Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OoD88bxkNPn36N0CJYzQoY-vGnM.roa
File: OoD88bxkNPn36N0CJYzQoY-vGnM.roa (raw, json)
Hash identifier: moKOgz2zzS2t5hJ7QZok9FHdyEqb4daYc5lVsVOkQVQ=
Subject key identifier: 3A:80:FC:F1:BC:64:34:F9:F7:E8:DD:02:25:8C:D0:A1:8F:AF:1A:73
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 491E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OoD88bxkNPn36N0CJYzQoY-vGnM.roa
Signing time: Fri 26 Apr 2024 01:53:21 +0000
ROA not before: Fri 26 Apr 2024 01:53:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18718 (0x491e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 01:53:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A80FCF1BC6434F9F7E8DD02258CD0A18FAF1A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:e5:37:c6:d6:c5:13:c2:1c:86:dd:d9:c3:
f0:70:46:7f:72:9d:73:c1:c5:8a:31:1d:e1:d6:3b:
07:15:42:0c:67:82:67:3a:c8:f3:49:33:bd:64:94:
fe:17:c9:2b:dd:16:35:f1:63:51:d5:67:1a:d8:2c:
40:9e:c2:66:31:96:e7:e5:c8:6b:f4:a0:a9:1b:a9:
c0:6a:eb:77:d1:7d:fb:5c:ba:33:8b:98:c7:ac:25:
30:ee:0f:5c:17:9e:74:36:24:07:d5:55:3d:b7:cf:
fd:0a:a0:cc:fc:d0:cd:46:39:f7:6b:b6:56:3a:ba:
c6:19:77:f9:d5:b6:64:f8:b8:05:61:88:e6:99:3f:
c1:31:04:07:94:fe:27:0e:9f:ee:7e:95:c4:62:80:
53:fb:5c:bc:ba:67:d6:48:ec:1d:6c:04:d1:95:28:
13:70:5e:81:58:81:aa:fb:3b:19:87:1c:d5:71:3d:
59:80:8b:ab:c7:a2:f5:fb:7f:31:c3:06:06:89:87:
f4:12:1a:02:70:2e:ba:2c:11:25:41:26:d6:df:74:
a3:5b:f3:36:13:8e:bd:ed:f5:64:2e:18:36:c9:50:
af:cb:c1:e8:47:ad:e9:a5:b1:61:6d:fc:9f:4e:c0:
ed:54:86:04:6e:14:62:35:a0:5d:77:84:8b:45:8a:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:FC:F1:BC:64:34:F9:F7:E8:DD:02:25:8C:D0:A1:8F:AF:1A:73
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OoD88bxkNPn36N0CJYzQoY-vGnM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:d9:16:f0:fc:d3:7d:62:7d:f0:88:de:a4:9e:8e:67:a8:b9:
a1:0d:c4:4d:01:15:57:2b:d8:a0:d3:3b:6d:83:58:7a:9f:3d:
ad:e0:cc:8a:58:e7:ef:d8:f5:97:fc:c1:27:39:21:3b:07:3d:
c4:63:dc:29:d7:d7:96:bb:91:fd:10:67:d6:0a:a0:6c:fb:68:
20:34:52:21:c3:30:94:3c:10:7a:63:e5:8e:f3:72:11:47:0b:
a4:74:eb:ba:52:b0:47:2a:7b:05:d5:85:26:ed:c1:47:29:c9:
24:40:00:fd:83:73:c3:07:c6:b2:94:0f:a8:b5:cd:47:ac:af:
16:8e:45:cb:58:fa:83:44:4f:c1:d9:d8:1b:6f:11:7d:7d:b3:
d3:d3:24:00:3a:37:85:26:93:dd:80:2e:7a:13:9b:f7:aa:f2:
a3:23:49:f3:85:c0:a6:46:7f:5a:36:28:53:dd:79:65:1a:e3:
ed:8e:10:cb:16:09:41:d3:ad:0e:31:64:5a:80:66:46:e1:99:
96:aa:3e:46:99:03:8c:a9:86:06:8a:00:3d:92:10:5d:09:1d:
c5:97:fa:db:19:5c:5e:af:c3:6a:29:37:3a:0e:79:ba:78:03:
2f:1a:14:ff:3f:1a:ef:8b:8c:24:e9:d9:1d:4a:03:0e:4f:08:
64:9c:41:96
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICSR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjYw
MTUzMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBODBGQ0YxQkM2NDM0
RjlGN0U4REQwMjI1OENEMEExOEZBRjFBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl8eU3xtbFE8Icht3Zw/BwRn9ynXPBxYoxHeHWOwcVQgxngmc6
yPNJM71klP4XySvdFjXxY1HVZxrYLECewmYxluflyGv0oKkbqcBq63fRfftcujOL
mMesJTDuD1wXnnQ2JAfVVT23z/0KoMz80M1GOfdrtlY6usYZd/nVtmT4uAVhiOaZ
P8ExBAeU/icOn+5+lcRigFP7XLy6Z9ZI7B1sBNGVKBNwXoFYgar7OxmHHNVxPVmA
i6vHovX7fzHDBgaJh/QSGgJwLrosESVBJtbfdKNb8zYTjr3t9WQuGDbJUK/LwehH
remlsWFt/J9OwO1UhgRuFGI1oF13hItFimP7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUOoD88bxkNPn36N0CJYzQoY+vGnMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L09vRDg4YnhrTlBuMzZO
MENKWXpRb1ktdkduTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAbtkW8PzTfWJ98IjepJ6OZ6i5oQ3ETQEV
VyvYoNM7bYNYep89reDMiljn79j1l/zBJzkhOwc9xGPcKdfXlruR/RBn1gqgbPto
IDRSIcMwlDwQemPljvNyEUcLpHTrulKwRyp7BdWFJu3BRynJJEAA/YNzwwfGspQP
qLXNR6yvFo5Fy1j6g0RPwdnYG28RfX2z09MkADo3hSaT3YAuehOb96ryoyNJ84XA
pkZ/WjYoU915ZRrj7Y4QyxYJQdOtDjFkWoBmRuGZlqo+RpkDjKmGBooAPZIQXQkd
xZf62xlcXq/Daik3Og55ungDLxoU/z8a74uMJOnZHUoDDk8IZJxBlg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:42 2025 by rpki-client