Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3GRubfjGqUK24_yPoZ_n-jph3vg.roa
File: 3GRubfjGqUK24_yPoZ_n-jph3vg.roa (raw, json)
Hash identifier: XOs9fNqo3indvxJn0LctOaomhLjchgzQ5q05UB8SLx4=
Subject key identifier: DC:64:6E:6D:F8:C6:A9:42:B6:E3:FC:8F:A1:9F:E7:FA:3A:61:DE:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FF7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3GRubfjGqUK24_yPoZ_n-jph3vg.roa
Signing time: Sun 05 May 2024 04:53:50 +0000
ROA not before: Sun 05 May 2024 04:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20471 (0x4ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 04:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC646E6DF8C6A942B6E3FC8FA19FE7FA3A61DEF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:c5:b7:65:56:0a:61:45:d6:72:e3:4f:16:
cb:56:57:71:3e:19:99:04:96:9b:e8:49:61:a8:d7:
cb:ea:94:e8:c8:3c:68:4c:55:1b:d9:b7:78:fa:5b:
e1:70:af:b6:85:53:40:95:95:cf:84:41:62:d3:49:
0d:e0:7a:e0:45:c2:35:2e:24:98:8d:3b:51:66:0b:
b3:51:38:3e:4f:15:95:2f:0b:cf:a5:6c:cb:06:84:
4d:2a:85:a8:0e:fc:03:31:ba:a1:a9:1f:0b:93:9d:
22:16:e1:5e:df:a3:c2:e0:d2:a2:d1:f6:77:4e:1c:
83:3b:c7:fe:7a:58:0b:88:57:fc:77:a0:9e:ba:47:
82:7b:72:ef:cd:13:f5:05:63:17:50:c0:7f:f7:30:
e7:2c:b0:9a:de:4e:6a:48:56:3d:06:e5:aa:a8:db:
ef:8d:d5:ff:b9:7f:7b:66:a5:f2:19:32:a1:b8:50:
fa:0a:35:44:f3:81:db:b5:73:e0:01:cd:23:4e:7e:
66:04:35:79:0e:36:ae:02:99:bf:08:9f:28:cb:75:
3b:81:40:e3:97:7c:7f:de:1e:fe:91:5e:ef:44:29:
1a:c0:aa:eb:af:14:43:39:80:7e:7f:b3:6e:fb:bf:
dc:27:06:58:1d:83:45:10:68:75:6c:79:fb:8b:dd:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:6E:6D:F8:C6:A9:42:B6:E3:FC:8F:A1:9F:E7:FA:3A:61:DE:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3GRubfjGqUK24_yPoZ_n-jph3vg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:26:65:42:cb:ca:44:7f:9c:42:ef:2d:71:b6:ba:bb:a2:83:
ba:f0:7a:d6:2b:07:d0:c5:a5:1d:90:cd:41:d9:e9:2f:f8:61:
fc:97:01:b9:5b:3b:73:26:3b:39:28:af:0b:00:8f:9a:1e:e0:
65:20:ae:0a:00:5e:17:2a:6f:d1:8c:b9:0f:f0:43:07:21:0a:
79:9b:76:dd:f2:e0:b2:50:e8:72:9f:47:a3:05:52:ad:23:32:
52:8a:b4:9f:0f:19:d0:56:26:5b:b7:85:36:2c:6c:d1:20:32:
41:d8:2f:f0:9f:2b:1c:01:e9:fb:d7:16:78:b9:19:42:d7:d9:
91:c8:da:9a:30:15:e5:c1:35:f0:9a:73:9a:57:8d:85:e8:f2:
32:32:12:06:bf:18:27:de:74:82:0a:60:9e:3b:33:6b:1c:f4:
3e:94:f5:7b:40:26:00:7b:fc:f1:c3:ec:23:eb:f7:39:94:b8:
1f:bb:51:b4:cf:71:30:f7:bf:9c:ed:40:f1:8c:51:41:63:0a:
0f:e5:a3:75:95:fc:b1:ac:ef:b6:01:d0:f9:b7:47:49:3d:c6:
1a:a5:d6:39:ca:27:66:cc:d1:4f:1d:47:ac:7f:58:e5:ff:45:
70:c6:e9:f6:d4:18:e8:7e:5e:89:26:21:41:65:72:76:bc:21:
e4:b9:73:e8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICT/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDUw
NDUzNTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERDNjQ2RTZERjhDNkE5
NDJCNkUzRkM4RkExOUZFN0ZBM0E2MURFRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK08W3ZVYKYUXWcuNPFstWV3E+GZkElpvoSWGo18vqlOjIPGhM
VRvZt3j6W+Fwr7aFU0CVlc+EQWLTSQ3geuBFwjUuJJiNO1FmC7NROD5PFZUvC8+l
bMsGhE0qhagO/AMxuqGpHwuTnSIW4V7fo8Lg0qLR9ndOHIM7x/56WAuIV/x3oJ66
R4J7cu/NE/UFYxdQwH/3MOcssJreTmpIVj0G5aqo2++N1f+5f3tmpfIZMqG4UPoK
NUTzgdu1c+ABzSNOfmYENXkONq4Cmb8InyjLdTuBQOOXfH/eHv6RXu9EKRrAquuv
FEM5gH5/s277v9wnBlgdg0UQaHVsefuL3Sx3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU3GRubfjGqUK24/yPoZ/n+jph3vgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzNHUnViZmpHcVVLMjRf
eVBvWl9uLWpwaDN2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADwmZULLykR/nELvLXG2uruig7rwetYr
B9DFpR2QzUHZ6S/4YfyXAblbO3MmOzkorwsAj5oe4GUgrgoAXhcqb9GMuQ/wQwch
Cnmbdt3y4LJQ6HKfR6MFUq0jMlKKtJ8PGdBWJlu3hTYsbNEgMkHYL/CfKxwB6fvX
Fni5GULX2ZHI2powFeXBNfCac5pXjYXo8jIyEga/GCfedIIKYJ47M2sc9D6U9XtA
JgB7/PHD7CPr9zmUuB+7UbTPcTD3v5ztQPGMUUFjCg/lo3WV/LGs77YB0Pm3R0k9
xhql1jnKJ2bM0U8dR6x/WOX/RXDG6fbUGOh+XokmIUFlcna8IeS5c+g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:12 2024 by rpki-client on console-ams.rpki-client.org