Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/54Sz2BFeveXVczBiVdYEnqzjYOk.roa
File: 54Sz2BFeveXVczBiVdYEnqzjYOk.roa (raw, json)
Hash identifier: sJXKieIEOaEH6UqMrZ9MsJ/CqO6wexyLV5F4X0tzSiw=
Subject key identifier: E7:84:B3:D8:11:5E:BD:E5:D5:73:30:62:55:D6:04:9E:AC:E3:60:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DBF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/54Sz2BFeveXVczBiVdYEnqzjYOk.roa
Signing time: Wed 10 Apr 2024 21:52:46 +0000
ROA not before: Wed 10 Apr 2024 21:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15807 (0x3dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 21:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E784B3D8115EBDE5D573306255D6049EACE360E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:79:a1:e6:99:06:a5:c2:0e:38:f4:46:1d:
49:85:5b:28:ef:2b:68:85:87:9f:62:6d:06:ba:fb:
f3:17:c5:b1:7c:8f:f1:7c:0b:55:57:56:44:3f:a0:
1f:66:ef:e1:2e:4c:3c:f9:2b:62:97:f7:13:7e:f9:
56:5a:4b:33:5d:2e:19:e6:e7:30:f2:4a:95:1f:ef:
74:23:25:22:31:9e:8a:bb:84:a2:c7:d1:16:cf:e4:
5b:d6:bd:ce:03:0a:27:38:84:96:c4:53:2b:84:90:
67:c4:08:8c:ce:9f:e0:11:41:d7:b2:b7:10:ad:7e:
7a:87:26:c6:40:00:01:bd:db:f9:67:a8:11:94:eb:
99:12:3d:98:84:86:25:33:49:76:fa:f4:b2:dd:36:
8e:30:bd:78:ab:2e:75:8f:0b:a0:5f:9d:e6:8e:d4:
7c:b6:cf:83:1d:29:e3:12:78:02:76:03:dd:3e:d9:
c6:50:22:ed:6a:b5:1b:19:c2:39:6f:26:a0:81:18:
bd:cf:a2:81:32:ea:2a:62:c0:aa:fa:92:ce:96:42:
3e:a4:1a:bb:46:9a:2a:82:99:1b:e7:7b:9a:43:44:
68:8b:83:ca:0c:ec:40:30:26:55:6f:5f:98:17:7b:
d7:4e:59:3e:10:f6:c8:bd:fc:24:d2:38:aa:d4:d5:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:B3:D8:11:5E:BD:E5:D5:73:30:62:55:D6:04:9E:AC:E3:60:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/54Sz2BFeveXVczBiVdYEnqzjYOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:a3:35:19:56:0e:8f:62:a7:d8:9f:7e:83:4d:02:36:76:ac:
5c:36:55:11:15:05:58:0a:5e:b9:e4:2e:d7:2a:72:f2:28:f0:
d6:b0:26:77:1c:72:6a:48:4f:96:40:67:71:d8:20:22:de:c2:
9d:30:2f:07:43:ff:5e:0b:29:f5:80:d2:56:39:d8:73:df:07:
1d:e9:bb:c2:5c:a7:11:94:f9:eb:5e:94:1c:13:f2:44:27:90:
a5:7d:34:f9:40:5a:b8:ab:9e:c4:2a:f6:c4:dc:9f:23:bd:ec:
3c:8c:64:a8:ce:d4:1d:5a:71:1d:78:f4:6e:aa:19:7b:0f:fe:
35:27:f6:47:e7:d4:40:9f:f1:b0:29:d9:f9:d3:72:93:43:b4:
9c:85:20:94:c0:e7:d6:86:fd:e9:25:e4:12:dd:cc:be:89:e9:
6c:fe:ba:4a:0b:53:fc:92:6d:b1:81:fb:a4:29:63:ed:a9:b4:
5b:2f:d2:08:ba:77:0d:69:d6:84:ba:92:06:8c:b4:c2:4e:10:
37:97:f9:1a:75:a4:49:05:7c:a4:9b:1f:5e:d7:6d:9c:a8:00:
4c:2a:63:b0:e5:68:e8:94:06:df:39:95:41:f5:ba:6e:0e:95:
d2:29:6d:28:41:11:32:01:e7:94:46:cc:b3:23:af:2e:1d:4b:
1c:37:8c:4e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAy
MTUyNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU3ODRCM0Q4MTE1RUJE
RTVENTczMzA2MjU1RDYwNDlFQUNFMzYwRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZcHmh5pkGpcIOOPRGHUmFWyjvK2iFh59ibQa6+/MXxbF8j/F8
C1VXVkQ/oB9m7+EuTDz5K2KX9xN++VZaSzNdLhnm5zDySpUf73QjJSIxnoq7hKLH
0RbP5FvWvc4DCic4hJbEUyuEkGfECIzOn+ARQdeytxCtfnqHJsZAAAG92/lnqBGU
65kSPZiEhiUzSXb69LLdNo4wvXirLnWPC6BfneaO1Hy2z4MdKeMSeAJ2A90+2cZQ
Iu1qtRsZwjlvJqCBGL3PooEy6ipiwKr6ks6WQj6kGrtGmiqCmRvne5pDRGiLg8oM
7EAwJlVvX5gXe9dOWT4Q9si9/CTSOKrU1b1vAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU54Sz2BFeveXVczBiVdYEnqzjYOkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzU0U3oyQkZldmVYVmN6
QmlWZFlFbnF6allPay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHujNRlWDo9ip9iffoNNAjZ2rFw2VREV
BVgKXrnkLtcqcvIo8NawJncccmpIT5ZAZ3HYICLewp0wLwdD/14LKfWA0lY52HPf
Bx3pu8JcpxGU+etelBwT8kQnkKV9NPlAWrirnsQq9sTcnyO97DyMZKjO1B1acR14
9G6qGXsP/jUn9kfn1ECf8bAp2fnTcpNDtJyFIJTA59aG/ekl5BLdzL6J6Wz+ukoL
U/ySbbGB+6QpY+2ptFsv0gi6dw1p1oS6kgaMtMJOEDeX+Rp1pEkFfKSbH17XbZyo
AEwqY7DlaOiUBt85lUH1um4OldIpbShBETIB55RGzLMjry4dSxw3jE4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org