Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oi4KwkqRFibgmtId9WFQ07dhmUo.roa
File: oi4KwkqRFibgmtId9WFQ07dhmUo.roa (raw, json)
Hash identifier: cFl8KxKP4ZC/Q2OEMg6AOUjoaihJ/H1lo8MJyNQfOS0=
Subject key identifier: A2:2E:0A:C2:4A:91:16:26:E0:9A:D2:1D:F5:61:50:D3:B7:61:99:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 45A1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oi4KwkqRFibgmtId9WFQ07dhmUo.roa
Signing time: Sun 21 Apr 2024 10:23:06 +0000
ROA not before: Sun 21 Apr 2024 10:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17825 (0x45a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 10:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A22E0AC24A911626E09AD21DF56150D3B761994A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:66:0b:ae:40:b6:e7:ed:f4:75:b0:c0:cf:
b6:58:ce:be:6a:63:a9:f7:4b:3c:53:77:3e:e5:a8:
d4:54:33:e7:d7:0d:e6:46:db:02:54:f6:d7:75:7d:
6b:32:42:25:1b:3a:77:a8:78:17:cf:5c:70:c6:0e:
a6:bf:80:c9:d9:5d:5c:f6:e3:00:e0:9c:94:3f:7d:
a7:21:58:e2:c8:9f:e2:07:43:71:34:60:90:28:af:
71:34:4d:a4:50:7e:77:85:59:75:6b:cf:1d:a2:e3:
02:50:5a:b0:60:15:48:4a:99:44:56:b3:f0:09:d7:
0f:aa:12:36:42:59:e1:30:cc:e9:48:11:b6:0f:bc:
5c:76:83:3c:1b:eb:b4:15:3c:e2:a3:31:bc:ec:2a:
c6:05:14:33:77:f4:19:80:e5:3c:41:98:ec:96:52:
c1:47:73:54:37:fe:e1:46:44:71:63:31:ca:56:f7:
39:f6:70:30:36:d5:9b:72:59:70:a9:d2:ee:f0:54:
4c:03:57:d6:26:22:3e:0d:d4:55:3a:5e:fb:43:87:
69:e9:ad:de:9f:22:2c:10:eb:c5:ec:65:e8:d1:a5:
2a:31:73:9f:75:2a:3a:2d:5c:f8:81:5c:6e:ab:c4:
1f:a3:a1:99:dc:ca:3f:18:c1:08:aa:6b:3e:31:9d:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:0A:C2:4A:91:16:26:E0:9A:D2:1D:F5:61:50:D3:B7:61:99:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oi4KwkqRFibgmtId9WFQ07dhmUo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:e1:fc:a8:1a:ea:51:4f:03:1d:6a:8b:fb:5c:0f:76:54:b9:
88:df:90:97:48:ac:55:64:1c:3a:9f:63:25:53:a8:b9:0a:55:
09:aa:73:7d:88:7b:23:19:90:2c:46:9d:95:7d:ce:83:f2:97:
75:43:37:76:ea:f7:e2:6d:4c:7d:3c:d3:27:36:2c:f0:0a:31:
7b:5e:a7:79:a2:c7:f3:f5:5a:91:c0:df:ac:d9:27:68:a3:13:
78:2d:f5:12:e2:fe:15:b2:18:32:9c:61:49:cf:e5:17:65:be:
05:e6:1f:93:e3:81:be:00:5e:4d:82:1f:22:18:c2:6b:62:1f:
6b:6f:8d:4d:f5:c6:80:07:ba:29:87:a3:7f:11:4c:94:82:33:
03:56:54:0a:22:df:bb:fa:51:26:81:d3:fc:f8:3c:f8:66:42:
d1:a3:28:60:3d:72:54:a1:93:e3:fb:a9:36:47:b4:f9:a4:29:
1d:77:9d:cc:08:3c:ba:68:16:0d:a3:58:c5:e7:11:1b:93:20:
69:af:23:46:62:52:44:e0:02:57:ea:54:75:94:2c:67:fc:f1:
68:dc:97:3e:2f:94:8d:13:92:d2:ae:f9:78:41:46:04:51:92:
16:f0:a9:c0:33:1b:28:46:85:4b:1a:08:bc:88:47:7d:c3:b6:
41:45:8d:38
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICRaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjEx
MDIzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEEyMkUwQUMyNEE5MTE2
MjZFMDlBRDIxREY1NjE1MEQzQjc2MTk5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPImYLrkC25+30dbDAz7ZYzr5qY6n3SzxTdz7lqNRUM+fXDeZG
2wJU9td1fWsyQiUbOneoeBfPXHDGDqa/gMnZXVz24wDgnJQ/fachWOLIn+IHQ3E0
YJAor3E0TaRQfneFWXVrzx2i4wJQWrBgFUhKmURWs/AJ1w+qEjZCWeEwzOlIEbYP
vFx2gzwb67QVPOKjMbzsKsYFFDN39BmA5TxBmOyWUsFHc1Q3/uFGRHFjMcpW9zn2
cDA21ZtyWXCp0u7wVEwDV9YmIj4N1FU6XvtDh2nprd6fIiwQ68XsZejRpSoxc591
KjotXPiBXG6rxB+joZncyj8YwQiqaz4xnZ8JAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUoi4KwkqRFibgmtId9WFQ07dhmUowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29pNEt3a3FSRmliZ210
SWQ5V0ZRMDdkaG1Vby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADDh/Kga6lFPAx1q
i/tcD3ZUuYjfkJdIrFVkHDqfYyVTqLkKVQmqc32IeyMZkCxGnZV9zoPyl3VDN3bq
9+JtTH080yc2LPAKMXtep3mix/P1WpHA36zZJ2ijE3gt9RLi/hWyGDKcYUnP5Rdl
vgXmH5Pjgb4AXk2CHyIYwmtiH2tvjU31xoAHuimHo38RTJSCMwNWVAoi37v6USaB
0/z4PPhmQtGjKGA9clShk+P7qTZHtPmkKR13ncwIPLpoFg2jWMXnERuTIGmvI0Zi
UkTgAlfqVHWULGf88Wjclz4vlI0TktKu+XhBRgRRkhbwqcAzGyhGhUsaCLyIR33D
tkFFjTg=
-----END CERTIFICATE-----
Generated at Sun Apr 21 17:47:07 2024 by rpki-client on console.sobornost.net