Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/00gtKxKFNv85aKXk-7G6D4Kxz8E.roa
File: 00gtKxKFNv85aKXk-7G6D4Kxz8E.roa (raw, json)
Hash identifier: lQ6X9fL9TpMJcOZPwR6MFRb792wzTJqPFnYAn9q66+M=
Subject key identifier: D3:48:2D:2B:12:85:36:FF:39:68:A5:E4:FB:B1:BA:0F:82:B1:CF:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B4B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/00gtKxKFNv85aKXk-7G6D4Kxz8E.roa
Signing time: Sun 07 Apr 2024 15:22:32 +0000
ROA not before: Sun 07 Apr 2024 15:22:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15179 (0x3b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 15:22:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D3482D2B128536FF3968A5E4FBB1BA0F82B1CFC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:4c:ed:80:ab:0a:48:7f:f1:e9:d0:c7:53:
36:9b:f3:3f:db:d7:6a:50:d1:f2:ec:66:2b:5b:47:
b3:2b:8d:3c:01:45:c6:11:5f:7f:91:4f:11:30:5b:
23:a3:9b:2e:56:eb:56:5b:d0:73:7d:b2:a4:e4:22:
a4:9a:b5:63:e8:df:9a:ab:9a:59:7d:9b:d3:4a:e2:
e6:11:fd:16:48:cc:c4:55:04:80:c8:39:80:7b:da:
c2:53:5c:12:e1:bc:25:95:2f:01:9d:fc:55:ed:d6:
97:b7:43:eb:bf:b1:97:a3:4d:08:be:06:22:65:95:
7a:f7:77:ae:25:4d:70:7f:40:d7:64:f4:b3:42:7c:
ca:b3:0a:9f:67:c9:f6:a3:70:e7:4e:35:59:6e:31:
72:e2:d6:80:ed:e0:ea:04:f8:a4:e4:52:3f:b9:03:
4d:0d:9a:33:d4:cc:ab:c2:48:c3:7c:a0:fe:b1:f2:
4e:1c:2c:9f:42:67:00:59:5c:53:db:38:12:60:c0:
81:e7:ef:79:73:9f:3b:c2:18:34:08:02:c4:29:2c:
ca:c0:36:35:31:f8:42:26:a7:84:d4:c3:c2:19:e0:
15:0f:a5:d3:19:47:de:24:07:e3:83:46:03:42:3d:
50:a6:a9:d4:11:d8:3b:79:96:51:43:52:45:66:03:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:2D:2B:12:85:36:FF:39:68:A5:E4:FB:B1:BA:0F:82:B1:CF:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/00gtKxKFNv85aKXk-7G6D4Kxz8E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:a0:91:6f:e6:db:e8:02:7a:a6:e8:2f:2d:0d:00:69:d7:65:
a0:cd:3b:44:28:ca:79:50:56:be:fe:a5:59:ba:3e:66:a3:31:
04:33:ba:e6:d1:63:04:5e:8a:a0:7b:03:b7:8a:b2:c9:72:9c:
fc:bf:01:94:5d:a6:13:53:0b:bd:d1:a6:68:28:00:bf:8e:26:
e3:61:7d:73:c8:c3:bb:b6:46:61:c3:83:e7:6d:d0:53:ca:ab:
d8:d8:49:70:21:a7:df:7e:87:b3:1a:5f:70:b0:3d:96:75:80:
d2:bc:55:2e:3c:8a:23:e6:d0:86:d3:40:20:56:8b:7d:ce:44:
4f:fd:3f:ec:b7:59:58:03:ea:bd:94:8a:0c:41:15:46:f6:95:
43:8c:14:d1:68:4d:c5:f5:b2:ea:e6:8c:29:c5:c3:99:bf:60:
5e:b8:43:20:da:1f:56:a6:0f:bb:9e:36:05:b5:69:d6:56:a3:
e6:a1:a0:86:fe:d6:a4:da:d2:b2:56:30:25:45:bd:1d:a1:0c:
b4:49:f8:5f:39:85:5a:41:7c:88:a3:bb:f1:b5:ef:ed:47:e5:
21:9e:a6:34:b4:f7:2a:58:3e:39:80:43:fd:3e:d9:ea:4f:c6:
e2:0e:7a:94:7c:d8:a0:f1:90:67:06:38:a1:89:3b:77:2c:c8:
4e:44:d0:6a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcx
NTIyMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQzNDgyRDJCMTI4NTM2
RkYzOTY4QTVFNEZCQjFCQTBGODJCMUNGQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm20ztgKsKSH/x6dDHUzab8z/b12pQ0fLsZitbR7MrjTwBRcYR
X3+RTxEwWyOjmy5W61Zb0HN9sqTkIqSatWPo35qrmll9m9NK4uYR/RZIzMRVBIDI
OYB72sJTXBLhvCWVLwGd/FXt1pe3Q+u/sZejTQi+BiJllXr3d64lTXB/QNdk9LNC
fMqzCp9nyfajcOdONVluMXLi1oDt4OoE+KTkUj+5A00NmjPUzKvCSMN8oP6x8k4c
LJ9CZwBZXFPbOBJgwIHn73lznzvCGDQIAsQpLMrANjUx+EImp4TUw8IZ4BUPpdMZ
R94kB+ODRgNCPVCmqdQR2Dt5llFDUkVmA6VtAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU00gtKxKFNv85aKXk+7G6D4Kxz8EwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzAwZ3RLeEtGTnY4NWFL
WGstN0c2RDRLeHo4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFagkW/m2+gCeqboLy0NAGnXZaDNO0Qo
ynlQVr7+pVm6PmajMQQzuubRYwReiqB7A7eKsslynPy/AZRdphNTC73RpmgoAL+O
JuNhfXPIw7u2RmHDg+dt0FPKq9jYSXAhp99+h7MaX3CwPZZ1gNK8VS48iiPm0IbT
QCBWi33ORE/9P+y3WVgD6r2UigxBFUb2lUOMFNFoTcX1surmjCnFw5m/YF64QyDa
H1amD7ueNgW1adZWo+ahoIb+1qTa0rJWMCVFvR2hDLRJ+F85hVpBfIiju/G17+1H
5SGepjS09ypYPjmAQ/0+2epPxuIOepR82KDxkGcGOKGJO3csyE5E0Go=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:08 2024 by rpki-client on console-ams.rpki-client.org