkZgz
sNxsySt6wOUbO2HShbYhKKyOBXaG4DyeSkDcXLVBDpNs/ewT8nICufgoKvv9faaj
hDL5S2Xyn2MqK+KqbJglEe5nUWjO9xZenIKn8qUK5DbuQqC9BuyO4Q==
-----END CERTIFICATE-----
Generated at Thu May 2 20:04:04 2024 by rpki-client on console.sobornost.net