Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7PVYx18JDJbWyIPYrO_9EMtjZz4.roa
File: 7PVYx18JDJbWyIPYrO_9EMtjZz4.roa (raw, json)
Hash identifier: 2QV8eSo0D7Ttx+0apESOAqPnvzWwYwf+IwLnJBD7Tjc=
Subject key identifier: EC:F5:58:C7:5F:09:0C:96:D6:C8:83:D8:AC:EF:FD:10:CB:63:67:3E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 454F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7PVYx18JDJbWyIPYrO_9EMtjZz4.roa
Signing time: Sat 20 Apr 2024 23:53:29 +0000
ROA not before: Sat 20 Apr 2024 23:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17743 (0x454f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 23:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ECF558C75F090C96D6C883D8ACEFFD10CB63673E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:67:2a:62:16:7c:e0:a5:3f:20:4a:5b:26:
27:28:c8:9d:21:31:81:88:62:fd:12:1d:5b:15:5f:
72:42:9d:cb:4a:8f:d3:6f:06:68:79:40:e9:6f:d2:
57:6b:a5:f5:18:57:7c:f5:ff:e9:f5:ac:d4:d9:3d:
cc:35:5e:a3:f6:33:b0:ad:17:f4:15:12:1f:5b:e5:
01:a8:e1:96:37:93:bb:26:47:4d:af:73:3b:2f:de:
fa:ab:a5:3c:d2:19:42:73:4e:af:9d:db:97:23:d9:
81:84:04:c6:09:e4:13:f9:35:e8:58:d8:6c:a0:20:
2e:1b:97:d8:87:5c:55:cd:50:16:91:f7:6d:22:13:
c4:7f:06:38:8a:48:d9:e7:31:06:c5:aa:9d:2a:8f:
d9:09:a8:7b:c2:3c:33:12:72:ec:e0:07:cf:f4:82:
5e:dd:a8:bd:a6:eb:fa:25:6c:3a:03:48:27:37:4c:
af:c4:a2:4a:a1:68:54:fb:ee:ab:29:27:12:29:34:
61:54:ac:03:16:3d:ee:12:a6:a7:77:76:bf:b2:f6:
b8:cf:0b:e6:df:d2:9a:06:2b:9f:fa:7a:0c:49:00:
8d:3b:e2:c7:4b:e9:2d:75:32:da:ad:36:fe:d7:7d:
c3:90:00:56:47:d3:eb:7e:85:1d:75:e4:06:a5:db:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:58:C7:5F:09:0C:96:D6:C8:83:D8:AC:EF:FD:10:CB:63:67:3E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7PVYx18JDJbWyIPYrO_9EMtjZz4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:80:83:0e:b7:47:11:ac:2b:45:96:45:83:74:89:bf:3d:c2:
41:6a:ae:c3:f5:16:9f:5b:70:3d:eb:4a:23:eb:a5:1e:32:f1:
a6:28:9a:5f:d3:6b:48:25:bd:c4:d0:eb:fc:01:89:ec:54:28:
cd:30:d5:04:11:3b:45:1b:b8:1b:10:0d:f7:6d:91:e1:1d:c4:
81:26:26:6b:41:1a:4e:6a:b4:b9:f0:89:35:52:da:bb:35:d9:
23:12:e7:3d:dd:fe:41:93:6a:c1:09:3d:81:e4:0f:69:35:cb:
ec:22:53:f4:e3:c8:40:f0:88:73:a2:c7:07:05:34:64:1c:98:
cf:32:92:d2:ce:fe:14:39:0e:48:5e:09:c9:c9:81:2b:22:01:
21:d9:0f:b6:d5:2c:83:d3:02:c8:90:e8:98:27:dd:13:f5:c0:
04:d2:ca:0e:ff:8c:8c:fe:57:e3:6a:f1:c3:8f:3c:33:4f:54:
0b:00:14:40:c3:2b:55:d9:da:82:7f:bf:48:df:ed:6e:51:88:
d6:16:0f:de:61:9e:14:97:53:ea:23:be:dc:b2:5b:82:16:83:
2b:bb:af:1b:78:ec:4b:00:4f:fd:98:f9:ab:c7:30:64:da:01:
f5:04:b7:6d:ae:42:04:f6:9a:4e:89:8a:7c:58:96:b6:20:eb:
22:bc:3e:ca
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAy
MzUzMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVDRjU1OEM3NUYwOTBD
OTZENkM4ODNEOEFDRUZGRDEwQ0I2MzY3M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDigWcqYhZ84KU/IEpbJicoyJ0hMYGIYv0SHVsVX3JCnctKj9Nv
Bmh5QOlv0ldrpfUYV3z1/+n1rNTZPcw1XqP2M7CtF/QVEh9b5QGo4ZY3k7smR02v
czsv3vqrpTzSGUJzTq+d25cj2YGEBMYJ5BP5NehY2GygIC4bl9iHXFXNUBaR920i
E8R/BjiKSNnnMQbFqp0qj9kJqHvCPDMScuzgB8/0gl7dqL2m6/olbDoDSCc3TK/E
okqhaFT77qspJxIpNGFUrAMWPe4Spqd3dr+y9rjPC+bf0poGK5/6egxJAI074sdL
6S11MtqtNv7XfcOQAFZH0+t+hR115Aal23X3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU7PVYx18JDJbWyIPYrO/9EMtjZz4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzdQVll4MThKREpiV3lJ
UFlyT185RU10alp6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFCAgw63RxGsK0WWRYN0ib89wkFqrsP1
Fp9bcD3rSiPrpR4y8aYoml/Ta0glvcTQ6/wBiexUKM0w1QQRO0UbuBsQDfdtkeEd
xIEmJmtBGk5qtLnwiTVS2rs12SMS5z3d/kGTasEJPYHkD2k1y+wiU/TjyEDwiHOi
xwcFNGQcmM8yktLO/hQ5DkheCcnJgSsiASHZD7bVLIPTAsiQ6Jgn3RP1wATSyg7/
jIz+V+Nq8cOPPDNPVAsAFEDDK1XZ2oJ/v0jf7W5RiNYWD95hnhSXU+ojvtyyW4IW
gyu7rxt47EsAT/2Y+avHMGTaAfUEt22uQgT2mk6JinxYlrYg6yK8Pso=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org