Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5uRMfT-do8cwvG0TyNQjp7dy3uE.roa
File: 5uRMfT-do8cwvG0TyNQjp7dy3uE.roa (raw, json)
Hash identifier: 59dCb7qvskmBtrKsHqlmTOicZ3wyhWxkbhS5VYdBEpM=
Subject key identifier: E6:E4:4C:7D:3F:9D:A3:C7:30:BC:6D:13:C8:D4:23:A7:B7:72:DE:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5uRMfT-do8cwvG0TyNQjp7dy3uE.roa
Signing time: Sat 30 Mar 2024 03:52:07 +0000
ROA not before: Sat 30 Mar 2024 03:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 03:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E6E44C7D3F9DA3C730BC6D13C8D423A7B772DEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:15:b3:cb:d4:d9:a2:5a:06:9f:15:18:0d:
c5:47:65:34:ef:03:1d:40:66:b9:2f:1e:c8:35:3b:
0f:55:34:a7:03:65:36:2d:16:1e:d7:36:cb:4b:5d:
0c:e2:b6:f9:48:69:cf:8e:3b:72:bf:76:c8:11:86:
22:2e:0b:a7:c5:0b:7f:1a:8a:33:51:5e:2d:c0:90:
5e:24:df:c6:74:4b:a4:5d:05:11:f8:32:64:ee:20:
27:b3:e8:8a:90:17:a2:8a:ab:67:28:28:ad:e4:6e:
76:63:cf:ba:12:b3:cc:a2:e0:2f:79:3b:6e:07:5d:
7a:58:af:d8:76:c9:93:8d:ea:6e:b5:95:ce:96:21:
36:f4:a7:ed:e7:b0:f3:51:a7:5a:13:e1:b2:37:d7:
a7:0f:c6:10:32:39:b1:b4:61:40:ce:0f:fb:49:f7:
12:3e:82:dc:79:36:08:a0:be:d2:5a:4e:44:31:27:
5d:8d:0c:00:8f:7f:b7:5c:82:34:8c:cf:16:dd:f2:
64:3a:80:ab:f4:54:67:d5:ff:e0:a0:51:55:5e:db:
f5:d4:41:6e:eb:2d:95:b3:71:55:81:e6:fe:6f:08:
ab:60:b5:97:64:6b:38:68:0b:d6:04:49:52:d0:5d:
12:54:e3:67:79:68:c4:ec:77:5a:16:1e:e9:35:bb:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:4C:7D:3F:9D:A3:C7:30:BC:6D:13:C8:D4:23:A7:B7:72:DE:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5uRMfT-do8cwvG0TyNQjp7dy3uE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
07:ba:66:3a:b3:61:a9:34:32:0c:15:fd:4c:78:81:74:68:83:
56:8c:34:b4:8e:b0:53:77:6e:26:16:a4:fa:ee:ff:26:96:8e:
8c:45:6d:72:8e:d4:84:81:91:73:38:34:f3:e9:d2:40:47:54:
6d:db:9f:70:d0:25:80:e5:e5:6d:05:90:a6:92:a7:e9:63:1c:
ce:21:75:eb:5b:d8:4e:be:cc:0d:60:71:18:17:f6:97:28:39:
a7:23:49:dc:c7:b4:c3:a0:c3:79:5e:f4:72:48:60:75:b4:88:
01:7c:6d:83:9c:49:f6:26:38:d7:15:c6:95:0a:d3:6e:c1:87:
fc:e4:d9:33:59:48:b9:98:06:5a:ba:4d:fe:db:72:2d:5e:11:
1d:f5:28:a5:3a:12:fa:59:42:3b:57:31:a4:e7:5f:7b:66:31:
f1:7b:46:2e:44:c6:54:22:08:5e:c2:05:49:b2:d6:2c:06:95:
6f:d7:a2:f7:6f:11:ac:e1:ef:33:c3:8c:3b:55:a3:83:50:6b:
45:ad:68:c9:ea:0a:49:3d:04:ef:69:a1:aa:4d:3b:78:3b:4d:
06:02:e8:62:1f:e4:28:af:d3:7b:32:dc:16:78:f4:a6:63:63:
d3:c6:c6:97:91:90:b9:08:56:ac:6e:05:df:57:d0:7a:7f:fb:
b7:b6:35:f5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
MzUyMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU2RTQ0QzdEM0Y5REEz
QzczMEJDNkQxM0M4RDQyM0E3Qjc3MkRFRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC53BWzy9TZoloGnxUYDcVHZTTvAx1AZrkvHsg1Ow9VNKcDZTYt
Fh7XNstLXQzitvlIac+OO3K/dsgRhiIuC6fFC38aijNRXi3AkF4k38Z0S6RdBRH4
MmTuICez6IqQF6KKq2coKK3kbnZjz7oSs8yi4C95O24HXXpYr9h2yZON6m61lc6W
ITb0p+3nsPNRp1oT4bI316cPxhAyObG0YUDOD/tJ9xI+gtx5NgigvtJaTkQxJ12N
DACPf7dcgjSMzxbd8mQ6gKv0VGfV/+CgUVVe2/XUQW7rLZWzcVWB5v5vCKtgtZdk
azhoC9YESVLQXRJU42d5aMTsd1oWHuk1u6ihAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU5uRMfT+do8cwvG0TyNQjp7dy3uEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzV1Uk1mVC1kbzhjd3ZH
MFR5TlFqcDdkeTN1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAe6ZjqzYak0MgwV/Ux4gXRog1aMNLSO
sFN3biYWpPru/yaWjoxFbXKO1ISBkXM4NPPp0kBHVG3bn3DQJYDl5W0FkKaSp+lj
HM4hdetb2E6+zA1gcRgX9pcoOacjSdzHtMOgw3le9HJIYHW0iAF8bYOcSfYmONcV
xpUK027Bh/zk2TNZSLmYBlq6Tf7bci1eER31KKU6EvpZQjtXMaTnX3tmMfF7Ri5E
xlQiCF7CBUmy1iwGlW/XovdvEazh7zPDjDtVo4NQa0WtaMnqCkk9BO9poapNO3g7
TQYC6GIf5Civ03sy3BZ49KZjY9PGxpeRkLkIVqxuBd9X0Hp/+7e2NfU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:28 2025 by rpki-client