Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5YwDRkKy-lUqIF0RqiahRqO8kAc.roa
File: 5YwDRkKy-lUqIF0RqiahRqO8kAc.roa (raw, json)
Hash identifier: oq1gBGr9P9rTLQuf2wRamwiKc5cX+lU8QX7YPwynWHs=
Subject key identifier: E5:8C:03:46:42:B2:FA:55:2A:20:5D:11:AA:26:A1:46:A3:BC:90:07
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CFE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5YwDRkKy-lUqIF0RqiahRqO8kAc.roa
Signing time: Wed 01 May 2024 05:53:34 +0000
ROA not before: Wed 01 May 2024 05:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19710 (0x4cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 05:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E58C034642B2FA552A205D11AA26A146A3BC9007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:84:28:b7:f9:8f:e1:58:dc:49:77:1e:91:bb:
f1:da:f5:4a:af:41:76:35:58:b1:9f:59:18:6f:73:
23:3d:88:48:77:17:44:f9:92:db:b9:48:9a:9e:a2:
04:ad:65:ec:4f:36:38:ea:f2:c1:31:8f:03:3c:22:
b4:3c:8f:4c:17:c6:a6:18:e6:b9:90:e7:8f:c3:4b:
02:e2:33:ff:09:95:0e:d4:06:9d:0c:ac:fa:ad:ef:
57:52:f8:15:f1:d7:3a:d5:30:48:ca:7d:df:31:3f:
90:75:04:90:fb:f5:7a:a3:14:bf:c8:f8:20:56:2f:
ac:d4:2e:88:ba:5d:d7:b8:dc:62:d9:65:20:2a:5d:
b1:87:98:48:ad:cb:cc:d4:50:7f:8f:2a:5f:d8:97:
20:b1:8a:5c:3b:0b:de:09:e7:21:b3:da:93:71:39:
88:e9:fb:bd:89:95:d1:d8:1b:ac:bf:77:9c:c5:2b:
11:2f:4c:0e:9a:33:11:1f:24:98:4c:b8:dd:cc:fe:
cb:8f:2e:8a:f8:86:74:bc:93:81:b5:d4:74:31:d6:
37:54:79:12:fb:f9:a9:8a:28:0b:ae:9d:1c:07:d6:
8d:6a:46:e2:b5:05:17:ad:02:36:01:d0:62:31:5a:
c2:57:4b:f8:cd:51:d7:35:bb:c0:89:ba:66:a7:36:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:03:46:42:B2:FA:55:2A:20:5D:11:AA:26:A1:46:A3:BC:90:07
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5YwDRkKy-lUqIF0RqiahRqO8kAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:59:ec:68:07:67:2d:81:6b:cf:46:b6:93:46:9d:f1:f6:fa:
22:46:a7:25:5c:1e:f0:87:33:64:50:74:ff:6d:f5:e2:95:49:
9b:d7:b9:17:f7:7b:da:b6:97:a0:13:dd:8e:07:a7:dc:5e:e1:
4f:6c:8e:ab:a4:c5:75:94:1b:2c:41:68:58:ba:2f:ac:32:5f:
79:00:80:7c:9e:0c:25:ff:b7:ff:06:2c:35:4b:b3:ab:3c:0e:
e4:5b:d6:e6:08:c9:ec:3b:f4:61:77:3a:68:a5:c6:9f:10:42:
33:5f:30:16:23:e9:b7:c4:1d:76:a6:02:4d:9e:c6:c1:74:b8:
0f:92:44:cf:25:14:1d:7f:71:11:99:4d:d9:d7:f6:0a:c4:28:
05:c9:30:9d:78:aa:0c:10:a1:58:00:35:18:6e:03:c9:2a:54:
f0:41:40:c4:41:05:03:62:b8:0c:c5:1a:3b:72:d7:4d:b3:db:
c0:51:33:54:f4:ac:54:31:75:bc:61:13:30:2c:19:f7:08:c3:
22:3e:f3:69:0d:6d:a7:e9:d7:7b:79:55:28:48:95:f2:a6:ce:
e7:ac:8e:ec:26:a2:70:f1:c9:56:15:28:b3:7b:67:a4:18:42:
c1:29:71:8c:13:ac:c6:35:fe:e7:d6:fc:20:b2:5a:46:d0:dc:
85:7e:23:f9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDEw
NTUzMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU1OEMwMzQ2NDJCMkZB
NTUyQTIwNUQxMUFBMjZBMTQ2QTNCQzkwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8hCi3+Y/hWNxJdx6Ru/Ha9UqvQXY1WLGfWRhvcyM9iEh3F0T5
ktu5SJqeogStZexPNjjq8sExjwM8IrQ8j0wXxqYY5rmQ54/DSwLiM/8JlQ7UBp0M
rPqt71dS+BXx1zrVMEjKfd8xP5B1BJD79XqjFL/I+CBWL6zULoi6Xde43GLZZSAq
XbGHmEity8zUUH+PKl/YlyCxilw7C94J5yGz2pNxOYjp+72JldHYG6y/d5zFKxEv
TA6aMxEfJJhMuN3M/suPLor4hnS8k4G11HQx1jdUeRL7+amKKAuunRwH1o1qRuK1
BRetAjYB0GIxWsJXS/jNUdc1u8CJumanNkCTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU5YwDRkKy+lUqIF0RqiahRqO8kAcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzVZd0RSa0t5LWxVcUlG
MFJxaWFoUnFPOGtBYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAclnsaAdnLYFrz0a2k0ad8fb6IkanJVwe
8IczZFB0/2314pVJm9e5F/d72raXoBPdjgen3F7hT2yOq6TFdZQbLEFoWLovrDJf
eQCAfJ4MJf+3/wYsNUuzqzwO5FvW5gjJ7Dv0YXc6aKXGnxBCM18wFiPpt8QddqYC
TZ7GwXS4D5JEzyUUHX9xEZlN2df2CsQoBckwnXiqDBChWAA1GG4DySpU8EFAxEEF
A2K4DMUaO3LXTbPbwFEzVPSsVDF1vGETMCwZ9wjDIj7zaQ1tp+nXe3lVKEiV8qbO
56yO7CaicPHJVhUos3tnpBhCwSlxjBOsxjX+59b8ILJaRtDchX4j+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:07 2025 by rpki-client