Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0VGxJ0ZCMKcUbAe17gqFnevgVfk.roa
File: 0VGxJ0ZCMKcUbAe17gqFnevgVfk.roa (raw, json)
Hash identifier: xvqjHXz9qeOSpqNesgTaIGqQSbf1GN+kWCbCJ+KtGXs=
Subject key identifier: D1:51:B1:27:46:42:30:A7:14:6C:07:B5:EE:0A:85:9D:EB:E0:55:F9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 391B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0VGxJ0ZCMKcUbAe17gqFnevgVfk.roa
Signing time: Thu 04 Apr 2024 17:22:21 +0000
ROA not before: Thu 04 Apr 2024 17:22:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14619 (0x391b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 17:22:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D151B127464230A7146C07B5EE0A859DEBE055F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:0c:f5:99:2f:83:ba:d6:bd:75:f4:4e:c2:
af:e1:c6:68:01:5e:1e:95:b2:8d:f0:99:e9:8e:e2:
23:20:ae:03:71:ca:c6:c4:d3:bf:7c:65:d3:e1:fb:
f0:c9:3b:5e:19:de:03:eb:19:11:b5:04:4e:2c:d5:
9d:a1:71:e2:3d:b9:6d:b6:74:c8:51:61:08:64:fa:
01:20:63:58:0f:a0:d1:b0:a1:c6:6c:a1:15:a3:fd:
e6:d1:09:2a:b6:07:a6:d8:ac:3e:c0:75:27:47:f2:
5b:98:c2:17:13:87:7b:65:14:1c:e2:57:31:c2:55:
75:65:1d:22:c0:15:89:77:a0:de:8d:5b:55:ae:4c:
be:30:b7:55:0c:31:83:5c:a4:c0:11:8a:63:b8:72:
72:f1:c8:79:82:2a:25:ef:13:d9:63:db:73:b2:66:
85:eb:09:8c:64:57:83:29:44:3a:53:f9:78:e0:a4:
ea:19:0b:15:b7:ad:94:12:d8:0b:2f:8a:a9:70:74:
23:21:cc:fb:93:24:46:51:e9:67:5c:e1:2b:7a:90:
32:2a:64:4d:98:8f:15:df:89:8b:ae:6e:6c:1b:38:
96:77:f7:51:c5:57:5c:8d:f7:f4:66:e2:8d:4f:a7:
20:fe:9c:89:bc:08:fd:b8:68:ea:d0:d3:a0:05:59:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:51:B1:27:46:42:30:A7:14:6C:07:B5:EE:0A:85:9D:EB:E0:55:F9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0VGxJ0ZCMKcUbAe17gqFnevgVfk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:dd:30:bc:ec:39:0e:2e:d6:3f:aa:bc:f9:11:6e:84:00:62:
0b:c8:ce:57:9c:d4:cc:e5:01:23:63:e6:42:c6:2a:21:64:57:
52:6b:f6:05:4d:96:dc:db:ff:06:79:7e:3c:58:94:53:75:f7:
33:b1:38:ef:c7:7e:2d:c5:15:97:53:be:2f:71:5e:0f:5b:cb:
a7:d7:48:b4:ab:53:cc:81:ed:6a:ba:12:37:c3:75:35:55:b6:
67:9e:9d:4e:3d:2b:32:21:e6:db:b8:92:91:50:4c:7b:cc:57:
d4:4d:e7:13:f2:b4:59:f5:55:3b:e9:30:3f:27:a5:90:ab:16:
26:ed:67:ac:c3:2f:d4:ff:46:e2:86:74:f6:41:bf:24:a4:9b:
e6:3a:f5:7f:48:72:81:70:d8:a8:57:7a:a9:6b:d7:19:fd:00:
5a:38:e1:ac:c3:05:36:61:09:3d:48:82:2a:76:c5:7f:14:0f:
1a:ef:c6:ec:66:a2:51:ee:bf:13:e9:01:ea:b5:16:f7:fb:ac:
ad:ef:cb:88:c4:99:55:4f:fd:fe:7e:b7:6b:3d:1a:7e:6f:0f:
74:1c:7a:56:49:e8:65:b9:cc:cd:d8:f3:ec:1c:c1:e8:c8:68:
2b:b6:04:11:f3:bc:66:23:5d:f4:d8:41:6d:06:1f:1b:28:e1:
7b:ef:cf:03
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICORswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQx
NzIyMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQxNTFCMTI3NDY0MjMw
QTcxNDZDMDdCNUVFMEE4NTlERUJFMDU1RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSAwz1mS+Duta9dfROwq/hxmgBXh6Vso3wmemO4iMgrgNxysbE
0798ZdPh+/DJO14Z3gPrGRG1BE4s1Z2hceI9uW22dMhRYQhk+gEgY1gPoNGwocZs
oRWj/ebRCSq2B6bYrD7AdSdH8luYwhcTh3tlFBziVzHCVXVlHSLAFYl3oN6NW1Wu
TL4wt1UMMYNcpMARimO4cnLxyHmCKiXvE9lj23OyZoXrCYxkV4MpRDpT+XjgpOoZ
CxW3rZQS2AsviqlwdCMhzPuTJEZR6Wdc4St6kDIqZE2YjxXfiYuubmwbOJZ391HF
V1yN9/Rm4o1PpyD+nIm8CP24aOrQ06AFWWO3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0VGxJ0ZCMKcUbAe17gqFnevgVfkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBWR3hKMFpDTUtjVWJB
ZTE3Z3FGbmV2Z1Zmay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALrdMLzsOQ4u1j+qvPkRboQAYgvIzlec
1MzlASNj5kLGKiFkV1Jr9gVNltzb/wZ5fjxYlFN19zOxOO/Hfi3FFZdTvi9xXg9b
y6fXSLSrU8yB7Wq6EjfDdTVVtmeenU49KzIh5tu4kpFQTHvMV9RN5xPytFn1VTvp
MD8npZCrFibtZ6zDL9T/RuKGdPZBvySkm+Y69X9IcoFw2KhXeqlr1xn9AFo44azD
BTZhCT1Igip2xX8UDxrvxuxmolHuvxPpAeq1Fvf7rK3vy4jEmVVP/f5+t2s9Gn5v
D3QcelZJ6GW5zM3Y8+wcwejIaCu2BBHzvGYjXfTYQW0GHxso4XvvzwM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:35 2025 by rpki-client