Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/41f_MMWtNyxQVKB-0OYHIOi7ga0.roa
File: 41f_MMWtNyxQVKB-0OYHIOi7ga0.roa (raw, json)
Hash identifier: zEWJplIbYS6tboknOK3+E4nnHrkWpzPQVQzExMrBqf8=
Subject key identifier: E3:57:FF:30:C5:AD:37:2C:50:54:A0:7E:D0:E6:07:20:E8:BB:81:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/41f_MMWtNyxQVKB-0OYHIOi7ga0.roa
Signing time: Mon 06 May 2024 11:23:52 +0000
ROA not before: Mon 06 May 2024 11:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20715 (0x50eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 11:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E357FF30C5AD372C5054A07ED0E60720E8BB81AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:dd:3d:3f:ca:c2:fb:1c:e3:0c:90:27:18:
c2:7e:90:d8:73:28:d9:0d:3d:65:5d:ad:50:66:c3:
86:93:19:c5:34:2e:2d:f6:05:ea:ff:a3:f7:6d:4d:
e3:4a:d1:be:a7:3f:ef:84:62:76:00:c3:0b:82:0a:
1f:9e:7a:92:9d:f9:be:f5:24:7f:37:88:30:c0:6e:
f5:25:47:8f:12:76:98:ff:ae:20:9b:00:9b:d1:5d:
57:57:20:62:7c:fc:f6:7d:11:71:48:7e:af:25:dc:
7f:24:4a:63:4c:c0:3b:82:fe:9d:6c:6c:b5:48:0b:
ec:1d:56:2b:42:b0:92:d4:2e:b3:ea:b0:dd:64:30:
c9:7b:2d:ca:14:69:07:05:47:ec:15:af:38:37:1a:
12:28:88:9b:7e:e3:47:f9:5e:e4:12:a1:e6:0c:7f:
ba:51:dd:0c:96:b3:1d:ea:ca:12:a6:5a:f0:04:38:
33:8a:b5:0d:73:c8:33:60:b8:66:0f:9c:d1:0a:dc:
c1:ed:7c:c6:86:e5:6a:ba:18:4a:a2:6f:4d:ca:37:
41:c1:02:6d:e5:53:78:fe:77:b5:e5:ff:34:27:de:
0b:6c:71:2f:2d:1e:8a:7d:c2:23:b4:e1:30:01:75:
2b:03:2e:6f:b1:00:2a:60:76:46:60:06:84:04:8b:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:FF:30:C5:AD:37:2C:50:54:A0:7E:D0:E6:07:20:E8:BB:81:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/41f_MMWtNyxQVKB-0OYHIOi7ga0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:7f:ab:28:90:8c:bf:89:3a:f0:d6:d5:ac:01:40:50:34:1e:
37:94:d4:32:43:ae:fe:b6:d0:d4:1b:3e:29:8d:aa:1c:ca:5e:
a7:13:54:57:42:15:7e:37:74:82:01:71:fa:0e:db:0f:7f:12:
4d:74:f5:70:88:c0:87:68:ab:1a:1b:6f:61:8e:67:d6:9c:ce:
23:b5:78:f7:ae:5e:a2:90:6b:41:a5:7a:bf:3c:96:9e:6f:51:
ed:92:18:df:39:c0:1a:3b:2b:b5:8f:94:43:0d:b8:5d:c9:73:
ec:b4:a3:06:2d:20:88:7b:53:54:c8:b0:e0:33:43:10:27:0a:
23:8f:15:1a:bb:90:21:0f:89:73:87:29:fa:e9:0e:3c:b1:82:
d1:73:b0:e9:70:76:16:f1:ba:79:41:e1:91:77:44:59:02:7e:
31:2b:6b:01:c5:48:45:a5:24:20:db:50:a6:84:5c:fd:33:f8:
a8:22:7d:69:13:f7:a4:ce:e3:6b:a6:7a:d7:c2:e8:3d:66:70:
51:7c:cc:5a:a0:ca:1f:70:dd:2c:c9:c7:bd:24:d7:27:44:01:
8e:d0:7d:2d:55:58:7b:ef:c4:a6:bf:02:81:46:e1:cd:e6:72:
91:b0:07:c7:32:53:69:94:00:70:0c:3e:19:36:7b:b4:de:58:
bd:49:92:11
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICUOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDYx
MTIzNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUzNTdGRjMwQzVBRDM3
MkM1MDU0QTA3RUQwRTYwNzIwRThCQjgxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpgd09P8rC+xzjDJAnGMJ+kNhzKNkNPWVdrVBmw4aTGcU0Li32
Ber/o/dtTeNK0b6nP++EYnYAwwuCCh+eepKd+b71JH83iDDAbvUlR48Sdpj/riCb
AJvRXVdXIGJ8/PZ9EXFIfq8l3H8kSmNMwDuC/p1sbLVIC+wdVitCsJLULrPqsN1k
MMl7LcoUaQcFR+wVrzg3GhIoiJt+40f5XuQSoeYMf7pR3QyWsx3qyhKmWvAEODOK
tQ1zyDNguGYPnNEK3MHtfMaG5Wq6GEqib03KN0HBAm3lU3j+d7Xl/zQn3gtscS8t
Hop9wiO04TABdSsDLm+xACpgdkZgBoQEix8RAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU41f/MMWtNyxQVKB+0OYHIOi7ga0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzQxZl9NTVd0Tnl4UVZL
Qi0wT1lISU9pN2dhMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACh/qyiQjL+JOvDW1awBQFA0HjeU1DJD
rv620NQbPimNqhzKXqcTVFdCFX43dIIBcfoO2w9/Ek109XCIwIdoqxobb2GOZ9ac
ziO1ePeuXqKQa0Gler88lp5vUe2SGN85wBo7K7WPlEMNuF3Jc+y0owYtIIh7U1TI
sOAzQxAnCiOPFRq7kCEPiXOHKfrpDjyxgtFzsOlwdhbxunlB4ZF3RFkCfjErawHF
SEWlJCDbUKaEXP0z+KgifWkT96TO42umetfC6D1mcFF8zFqgyh9w3SzJx70k1ydE
AY7QfS1VWHvvxKa/AoFG4c3mcpGwB8cyU2mUAHAMPhk2e7TeWL1JkhE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org