Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0Us5n5hsuGDvYasdB6O7AzPFq2U.roa
File: 0Us5n5hsuGDvYasdB6O7AzPFq2U.roa (raw, json)
Hash identifier: +BrkGmO4hgmyiRc4Upi2wORQU74+ysDDgU0BoHioxew=
Subject key identifier: D1:4B:39:9F:98:6C:B8:60:EF:61:AB:1D:07:A3:BB:03:33:C5:AB:65
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4403
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Us5n5hsuGDvYasdB6O7AzPFq2U.roa
Signing time: Fri 19 Apr 2024 06:23:00 +0000
ROA not before: Fri 19 Apr 2024 06:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17411 (0x4403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 06:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D14B399F986CB860EF61AB1D07A3BB0333C5AB65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:e0:cf:8b:ee:9a:cb:9b:ba:0b:2c:4e:67:
b6:9d:3b:6c:cc:54:aa:79:ce:1f:e0:14:aa:75:ac:
ad:22:81:b9:c3:22:67:a6:3d:76:3f:4c:42:f1:0d:
5e:f3:4d:c2:84:9b:8b:71:33:88:2d:c8:4c:de:a0:
19:c2:1a:9d:ed:6d:3e:fb:cb:8c:b3:7d:4c:bb:29:
41:34:4e:ee:1f:97:9e:6d:b9:f7:7d:3c:88:4c:36:
5c:50:a4:3d:b5:d9:31:88:f8:3f:22:95:45:9c:d9:
35:15:3e:f6:c3:3e:a7:05:e8:89:f3:b8:6a:23:b1:
dc:0e:dd:4e:b2:d1:54:62:e7:2b:2b:89:3f:7f:d7:
a6:02:5c:01:38:16:80:50:dd:91:28:2a:2c:00:08:
a0:cc:95:fc:6d:3a:37:0a:f5:e0:80:49:1b:e1:2e:
1c:7f:83:82:77:81:d3:cb:d1:3a:70:e2:83:ad:ea:
4f:51:2c:bc:43:cf:27:6b:22:fe:38:e8:e2:ad:ed:
b0:27:d2:34:fa:36:bf:cd:e9:cb:cd:6c:4d:49:f0:
46:68:ee:91:b3:b3:18:8b:32:94:62:f2:7f:7e:bd:
1b:51:52:cb:2d:1d:7f:72:96:ab:a3:f5:60:94:aa:
37:bd:64:ae:2e:76:13:9e:c0:98:f0:a8:32:bb:8f:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:39:9F:98:6C:B8:60:EF:61:AB:1D:07:A3:BB:03:33:C5:AB:65
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Us5n5hsuGDvYasdB6O7AzPFq2U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:01:c9:9c:43:d7:21:0c:fb:5f:02:7e:3d:66:5c:1a:6a:f6:
71:d0:ad:e4:90:5c:7a:bb:04:f8:c3:02:f1:cf:8d:8a:b8:1d:
b7:ea:89:c1:c2:ab:4f:16:9c:33:60:c3:bf:ee:3e:36:7d:62:
ad:34:5d:f6:42:65:f2:45:3d:09:0c:e1:86:6a:59:bb:4c:9a:
5a:85:6c:4a:a9:79:83:ae:32:ef:2d:c8:42:58:76:64:44:0b:
80:cd:91:d9:bf:72:e4:19:58:da:56:68:7b:e2:80:10:3d:7b:
4c:ae:88:8b:8b:4f:42:88:a3:fb:d3:06:f1:e5:ad:ee:83:4a:
6a:99:c9:1c:e9:59:d9:f3:1b:1b:ad:3f:9c:b1:73:3d:af:13:
22:01:12:bb:bb:f4:02:07:da:01:d5:a4:3a:ae:d6:ba:9c:20:
c8:be:40:dc:4c:07:56:2d:9c:8f:57:df:5b:52:c4:ff:0f:15:
22:a1:32:f6:90:57:24:81:7b:bb:c5:8d:a8:da:3c:2b:77:96:
58:60:25:17:ab:9d:f5:33:2c:3f:18:9d:6c:0d:69:80:54:ce:
0a:ce:cb:43:9b:ce:cb:3e:70:50:9c:06:8a:21:51:9d:05:5f:
f9:48:6f:ce:64:dc:b9:56:de:73:f1:e0:0b:81:2a:31:ea:63:
33:4d:1b:7c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkw
NjIzMDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQxNEIzOTlGOTg2Q0I4
NjBFRjYxQUIxRDA3QTNCQjAzMzNDNUFCNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCteeDPi+6ay5u6CyxOZ7adO2zMVKp5zh/gFKp1rK0igbnDImem
PXY/TELxDV7zTcKEm4txM4gtyEzeoBnCGp3tbT77y4yzfUy7KUE0Tu4fl55tufd9
PIhMNlxQpD212TGI+D8ilUWc2TUVPvbDPqcF6InzuGojsdwO3U6y0VRi5ysriT9/
16YCXAE4FoBQ3ZEoKiwACKDMlfxtOjcK9eCASRvhLhx/g4J3gdPL0Tpw4oOt6k9R
LLxDzydrIv446OKt7bAn0jT6Nr/N6cvNbE1J8EZo7pGzsxiLMpRi8n9+vRtRUsst
HX9ylquj9WCUqje9ZK4udhOewJjwqDK7j2epAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0Us5n5hsuGDvYasdB6O7AzPFq2UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBVczVuNWhzdUdEdllh
c2RCNk83QXpQRnEyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAIwByZxD1yEM+18Cfj1mXBpq9nHQreSQ
XHq7BPjDAvHPjYq4HbfqicHCq08WnDNgw7/uPjZ9Yq00XfZCZfJFPQkM4YZqWbtM
mlqFbEqpeYOuMu8tyEJYdmREC4DNkdm/cuQZWNpWaHvigBA9e0yuiIuLT0KIo/vT
BvHlre6DSmqZyRzpWdnzGxutP5yxcz2vEyIBEru79AIH2gHVpDqu1rqcIMi+QNxM
B1YtnI9X31tSxP8PFSKhMvaQVySBe7vFjajaPCt3llhgJRernfUzLD8YnWwNaYBU
zgrOy0Obzss+cFCcBoohUZ0FX/lIb85k3LlW3nPx4AuBKjHqYzNNG3w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:02 2024 by rpki-client on console-fra.rpki-client.org