Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4CB4zh3rEv7rCMS3X81u0J3U_TM.roa
File: 4CB4zh3rEv7rCMS3X81u0J3U_TM.roa (raw, json)
Hash identifier: wH7DDgd5oKayLt6UIcCIagxyIupsAwwTlRo5vOLV6ZI=
Subject key identifier: E0:20:78:CE:1D:EB:12:FE:EB:08:C4:B7:5F:CD:6E:D0:9D:D4:FD:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4CB4zh3rEv7rCMS3X81u0J3U_TM.roa
Signing time: Sat 11 May 2024 16:54:10 +0000
ROA not before: Sat 11 May 2024 16:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21719 (0x54d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 16:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E02078CE1DEB12FEEB08C4B75FCD6ED09DD4FD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:04:e2:da:4e:7d:f1:1e:c9:48:3f:eb:fa:
bb:24:2a:cf:f5:76:55:b0:1a:95:86:0b:8e:b0:56:
30:60:c4:6a:72:4a:14:5a:ea:f5:2a:c1:22:e7:af:
14:7f:30:8c:d4:9a:cc:2a:4d:93:17:87:0c:38:12:
43:f7:7d:da:76:ac:c4:7c:4a:6b:0e:59:57:6c:eb:
d4:4f:7e:0d:bf:5c:f5:dd:6f:55:4a:42:45:94:03:
e5:fd:8d:c8:63:16:a4:65:63:ef:08:3b:d6:f6:a8:
09:de:b3:78:e0:68:2d:18:5b:ac:a4:72:55:c6:8c:
ac:4f:fe:e5:38:85:4b:d3:75:ba:d2:ad:4b:7c:bc:
4f:ad:0c:c0:01:c8:7f:62:f8:27:70:7f:02:6d:23:
13:c7:1a:67:c4:3a:18:16:84:d0:95:ea:ff:70:e9:
b0:f3:39:72:9b:55:3c:af:9d:87:eb:7f:6d:0e:3a:
88:62:a2:22:7a:74:b4:71:3f:3b:22:ca:55:f1:bb:
2f:1b:13:c7:b7:ab:a3:0d:ad:fc:8f:6e:f6:d5:b9:
7c:60:85:ee:b2:5f:83:5c:fc:56:a8:2c:f5:2a:66:
2d:98:b4:5d:66:91:a7:5d:51:e1:0c:5e:37:c3:ba:
09:51:46:f5:fd:82:4d:8c:5b:3b:6d:d2:79:0d:b7:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:78:CE:1D:EB:12:FE:EB:08:C4:B7:5F:CD:6E:D0:9D:D4:FD:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4CB4zh3rEv7rCMS3X81u0J3U_TM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
25:37:e5:4a:90:d6:31:46:3a:89:ff:be:85:2c:23:de:3e:99:
9b:8b:c5:c3:09:c8:16:0e:cb:af:30:32:ec:37:a3:60:69:12:
cb:21:25:ac:64:7f:0f:b7:d9:04:63:e3:d5:a5:e3:59:89:4b:
5f:3a:1e:03:22:14:8a:ac:75:3c:76:f1:5e:a0:06:0f:55:0e:
5d:dd:d4:c1:1b:36:99:05:f0:b1:a7:06:50:9a:3f:e9:c0:9e:
5a:fa:b8:5d:d4:4f:bf:64:82:64:63:83:35:2a:75:ae:55:fe:
46:2c:3f:0a:4c:a0:23:61:55:c1:50:1e:0e:c4:d9:2f:c9:fb:
1e:38:fa:0a:2b:0e:15:e8:49:9c:ad:2d:ad:23:59:ac:f0:ea:
7a:a4:08:11:6b:1a:cf:0b:d4:73:28:f5:04:3f:fb:56:ad:96:
40:d5:8f:8f:e0:76:de:ee:eb:27:0b:46:6c:3c:4d:e9:f4:22:
5f:13:8b:48:c7:e2:6c:f1:ca:6b:4c:0d:bd:a3:bc:eb:04:4e:
01:a3:99:82:b2:b3:d5:0e:c6:8b:48:cf:4d:8b:b0:f0:d9:6c:
a5:0e:bf:f0:2a:c3:2f:46:4e:3c:3d:79:de:09:44:76:ec:07:
5c:0a:53:83:f1:06:d6:9e:c7:62:4e:8e:9f:7d:ef:f6:29:80:
bf:3c:71:04
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTEx
NjU0MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUwMjA3OENFMURFQjEy
RkVFQjA4QzRCNzVGQ0Q2RUQwOURENEZEMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzvgTi2k598R7JSD/r+rskKs/1dlWwGpWGC46wVjBgxGpyShRa
6vUqwSLnrxR/MIzUmswqTZMXhww4EkP3fdp2rMR8SmsOWVds69RPfg2/XPXdb1VK
QkWUA+X9jchjFqRlY+8IO9b2qAnes3jgaC0YW6ykclXGjKxP/uU4hUvTdbrSrUt8
vE+tDMAByH9i+CdwfwJtIxPHGmfEOhgWhNCV6v9w6bDzOXKbVTyvnYfrf20OOohi
oiJ6dLRxPzsiylXxuy8bE8e3q6MNrfyPbvbVuXxghe6yX4Nc/FaoLPUqZi2YtF1m
kaddUeEMXjfDuglRRvX9gk2MWztt0nkNt961AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU4CB4zh3rEv7rCMS3X81u0J3U/TMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzRDQjR6aDNyRXY3ckNN
UzNYODF1MEozVV9UTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACU35UqQ1jFGOon/voUsI94+mZuLxcMJ
yBYOy68wMuw3o2BpEsshJaxkfw+32QRj49Wl41mJS186HgMiFIqsdTx28V6gBg9V
Dl3d1MEbNpkF8LGnBlCaP+nAnlr6uF3UT79kgmRjgzUqda5V/kYsPwpMoCNhVcFQ
Hg7E2S/J+x44+gorDhXoSZytLa0jWazw6nqkCBFrGs8L1HMo9QQ/+1atlkDVj4/g
dt7u6ycLRmw8Ten0Il8Ti0jH4mzxymtMDb2jvOsETgGjmYKys9UOxotIz02LsPDZ
bKUOv/Aqwy9GTjw9ed4JRHbsB1wKU4PxBtaex2JOjp997/YpgL88cQQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:04 2025 by rpki-client