Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6x_7AalApj_No-GhM-N4rLRging.roa
File: 6x_7AalApj_No-GhM-N4rLRging.roa (raw, json)
Hash identifier: MFLwcAqSXprWdR6fhEdCjWP+PB/TjPijk3Lw8BPvtxQ=
Subject key identifier: EB:1F:FB:01:A9:40:A6:3F:CD:A3:E1:A1:33:E3:78:AC:B4:60:8A:78
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 426B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6x_7AalApj_No-GhM-N4rLRging.roa
Signing time: Wed 17 Apr 2024 03:22:58 +0000
ROA not before: Wed 17 Apr 2024 03:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17003 (0x426b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 03:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB1FFB01A940A63FCDA3E1A133E378ACB4608A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:d9:7e:c0:67:38:06:d9:19:39:b3:32:e3:
9c:86:80:0b:ad:a3:37:f0:56:8e:8f:46:e0:ea:1a:
61:4c:8d:5d:8a:3f:fb:4b:1c:e1:72:cf:e7:73:a8:
be:04:86:35:0b:0f:d8:00:21:b1:2d:37:00:77:92:
9b:b6:c3:00:40:b1:4d:ee:4e:b3:ce:c6:88:c4:45:
54:02:c3:40:71:41:2a:ba:50:cc:b7:2a:f7:12:d8:
43:c3:d9:17:2f:43:45:0c:89:9f:b7:20:44:3e:82:
85:7b:c8:65:8e:94:8f:be:a7:31:07:c7:9c:20:8e:
f5:4e:bf:89:98:8f:f0:ec:65:1a:5d:09:38:0f:c2:
ff:4a:af:7a:61:b3:fe:21:32:e4:e5:f4:93:ca:2c:
8f:eb:d0:9d:9d:91:3d:9c:2f:c6:9b:8e:d9:55:a9:
95:41:22:03:ac:84:92:a3:c5:d6:59:17:b2:86:af:
98:b1:21:5f:5a:c8:28:35:14:d0:6a:b5:7a:cf:4c:
b1:d4:c8:80:45:3f:b6:59:41:54:e2:46:49:20:f1:
65:e0:b2:60:30:e3:f0:8d:74:78:5f:93:5d:3a:20:
7f:e8:74:d8:8d:c3:5c:5b:fc:35:d5:fd:d6:cf:d6:
8f:09:0e:5e:15:42:0c:79:ef:dd:04:a3:18:56:b0:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:FB:01:A9:40:A6:3F:CD:A3:E1:A1:33:E3:78:AC:B4:60:8A:78
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6x_7AalApj_No-GhM-N4rLRging.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:cf:9f:cb:f8:7f:c3:de:88:86:1f:49:78:37:6a:73:16:e1:
10:ff:9c:d7:19:a3:91:42:ad:5a:29:43:6c:ad:0c:d6:18:c3:
b7:2d:31:d9:b2:b8:37:44:b6:32:08:6a:56:b9:7c:94:9a:b2:
23:e8:46:71:31:ee:74:4c:5b:64:2a:4e:3b:b0:a2:18:5a:0c:
ab:bc:39:f0:43:44:5a:ed:8d:17:39:e8:87:d4:25:9d:db:e4:
89:05:1e:89:36:81:16:68:8b:90:76:9e:86:e2:d2:70:eb:9e:
f9:d9:1b:23:c6:6c:e8:22:e4:8d:93:d8:fa:71:cd:76:36:ab:
76:8b:f5:6e:50:f0:25:aa:b3:76:2f:50:9c:a4:7d:a6:32:6f:
07:33:e3:d5:03:83:c6:81:94:b6:d8:da:e2:9f:d9:86:1a:db:
39:13:cf:e8:0e:4b:41:af:42:a4:20:ef:a1:ea:dd:60:5b:99:
df:ce:2b:7b:af:0a:e4:59:f7:4a:dd:79:0d:45:c6:19:04:aa:
b2:61:dd:9e:2c:2c:8a:65:1b:31:46:c8:3c:63:be:3d:64:a0:
26:4a:1f:5a:6c:da:df:49:25:81:c1:f1:ce:be:fa:89:60:ce:
8d:a6:d6:a8:ef:53:40:99:10:ed:37:cd:43:00:89:59:25:09:
9a:25:0e:7a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
MzIyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCMUZGQjAxQTk0MEE2
M0ZDREEzRTFBMTMzRTM3OEFDQjQ2MDhBNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuuNl+wGc4BtkZObMy45yGgAutozfwVo6PRuDqGmFMjV2KP/tL
HOFyz+dzqL4EhjULD9gAIbEtNwB3kpu2wwBAsU3uTrPOxojERVQCw0BxQSq6UMy3
KvcS2EPD2RcvQ0UMiZ+3IEQ+goV7yGWOlI++pzEHx5wgjvVOv4mYj/DsZRpdCTgP
wv9Kr3phs/4hMuTl9JPKLI/r0J2dkT2cL8abjtlVqZVBIgOshJKjxdZZF7KGr5ix
IV9ayCg1FNBqtXrPTLHUyIBFP7ZZQVTiRkkg8WXgsmAw4/CNdHhfk106IH/odNiN
w1xb/DXV/dbP1o8JDl4VQgx5790EoxhWsIabAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU6x/7AalApj/No+GhM+N4rLRgingwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZ4XzdBYWxBcGpfTm8t
R2hNLU40ckxSZ2luZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACrPn8v4f8PeiIYfSXg3anMW4RD/nNcZ
o5FCrVopQ2ytDNYYw7ctMdmyuDdEtjIIala5fJSasiPoRnEx7nRMW2QqTjuwohha
DKu8OfBDRFrtjRc56IfUJZ3b5IkFHok2gRZoi5B2nobi0nDrnvnZGyPGbOgi5I2T
2PpxzXY2q3aL9W5Q8CWqs3YvUJykfaYybwcz49UDg8aBlLbY2uKf2YYa2zkTz+gO
S0GvQqQg76Hq3WBbmd/OK3uvCuRZ90rdeQ1FxhkEqrJh3Z4sLIplGzFGyDxjvj1k
oCZKH1ps2t9JJYHB8c6++olgzo2m1qjvU0CZEO03zUMAiVklCZolDno=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:17 2024 by rpki-client on console-ams.rpki-client.org