Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O7haBVCIlCrkNt4FnlltccP8d4g.roa
File: O7haBVCIlCrkNt4FnlltccP8d4g.roa (raw, json)
Hash identifier: gqa9EeHD/Ea38xZPQ5/0e4L4dSJr6DbbSoSu7qADQio=
Subject key identifier: 3B:B8:5A:05:50:88:94:2A:E4:36:DE:05:9E:59:6D:71:C3:FC:77:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F6A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O7haBVCIlCrkNt4FnlltccP8d4g.roa
Signing time: Sat 04 May 2024 11:23:49 +0000
ROA not before: Sat 04 May 2024 11:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20330 (0x4f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 11:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3BB85A055088942AE436DE059E596D71C3FC7788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:c9:46:44:ea:79:a2:06:fe:ee:3f:c8:17:
d0:7b:6a:46:5d:3c:b4:ee:1f:59:43:89:0a:5b:d7:
c5:2f:8b:f1:f4:b1:b6:9e:f7:84:07:ff:ee:64:42:
dc:8e:69:0a:87:27:b8:89:dc:0b:c9:eb:92:4e:b2:
c9:e7:25:50:a9:9a:95:5d:3d:cb:dc:32:49:80:52:
23:3d:71:08:e0:8a:08:70:bc:7d:65:f7:4e:af:a5:
06:03:54:bb:36:f1:18:8d:a7:9c:d8:2f:81:75:c3:
20:84:bc:95:29:27:b0:0c:8a:29:26:3e:9f:16:c6:
e8:69:b7:b1:5a:86:68:e1:72:87:f9:b5:b0:bc:f3:
46:5f:7d:11:8f:d9:c7:e9:53:ba:bf:51:1d:4b:95:
2f:d7:9a:57:8b:c6:c2:3b:45:02:d4:35:8a:67:d3:
d9:a1:2e:70:3c:d9:cc:f6:dc:89:8b:4f:37:a8:79:
65:20:00:50:2f:74:fe:41:c0:18:5f:c5:a7:e9:88:
be:f6:c0:d9:ea:97:c2:e3:04:6f:20:7c:86:10:8e:
1e:e4:d2:bb:fd:96:ab:3c:bf:7f:e3:ad:9c:41:1e:
8d:06:b4:90:d1:00:a7:f9:6e:bd:82:8f:da:97:ad:
26:6d:c3:20:13:ac:cd:b3:c4:ae:1e:97:79:8e:90:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:5A:05:50:88:94:2A:E4:36:DE:05:9E:59:6D:71:C3:FC:77:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O7haBVCIlCrkNt4FnlltccP8d4g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:4e:4c:75:f3:71:6b:c7:6a:14:29:6a:78:09:1a:49:35:ee:
f2:28:58:54:5d:48:5d:43:7f:21:67:e4:9b:07:7e:c7:1b:3c:
a5:90:85:e0:be:1e:b4:43:1f:45:f9:47:2a:6e:49:c9:14:e7:
1d:4b:52:25:11:dc:38:56:d9:ed:93:d5:de:b8:b5:33:ea:7e:
83:dd:34:c4:39:84:00:49:6a:be:f5:83:aa:0d:0d:db:d7:f5:
9f:a5:9c:16:ff:c3:af:6e:9c:3f:80:36:0a:91:47:8a:f9:1a:
6b:64:04:96:cf:60:ff:e7:b3:e8:ef:e1:e4:58:5f:d7:e1:64:
26:a2:ba:13:6e:25:cc:21:53:3e:cc:3d:10:3b:ce:14:a1:eb:
0d:a3:69:bf:bb:a3:4f:7a:33:dd:50:9d:f2:f0:14:ee:be:44:
43:8f:5e:28:1d:d7:51:8c:17:37:54:96:b3:3f:a8:7a:7c:7e:
6b:cd:af:39:8b:4b:ae:1c:47:01:d4:0b:12:d8:ac:32:67:7c:
08:c4:33:f9:c7:96:50:9e:6d:4c:35:cb:76:0a:ca:14:d5:05:
79:83:33:57:8e:28:eb:4d:e1:54:85:fb:39:40:8d:02:d5:74:
73:73:22:db:16:d9:91:72:b8:c5:61:bd:e2:ba:be:24:ab:21:
63:88:a6:26
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICT2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQx
MTIzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNCQjg1QTA1NTA4ODk0
MkFFNDM2REUwNTlFNTk2RDcxQzNGQzc3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrIMlGROp5ogb+7j/IF9B7akZdPLTuH1lDiQpb18Uvi/H0sbae
94QH/+5kQtyOaQqHJ7iJ3AvJ65JOssnnJVCpmpVdPcvcMkmAUiM9cQjgighwvH1l
906vpQYDVLs28RiNp5zYL4F1wyCEvJUpJ7AMiikmPp8Wxuhpt7Fahmjhcof5tbC8
80ZffRGP2cfpU7q/UR1LlS/XmleLxsI7RQLUNYpn09mhLnA82cz23ImLTzeoeWUg
AFAvdP5BwBhfxafpiL72wNnql8LjBG8gfIYQjh7k0rv9lqs8v3/jrZxBHo0GtJDR
AKf5br2Cj9qXrSZtwyATrM2zxK4el3mOkGWlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUO7haBVCIlCrkNt4FnlltccP8d4gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L083aGFCVkNJbENya050
NEZubGx0Y2NQOGQ0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAeU5MdfNxa8dqFClqeAkaSTXu8ihYVF1I
XUN/IWfkmwd+xxs8pZCF4L4etEMfRflHKm5JyRTnHUtSJRHcOFbZ7ZPV3ri1M+p+
g900xDmEAElqvvWDqg0N29f1n6WcFv/Dr26cP4A2CpFHivkaa2QEls9g/+ez6O/h
5Fhf1+FkJqK6E24lzCFTPsw9EDvOFKHrDaNpv7ujT3oz3VCd8vAU7r5EQ49eKB3X
UYwXN1SWsz+oenx+a82vOYtLrhxHAdQLEtisMmd8CMQz+ceWUJ5tTDXLdgrKFNUF
eYMzV44o603hVIX7OUCNAtV0c3Mi2xbZkXK4xWG94rq+JKshY4imJg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:48 2025 by rpki-client