Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8iEmi0EVAByCKP66ENuP9Q65C8M.roa
File: 8iEmi0EVAByCKP66ENuP9Q65C8M.roa (raw, json)
Hash identifier: rlnGxCqG/+UWbI597KvcqBKq364EnorAN0AuWSq8fco=
Subject key identifier: F2:21:26:8B:41:15:00:1C:82:28:FE:BA:10:DB:8F:F5:0E:B9:0B:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C67
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8iEmi0EVAByCKP66ENuP9Q65C8M.roa
Signing time: Tue 09 Apr 2024 02:52:52 +0000
ROA not before: Tue 09 Apr 2024 02:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15463 (0x3c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 02:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F221268B4115001C8228FEBA10DB8FF50EB90BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:e7:d7:df:b4:64:f0:51:ea:3c:ce:c9:05:
a1:7d:b1:4d:cc:0e:2d:25:06:92:65:7b:be:06:db:
27:0d:fc:41:11:9d:bf:5b:dc:9a:a0:b3:6d:c8:11:
63:3c:3e:14:e3:1d:32:62:dd:c7:76:72:f5:73:eb:
af:1b:6f:e7:e1:85:05:44:fd:6a:19:ad:2d:a3:7f:
7b:78:1e:6d:dc:62:67:d1:91:90:77:a4:f9:65:2c:
20:1c:f6:c8:b8:13:f2:08:10:6e:94:dc:09:76:b4:
4f:20:de:e1:a4:dd:dd:ea:41:75:e3:ad:c0:61:05:
1a:0e:0d:b8:e6:28:5b:c6:ce:d7:59:db:30:61:5e:
7e:16:6c:25:04:b3:73:33:f4:a5:83:67:10:c3:2d:
b0:ad:ca:58:96:c7:3d:df:82:c4:aa:6f:2f:aa:ca:
76:59:ba:cc:99:00:72:62:1a:ee:08:a8:1b:cd:04:
5b:3f:d1:61:ba:64:0f:ff:3e:4b:9d:c7:b5:6f:e5:
f8:3d:d0:38:7e:99:da:09:90:2a:fe:32:34:69:0b:
de:b9:04:db:98:1f:6c:71:e6:7d:c7:f1:3c:a4:01:
d3:a6:e3:5c:79:8f:83:a3:f2:82:52:2b:21:11:db:
5a:22:9b:06:23:1d:8c:fd:d3:1f:a7:aa:01:8e:5e:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:26:8B:41:15:00:1C:82:28:FE:BA:10:DB:8F:F5:0E:B9:0B:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8iEmi0EVAByCKP66ENuP9Q65C8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:6c:7d:14:4d:ef:cf:b3:73:f0:e8:fb:65:bf:ec:f9:64:9d:
d4:ee:7f:e6:78:a9:78:38:2b:81:99:6d:5b:ec:6c:5e:aa:29:
51:97:22:13:f6:c4:83:1a:c5:05:c9:e3:88:ce:9f:2b:e3:ca:
69:db:55:41:90:c4:bd:42:d7:ef:9f:de:ee:01:2b:6f:ed:0c:
9c:0a:45:1d:99:b6:3b:34:b6:17:92:d1:e3:b4:37:bf:ea:8f:
41:06:84:90:b6:42:5d:88:06:94:16:18:0f:dd:c3:ab:2c:bb:
dc:81:f9:71:fc:35:26:09:8b:51:80:a0:cc:53:59:cd:44:cf:
bc:65:3e:ad:b5:d6:e5:eb:2e:d8:1d:69:93:8e:80:38:28:fd:
48:41:32:f8:47:ad:fc:d9:66:28:93:c4:cb:7c:d5:67:80:15:
e4:38:cf:1b:e3:1e:0a:ea:22:4f:87:63:0b:84:2f:45:b1:6d:
e6:bf:75:d4:54:4e:c5:d8:bf:6d:c0:8f:21:1b:01:e3:3f:fe:
07:1b:97:bc:d9:2a:0b:dd:25:bc:43:02:06:dc:dc:30:42:ec:
1b:81:c3:7d:4e:da:07:75:0f:d1:a5:40:43:d4:99:dc:d9:d7:
ed:84:a5:38:13:81:54:03:8a:c4:b4:4f:8a:37:11:20:ea:1a:
a6:92:1b:df
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkw
MjUyNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYyMjEyNjhCNDExNTAw
MUM4MjI4RkVCQTEwREI4RkY1MEVCOTBCQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjSOfX37Rk8FHqPM7JBaF9sU3MDi0lBpJle74G2ycN/EERnb9b
3Jqgs23IEWM8PhTjHTJi3cd2cvVz668bb+fhhQVE/WoZrS2jf3t4Hm3cYmfRkZB3
pPllLCAc9si4E/IIEG6U3Al2tE8g3uGk3d3qQXXjrcBhBRoODbjmKFvGztdZ2zBh
Xn4WbCUEs3Mz9KWDZxDDLbCtyliWxz3fgsSqby+qynZZusyZAHJiGu4IqBvNBFs/
0WG6ZA//Pkudx7Vv5fg90Dh+mdoJkCr+MjRpC965BNuYH2xx5n3H8TykAdOm41x5
j4Oj8oJSKyER21oimwYjHYz90x+nqgGOXmqXAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU8iEmi0EVAByCKP66ENuP9Q65C8MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhpRW1pMEVWQUJ5Q0tQ
NjZFTnVQOVE2NUM4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAtsfRRN78+zc/Do+2W/7PlkndTuf+Z4
qXg4K4GZbVvsbF6qKVGXIhP2xIMaxQXJ44jOnyvjymnbVUGQxL1C1++f3u4BK2/t
DJwKRR2Ztjs0theS0eO0N7/qj0EGhJC2Ql2IBpQWGA/dw6ssu9yB+XH8NSYJi1GA
oMxTWc1Ez7xlPq211uXrLtgdaZOOgDgo/UhBMvhHrfzZZiiTxMt81WeAFeQ4zxvj
HgrqIk+HYwuEL0Wxbea/ddRUTsXYv23AjyEbAeM//gcbl7zZKgvdJbxDAgbc3DBC
7BuBw31O2gd1D9GlQEPUmdzZ1+2EpTgTgVQDisS0T4o3ESDqGqaSG98=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-ams.rpki-client.org