Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_AssKhrEH68m8ntJ0Vtwr2yESr4.roa
File: _AssKhrEH68m8ntJ0Vtwr2yESr4.roa (raw, json)
Hash identifier: UkAno8s7EiO8/vtEa72q3sDk8+ujtOTe3KG9xZnhOxM=
Subject key identifier: FC:0B:2C:2A:1A:C4:1F:AF:26:F2:7B:49:D1:5B:70:AF:6C:84:4A:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_AssKhrEH68m8ntJ0Vtwr2yESr4.roa
Signing time: Mon 08 Apr 2024 09:53:04 +0000
ROA not before: Mon 08 Apr 2024 09:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15326 (0x3bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 09:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC0B2C2A1AC41FAF26F27B49D15B70AF6C844ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:2d:2e:66:26:dc:0d:cc:64:87:83:9e:9c:
c9:cb:8d:6f:9e:71:df:1d:f0:fa:11:ec:ea:76:8b:
7b:96:10:bb:73:a1:ce:6b:7f:7a:3f:28:a6:bb:44:
ac:e7:d2:84:05:6a:2d:00:fe:c6:7c:d9:25:81:ce:
e0:4a:73:40:6b:8a:bd:20:03:08:5e:6c:18:82:d9:
14:86:4c:e3:14:4d:49:e8:73:42:c6:4d:44:ab:de:
2a:99:47:46:a6:d7:47:9b:2d:00:17:c6:52:93:df:
bd:8a:fa:65:2a:2b:86:21:3a:06:ab:05:a6:ab:9a:
9b:4b:ae:56:ff:73:89:b3:2b:a2:7e:2f:67:42:95:
c6:eb:ec:46:b3:a1:6f:35:8c:cb:df:4b:a2:cb:f5:
29:53:21:9a:5f:eb:9f:28:0a:0d:58:da:0a:f5:dd:
3f:1f:f9:ad:83:82:bc:f3:55:09:52:ca:05:90:92:
df:21:48:51:6a:04:91:fd:bd:18:89:96:ac:1c:c2:
1b:ee:7a:05:37:7f:47:f8:7e:fd:d5:93:04:04:61:
1f:48:01:95:ee:8a:6d:ac:70:09:83:b5:f9:ac:3d:
bf:a9:be:7e:9d:4b:62:24:e7:72:53:c9:50:de:8c:
d0:4d:53:71:1e:da:99:e9:86:77:e8:e5:26:5c:cb:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:2C:2A:1A:C4:1F:AF:26:F2:7B:49:D1:5B:70:AF:6C:84:4A:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_AssKhrEH68m8ntJ0Vtwr2yESr4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:57:74:73:ea:ac:9b:ba:90:3b:83:b0:a3:be:9a:67:52:5a:
44:f4:0a:67:6e:0f:cb:a8:55:56:99:e4:9c:7b:8a:89:ac:82:
5b:11:27:d8:73:bb:1a:7f:3c:a5:16:13:81:40:2e:f8:5d:61:
39:2d:43:ac:5a:e2:f8:4f:31:54:02:f5:7b:4a:73:ea:99:48:
a5:84:d0:cd:e6:cb:e0:ed:89:f0:5c:28:81:8f:8b:99:46:88:
d8:8a:53:e2:62:57:ab:9d:15:93:18:20:80:1c:a7:33:39:60:
15:e5:b0:a4:0d:8c:af:88:af:06:67:ef:a7:fc:67:e7:c4:e2:
4f:6c:dd:c6:cf:b8:18:82:9f:d8:12:4a:84:cd:1a:b1:69:78:
93:b8:c4:f3:a9:37:86:ff:b7:f8:3e:d8:15:4c:1e:0e:43:e2:
ac:54:c0:18:20:58:69:81:98:20:1c:40:f3:9b:f9:51:a5:63:
34:35:20:e2:29:c8:d6:9f:c3:85:a4:4a:27:e6:16:df:fd:03:
02:be:1c:54:19:7c:83:cc:27:5d:58:48:cf:d9:97:1a:ce:1c:
87:de:5b:1c:ea:bb:c2:38:a3:35:11:6d:42:b4:84:99:41:06:
fd:53:e1:9c:ca:2d:26:24:b8:10:d6:49:b1:e2:b3:99:2c:a2:
fa:99:8d:8a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICO94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw
OTUzMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDMEIyQzJBMUFDNDFG
QUYyNkYyN0I0OUQxNUI3MEFGNkM4NDRBQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP7S0uZibcDcxkh4OenMnLjW+ecd8d8PoR7Op2i3uWELtzoc5r
f3o/KKa7RKzn0oQFai0A/sZ82SWBzuBKc0Brir0gAwhebBiC2RSGTOMUTUnoc0LG
TUSr3iqZR0am10ebLQAXxlKT372K+mUqK4YhOgarBaarmptLrlb/c4mzK6J+L2dC
lcbr7EazoW81jMvfS6LL9SlTIZpf658oCg1Y2gr13T8f+a2DgrzzVQlSygWQkt8h
SFFqBJH9vRiJlqwcwhvuegU3f0f4fv3VkwQEYR9IAZXuim2scAmDtfmsPb+pvn6d
S2Ik53JTyVDejNBNU3Ee2pnphnfo5SZcy/lnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/AssKhrEH68m8ntJ0Vtwr2yESr4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19Bc3NLaHJFSDY4bThu
dEowVnR3cjJ5RVNyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAPFd0c+qsm7qQO4Owo76aZ1JaRPQKZ24P
y6hVVpnknHuKiayCWxEn2HO7Gn88pRYTgUAu+F1hOS1DrFri+E8xVAL1e0pz6plI
pYTQzebL4O2J8FwogY+LmUaI2IpT4mJXq50VkxgggBynMzlgFeWwpA2Mr4ivBmfv
p/xn58TiT2zdxs+4GIKf2BJKhM0asWl4k7jE86k3hv+3+D7YFUweDkPirFTAGCBY
aYGYIBxA85v5UaVjNDUg4inI1p/DhaRKJ+YW3/0DAr4cVBl8g8wnXVhIz9mXGs4c
h95bHOq7wjijNRFtQrSEmUEG/VPhnMotJiS4ENZJseKzmSyi+pmNig==
-----END CERTIFICATE-----
Generated at Mon Apr 8 16:31:00 2024 by rpki-client on console.sobornost.net