Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0P9yfdd34EQQrfKhNIb-P6GPmuQ.roa
File: 0P9yfdd34EQQrfKhNIb-P6GPmuQ.roa (raw, json)
Hash identifier: wVg2yW66l98TvgCWGKr/6aA9QC0RsEoEN+CzBhB3C7o=
Subject key identifier: D0:FF:72:7D:D7:77:E0:44:10:AD:F2:A1:34:86:FE:3F:A1:8F:9A:E4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F83
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0P9yfdd34EQQrfKhNIb-P6GPmuQ.roa
Signing time: Sat 13 Apr 2024 06:22:49 +0000
ROA not before: Sat 13 Apr 2024 06:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16259 (0x3f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 06:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D0FF727DD777E04410ADF2A13486FE3FA18F9AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:59:1e:9d:b6:d2:a5:29:03:92:20:5c:1e:
43:e0:14:6b:0d:d0:a8:ca:16:bd:aa:69:77:de:f8:
e5:b0:95:b7:22:4d:c4:ea:f0:1a:cf:00:3a:2f:3f:
d8:2b:51:75:81:90:63:81:a8:85:d7:24:99:ef:f6:
e3:c2:da:14:76:7a:c8:70:59:ce:01:24:3b:8e:be:
8a:fc:8b:57:37:ed:3f:e3:6c:c7:23:90:06:21:83:
b4:de:a5:2a:7a:2c:1a:0f:c3:aa:ca:14:6a:62:33:
b2:e6:f1:34:8a:c8:76:89:49:07:0b:16:67:a2:b9:
fb:7f:68:11:42:39:2d:23:65:61:4d:be:f0:d7:2a:
94:d8:bf:0e:9f:70:75:fd:1c:b8:ed:56:5f:73:73:
99:4f:de:4c:2e:30:e1:0b:b5:ed:9d:1c:d7:f4:8c:
52:0d:c4:1e:ec:53:78:98:6e:3f:c6:9a:96:34:d2:
7a:4e:f5:1e:c2:0c:5c:91:13:f2:fc:df:d1:62:6f:
a7:4a:bb:7e:34:cd:f3:99:5c:11:73:41:a4:1e:4d:
5b:ab:7e:71:ee:f8:14:89:0e:c6:bb:b6:ff:ed:63:
9f:b7:d2:45:12:9c:94:bc:9f:74:ff:4a:df:f2:c9:
3b:88:f0:ce:03:9f:e7:88:2a:8d:fa:f0:62:cd:f9:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:72:7D:D7:77:E0:44:10:AD:F2:A1:34:86:FE:3F:A1:8F:9A:E4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0P9yfdd34EQQrfKhNIb-P6GPmuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
33:39:0d:62:54:35:95:30:53:9d:50:44:2d:88:78:8c:58:71:
4c:68:9a:60:e1:80:80:79:79:15:3c:07:89:31:33:ea:e7:59:
a6:09:7e:9e:77:08:37:3f:fe:48:cd:48:19:d3:2b:e2:d7:e1:
dc:cd:00:ab:83:cc:7c:b4:21:34:d1:fd:5f:14:25:28:bb:96:
4a:fd:9a:5b:e8:2f:df:65:51:81:ba:68:92:26:d1:e0:22:9c:
d9:27:69:77:70:f3:6d:03:d7:f9:b5:57:ed:9d:27:c8:dc:94:
f0:fd:7b:32:45:da:93:81:40:d5:b0:79:44:e4:c0:4c:26:dc:
f4:8f:04:7b:17:2c:9b:68:39:5b:7d:d7:81:c2:21:d0:47:a2:
75:29:3e:3a:1a:67:02:33:96:ce:ae:ed:ab:ed:bd:26:32:1b:
11:82:b9:0b:4b:50:09:9d:97:69:95:6a:36:b6:15:b1:b2:1e:
d4:79:0e:6c:74:d9:83:b2:37:9e:9d:e5:df:dd:d3:f5:b6:f6:
70:7c:24:09:1e:6d:66:84:d9:d7:79:6f:52:2f:de:5a:c0:f7:
d3:bd:6f:1f:91:15:e6:6a:18:c8:1f:cd:d7:ea:b1:5c:75:36:
f8:d2:9b:53:40:b1:96:9a:93:61:6f:90:20:11:08:b9:23:21:
38:6a:84:b6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICP4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMw
NjIyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQwRkY3MjdERDc3N0Uw
NDQxMEFERjJBMTM0ODZGRTNGQTE4RjlBRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCf11kenbbSpSkDkiBcHkPgFGsN0KjKFr2qaXfe+OWwlbciTcTq
8BrPADovP9grUXWBkGOBqIXXJJnv9uPC2hR2eshwWc4BJDuOvor8i1c37T/jbMcj
kAYhg7TepSp6LBoPw6rKFGpiM7Lm8TSKyHaJSQcLFmeiuft/aBFCOS0jZWFNvvDX
KpTYvw6fcHX9HLjtVl9zc5lP3kwuMOELte2dHNf0jFINxB7sU3iYbj/GmpY00npO
9R7CDFyRE/L839Fib6dKu340zfOZXBFzQaQeTVurfnHu+BSJDsa7tv/tY5+30kUS
nJS8n3T/St/yyTuI8M4Dn+eIKo368GLN+XjnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0P9yfdd34EQQrfKhNIb+P6GPmuQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBQOXlmZGQzNEVRUXJm
S2hOSWItUDZHUG11US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADM5DWJUNZUwU51QRC2IeIxYcUxommDh
gIB5eRU8B4kxM+rnWaYJfp53CDc//kjNSBnTK+LX4dzNAKuDzHy0ITTR/V8UJSi7
lkr9mlvoL99lUYG6aJIm0eAinNknaXdw820D1/m1V+2dJ8jclPD9ezJF2pOBQNWw
eUTkwEwm3PSPBHsXLJtoOVt914HCIdBHonUpPjoaZwIzls6u7avtvSYyGxGCuQtL
UAmdl2mVaja2FbGyHtR5Dmx02YOyN56d5d/d0/W29nB8JAkebWaE2dd5b1Iv3lrA
99O9bx+RFeZqGMgfzdfqsVx1NvjSm1NAsZaak2FvkCARCLkjIThqhLY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:08 2025 by rpki-client