Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0R5US2OHhsiGWkPUo1XEEVDEpvs.roa
File: 0R5US2OHhsiGWkPUo1XEEVDEpvs.roa (raw, json)
Hash identifier: R7tr1Eo+0u/aIrqjTtNK6lgVLB7ktp+ptMLysmm+nvw=
Subject key identifier: D1:1E:54:4B:63:87:86:C8:86:5A:43:D4:A3:55:C4:11:50:C4:A6:FB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4887
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0R5US2OHhsiGWkPUo1XEEVDEpvs.roa
Signing time: Thu 25 Apr 2024 06:53:39 +0000
ROA not before: Thu 25 Apr 2024 06:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18567 (0x4887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 06:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D11E544B638786C8865A43D4A355C41150C4A6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:e4:b0:47:cc:3f:2a:51:c8:70:30:56:dd:
d7:ec:c6:34:ee:79:50:e4:6c:a8:47:cf:8a:7c:00:
37:32:c1:a4:99:2c:a2:1e:be:23:54:f7:48:ea:c4:
3e:30:eb:f1:6b:45:77:71:01:fd:0e:c9:0b:f5:2c:
0e:de:22:c7:27:3f:c2:22:71:27:83:a1:6c:40:32:
04:87:e1:55:f5:a0:1b:cf:5f:8e:8a:45:14:a5:b2:
b3:82:4e:c1:cc:b6:da:a3:9b:f4:b8:28:5e:89:ef:
f5:58:b7:e7:8b:c5:fd:c3:20:5a:fc:6e:2c:5c:d2:
74:81:08:25:a9:3e:77:d2:d6:64:0a:b7:d2:b8:c0:
5a:e7:ad:0d:21:38:3e:4b:8a:bf:76:bd:6a:55:36:
e9:24:7b:88:94:f8:19:1a:41:6b:d8:0e:40:41:ea:
a3:bb:2b:dd:d1:b1:70:35:0b:5b:c3:c0:cd:13:ce:
d9:a4:e2:ea:ba:a7:57:9c:a5:71:32:c4:3d:51:0e:
c7:ff:5d:98:7f:cc:c7:52:ea:e0:14:91:b0:8d:5c:
c4:24:2b:0d:c6:f2:95:5c:e3:43:f7:2a:56:47:5d:
9f:5c:a3:00:31:5c:65:3d:d4:83:14:7d:67:56:8d:
27:c1:44:38:e8:16:d4:88:fe:60:38:df:1b:19:59:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:54:4B:63:87:86:C8:86:5A:43:D4:A3:55:C4:11:50:C4:A6:FB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0R5US2OHhsiGWkPUo1XEEVDEpvs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:52:67:16:09:9c:bd:cb:37:c2:59:8f:9a:b7:e6:b4:60:8f:
c2:42:e6:1f:61:cf:26:ee:36:3e:99:6b:0a:2a:21:2e:27:3c:
95:0e:e0:fd:7d:89:78:e4:c4:ac:cd:7b:0a:ce:76:8f:8c:d2:
2b:73:2f:6b:4c:8d:2c:47:ad:a4:14:4f:de:62:d1:5f:23:82:
e1:4e:9a:7d:de:33:95:03:37:d0:31:12:b5:1b:b0:62:ad:c8:
ec:7a:90:23:6d:a2:ba:8d:e3:11:7f:90:8e:ca:27:14:e9:05:
cf:5c:07:47:05:d2:de:b1:67:69:5f:47:81:01:c0:0e:e2:aa:
42:b8:a3:5d:a0:fb:04:8c:c1:f0:a1:0c:1c:8e:82:4e:eb:f6:
2c:b7:55:7b:0f:b1:86:f1:50:5d:ab:75:bd:be:0b:f1:5f:03:
bc:60:d0:9b:91:10:ab:c0:29:f9:92:49:7e:49:c5:cc:e0:46:
4d:4d:50:5c:d1:ce:10:a2:9e:31:cd:4b:5b:1e:62:01:8e:3e:
9d:56:ba:9c:a5:35:fb:7d:d0:6c:ed:08:ed:9a:14:81:25:2b:
6b:ea:5c:a5:36:e0:2a:bf:e2:1f:4f:b9:9e:5e:ad:d1:af:c2:
b3:d2:5f:90:85:83:06:3a:78:5b:5d:72:b4:b8:e6:ac:3c:dc:
ba:b9:b9:05
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICSIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUw
NjUzMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQxMUU1NDRCNjM4Nzg2
Qzg4NjVBNDNENEEzNTVDNDExNTBDNEE2RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHR+SwR8w/KlHIcDBW3dfsxjTueVDkbKhHz4p8ADcywaSZLKIe
viNU90jqxD4w6/FrRXdxAf0OyQv1LA7eIscnP8IicSeDoWxAMgSH4VX1oBvPX46K
RRSlsrOCTsHMttqjm/S4KF6J7/VYt+eLxf3DIFr8bixc0nSBCCWpPnfS1mQKt9K4
wFrnrQ0hOD5Lir92vWpVNukke4iU+BkaQWvYDkBB6qO7K93RsXA1C1vDwM0Tztmk
4uq6p1ecpXEyxD1RDsf/XZh/zMdS6uAUkbCNXMQkKw3G8pVc40P3KlZHXZ9cowAx
XGU91IMUfWdWjSfBRDjoFtSI/mA43xsZWR/LAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0R5US2OHhsiGWkPUo1XEEVDEpvswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBSNVVTMk9IaHNpR1dr
UFVvMVhFRVZERXB2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADZSZxYJnL3LN8JZj5q35rRgj8JC5h9h
zybuNj6ZawoqIS4nPJUO4P19iXjkxKzNewrOdo+M0itzL2tMjSxHraQUT95i0V8j
guFOmn3eM5UDN9AxErUbsGKtyOx6kCNtorqN4xF/kI7KJxTpBc9cB0cF0t6xZ2lf
R4EBwA7iqkK4o12g+wSMwfChDByOgk7r9iy3VXsPsYbxUF2rdb2+C/FfA7xg0JuR
EKvAKfmSSX5JxczgRk1NUFzRzhCinjHNS1seYgGOPp1WupylNft90GztCO2aFIEl
K2vqXKU24Cq/4h9PuZ5erdGvwrPSX5CFgwY6eFtdcrS45qw83Lq5uQU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org