Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8d4pbIbpD_2DCzo6Lus-tlbhoGw.roa
File: 8d4pbIbpD_2DCzo6Lus-tlbhoGw.roa (raw, json)
Hash identifier: Qr3nugwhn5uGN6hngiix4M3iYf1QxUedgT1T/CO79AA=
Subject key identifier: F1:DE:29:6C:86:E9:0F:FD:83:0B:3A:3A:2E:EB:3E:B6:56:E1:A0:6C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F63
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8d4pbIbpD_2DCzo6Lus-tlbhoGw.roa
Signing time: Sat 13 Apr 2024 02:22:50 +0000
ROA not before: Sat 13 Apr 2024 02:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16227 (0x3f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 02:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F1DE296C86E90FFD830B3A3A2EEB3EB656E1A06C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:b6:08:17:64:58:b4:00:02:d1:e6:9c:06:
64:56:bc:64:24:19:ea:a1:e3:d1:bb:24:73:e2:06:
6d:16:c8:2a:a0:b7:bf:c1:4f:94:4c:36:ac:cb:28:
82:bf:31:04:e0:70:19:03:c9:74:9e:bb:9b:5c:99:
df:69:11:b3:94:d8:6a:32:01:16:1d:02:88:b3:db:
9e:7e:a6:26:c2:c4:38:85:0d:17:dc:f7:bc:84:b5:
37:ef:89:3c:30:2e:e4:f8:7e:65:9f:e8:c8:80:a3:
40:72:74:36:e3:fa:5a:69:e1:c5:4b:b5:0e:b6:d5:
d8:88:82:76:94:6e:0e:c4:f2:ce:0c:71:6d:57:a6:
9a:8b:98:b1:09:36:f3:52:9e:37:2f:3f:95:b8:f3:
0b:bb:a2:df:34:fb:e7:3d:d2:a5:55:4f:14:80:21:
a5:7a:c7:e3:cc:6f:f9:c4:c6:d3:46:da:2d:ac:32:
70:61:fe:8c:6b:9d:5d:60:13:80:57:82:cf:06:cb:
39:57:b6:8a:f7:23:23:0a:81:d7:40:04:4a:82:29:
02:19:de:85:90:26:03:e6:81:d6:5b:be:6c:c6:2d:
fc:fb:f9:3d:fb:5e:ff:fb:fc:aa:a2:7c:70:85:b8:
de:1d:15:d6:bb:9e:bc:a2:6f:da:26:6e:de:11:37:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:29:6C:86:E9:0F:FD:83:0B:3A:3A:2E:EB:3E:B6:56:E1:A0:6C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8d4pbIbpD_2DCzo6Lus-tlbhoGw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
33:7d:d2:ed:6f:44:84:b7:39:69:79:bf:4c:90:af:28:78:8e:
34:b6:bc:72:81:1a:e9:a2:34:92:66:b7:1e:7d:af:cb:9e:b4:
c2:78:f3:1a:db:3c:5f:ad:26:5d:ce:56:e4:f3:14:44:30:72:
30:0e:7f:7e:5a:1e:c5:d9:dd:90:8e:cc:7b:0c:e8:ef:97:08:
c3:2e:8a:58:7b:1b:38:02:ed:08:c3:89:6d:b2:f3:2b:32:25:
9c:01:63:5e:0a:4f:24:5f:e3:03:24:c5:f5:11:45:0a:81:6c:
e0:01:2e:a8:4d:9b:63:ab:a9:94:42:fb:d9:bc:41:d7:a2:88:
30:a0:dd:dd:e1:4a:93:f1:cd:79:7b:4f:18:cc:5f:45:9b:c9:
2c:aa:76:03:f4:1e:54:6c:33:e7:b8:32:f2:55:e6:2d:5c:3b:
9d:10:2c:f8:36:93:ab:a0:4a:56:9d:4c:6d:39:69:21:be:8e:
85:9f:bc:2f:5c:ff:80:20:00:b1:df:d8:f4:05:d3:17:4a:15:
af:16:78:05:e1:b8:39:69:12:a7:1b:9a:73:93:39:63:15:3a:
7e:02:2c:a9:63:b9:bf:ab:c0:79:6c:4e:3f:52:8f:7f:6b:8b:
3d:fe:50:89:9f:e4:3a:8c:dd:5a:f4:61:21:b0:9b:83:90:98:
f0:e1:9e:2b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICP2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMw
MjIyNTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYxREUyOTZDODZFOTBG
RkQ4MzBCM0EzQTJFRUIzRUI2NTZFMUEwNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5ArYIF2RYtAAC0eacBmRWvGQkGeqh49G7JHPiBm0WyCqgt7/B
T5RMNqzLKIK/MQTgcBkDyXSeu5tcmd9pEbOU2GoyARYdAoiz255+pibCxDiFDRfc
97yEtTfviTwwLuT4fmWf6MiAo0BydDbj+lpp4cVLtQ621diIgnaUbg7E8s4McW1X
ppqLmLEJNvNSnjcvP5W48wu7ot80++c90qVVTxSAIaV6x+PMb/nExtNG2i2sMnBh
/oxrnV1gE4BXgs8GyzlXtor3IyMKgddABEqCKQIZ3oWQJgPmgdZbvmzGLfz7+T37
Xv/7/KqifHCFuN4dFda7nryib9ombt4RNzk3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU8d4pbIbpD/2DCzo6Lus+tlbhoGwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhkNHBiSWJwRF8yREN6
bzZMdXMtdGxiaG9Hdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADN90u1vRIS3OWl5v0yQryh4jjS2vHKB
GumiNJJmtx59r8uetMJ48xrbPF+tJl3OVuTzFEQwcjAOf35aHsXZ3ZCOzHsM6O+X
CMMuilh7GzgC7QjDiW2y8ysyJZwBY14KTyRf4wMkxfURRQqBbOABLqhNm2OrqZRC
+9m8QdeiiDCg3d3hSpPxzXl7TxjMX0WbySyqdgP0HlRsM+e4MvJV5i1cO50QLPg2
k6ugSladTG05aSG+joWfvC9c/4AgALHf2PQF0xdKFa8WeAXhuDlpEqcbmnOTOWMV
On4CLKljub+rwHlsTj9Sj39riz3+UImf5DqM3Vr0YSGwm4OQmPDhnis=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org