Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0qFgCNmweXTI_eRceGZaHNlZxmY.roa
File: 0qFgCNmweXTI_eRceGZaHNlZxmY.roa (raw, json)
Hash identifier: icV9UDfoFXyMMezgxj0HasGT+toTu7yYEvBTLSo2TRA=
Subject key identifier: D2:A1:60:08:D9:B0:79:74:C8:FD:E4:5C:78:66:5A:1C:D9:59:C6:66
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ED7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0qFgCNmweXTI_eRceGZaHNlZxmY.roa
Signing time: Fri 03 May 2024 16:53:48 +0000
ROA not before: Fri 03 May 2024 16:53:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20183 (0x4ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 16:53:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D2A16008D9B07974C8FDE45C78665A1CD959C666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:6b:51:d4:fe:13:94:70:f0:69:17:51:fd:
1b:4a:ad:a6:3f:e9:3e:b9:1c:79:91:1f:d3:af:a7:
f1:58:dd:e7:7e:4f:55:59:a0:25:b2:f5:ea:8e:ec:
17:24:97:71:81:53:1c:db:5f:39:d2:0c:3d:ef:f2:
bf:78:1b:80:11:94:03:0a:cb:e3:9a:3c:92:c2:02:
34:21:41:20:86:b2:d4:86:a2:de:72:4b:5a:15:ba:
37:97:e9:09:33:de:f7:d0:3c:7c:04:0e:b0:19:29:
04:17:c9:41:0a:a1:34:12:23:b7:be:fd:53:14:4c:
cd:f3:81:ea:2b:da:ae:2d:99:03:e8:33:80:fc:00:
b9:cc:75:31:84:ce:01:78:07:c5:ac:a3:0a:d4:ee:
b4:eb:e3:1d:28:ce:38:b1:6d:03:60:d2:7c:2a:3c:
b6:fe:e8:d3:37:4d:1f:b6:4d:28:34:1f:6a:0d:74:
d2:9e:ab:05:7b:f0:60:d8:48:17:42:9d:56:b6:ab:
90:86:7b:ed:d5:75:19:c1:49:d8:8c:a1:03:a7:22:
43:21:d3:2e:fb:91:c5:f6:c6:e8:08:7c:46:7f:92:
d7:bc:96:95:07:90:13:ca:bd:00:93:0f:1f:3c:08:
9f:eb:a7:cb:de:67:cc:4e:f7:7a:e1:f0:0b:0a:99:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:60:08:D9:B0:79:74:C8:FD:E4:5C:78:66:5A:1C:D9:59:C6:66
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0qFgCNmweXTI_eRceGZaHNlZxmY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:00:4c:c7:b6:c7:04:f3:e7:ef:0b:ce:9b:95:67:0d:2f:3e:
fa:1a:bd:2e:c1:99:50:8d:50:0b:e7:27:08:8c:38:22:35:35:
11:4c:20:e9:83:0d:c7:94:fd:b8:0c:87:e7:f7:36:f2:17:00:
25:c4:19:01:16:86:42:6d:74:5e:ae:09:e8:04:c3:7b:aa:c5:
be:58:7b:5f:11:da:95:27:e9:d4:86:3b:b0:5a:22:f7:4a:ca:
bb:b2:1e:e0:1e:2a:8b:fc:11:a7:6d:06:ab:3b:a7:bb:4d:23:
05:fb:8f:e9:57:8e:7b:e3:61:f2:5b:7c:c2:a0:33:9f:a9:65:
0c:26:7c:3c:f6:56:90:c0:00:ef:58:be:c4:5b:06:c3:57:91:
2b:ec:10:35:df:ab:e1:eb:e3:5c:57:d9:47:0f:ab:7b:f5:64:
67:b0:ef:54:4d:dd:dc:0d:df:4d:b8:07:93:67:39:3c:9d:b9:
f2:f6:9f:27:9f:e0:30:73:8e:d8:5f:fd:d2:2d:7d:e1:5c:a6:
25:e7:9a:95:15:67:fd:4a:25:2d:f9:90:ce:0b:d5:91:64:d3:
c8:05:bd:36:3c:57:18:dc:1c:f7:59:45:90:e0:3b:0a:1d:43:
1d:95:a8:27:fa:d9:14:a5:74:70:df:b8:ed:aa:e4:cd:9e:cd:
86:00:25:03
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMx
NjUzNDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQyQTE2MDA4RDlCMDc5
NzRDOEZERTQ1Qzc4NjY1QTFDRDk1OUM2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOYmtR1P4TlHDwaRdR/RtKraY/6T65HHmRH9Ovp/FY3ed+T1VZ
oCWy9eqO7Bckl3GBUxzbXznSDD3v8r94G4ARlAMKy+OaPJLCAjQhQSCGstSGot5y
S1oVujeX6Qkz3vfQPHwEDrAZKQQXyUEKoTQSI7e+/VMUTM3zgeor2q4tmQPoM4D8
ALnMdTGEzgF4B8WsowrU7rTr4x0ozjixbQNg0nwqPLb+6NM3TR+2TSg0H2oNdNKe
qwV78GDYSBdCnVa2q5CGe+3VdRnBSdiMoQOnIkMh0y77kcX2xugIfEZ/kte8lpUH
kBPKvQCTDx88CJ/rp8veZ8xO93rh8AsKmf7zAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU0qFgCNmweXTI/eRceGZaHNlZxmYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBxRmdDTm13ZVhUSV9l
UmNlR1phSE5sWnhtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKwATMe2xwTz5+8LzpuVZw0vPvoavS7B
mVCNUAvnJwiMOCI1NRFMIOmDDceU/bgMh+f3NvIXACXEGQEWhkJtdF6uCegEw3uq
xb5Ye18R2pUn6dSGO7BaIvdKyruyHuAeKov8EadtBqs7p7tNIwX7j+lXjnvjYfJb
fMKgM5+pZQwmfDz2VpDAAO9YvsRbBsNXkSvsEDXfq+Hr41xX2UcPq3v1ZGew71RN
3dwN3024B5NnOTydufL2nyef4DBzjthf/dItfeFcpiXnmpUVZ/1KJS35kM4L1ZFk
08gFvTY8VxjcHPdZRZDgOwodQx2VqCf62RSldHDfuO2q5M2ezYYAJQM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:39 2025 by rpki-client