Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZN-PlVNe4XrColn-ZC_M7a_eo.roa
File: 95ZN-PlVNe4XrColn-ZC_M7a_eo.roa (raw, json)
Hash identifier: GYz8QVX9234p3LEK1AEMMPsKVNuePZELxMOYCs0NvBE=
Subject key identifier: F7:96:4D:F8:F9:55:35:EE:17:AC:2A:25:9F:E6:42:FC:CE:DA:FD:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZN-PlVNe4XrColn-ZC_M7a_eo.roa
Signing time: Tue 16 Apr 2024 13:52:57 +0000
ROA not before: Tue 16 Apr 2024 13:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16895 (0x41ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 13:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F7964DF8F95535EE17AC2A259FE642FCCEDAFDEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:0c:b6:d0:81:67:8c:db:7a:f8:05:54:62:
99:da:50:3a:26:d3:d5:60:22:b6:1f:77:1b:80:34:
02:cb:26:91:fe:e5:76:0f:fb:32:8c:92:ce:d9:47:
c9:3a:cd:fd:57:0f:73:d7:e4:50:21:3b:22:82:6a:
8c:6f:95:f9:c9:72:a9:d2:bd:3c:34:7e:2c:3d:54:
a2:93:b8:9e:09:fb:04:a0:05:dc:6f:92:b2:78:4c:
51:b4:fa:60:4e:53:78:46:f4:71:32:83:1f:6f:cf:
6e:a6:25:bd:83:7f:4e:b7:dd:20:0f:3b:7e:df:c4:
bf:60:d1:53:85:a7:42:4c:a1:b1:f7:84:1c:34:f4:
af:c8:b7:6c:85:fd:98:9f:e5:c0:84:48:76:d7:b7:
6a:43:61:6f:24:67:50:a2:0f:97:78:a1:37:41:43:
bd:e4:93:86:9b:ed:b6:5b:0a:6e:1a:9a:d2:4d:c8:
3f:e3:3c:03:ee:f6:e0:a0:f1:f7:03:b0:de:ab:9c:
ba:39:cf:cb:7a:b4:67:16:e8:c4:92:d1:ec:66:c1:
63:d3:a8:34:2c:0f:7e:83:c3:01:f8:31:f6:78:1c:
e1:24:90:14:da:db:55:17:39:a1:1c:06:c8:ee:2c:
d8:a6:aa:96:c3:f6:96:90:a7:30:95:ec:82:8f:9f:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:4D:F8:F9:55:35:EE:17:AC:2A:25:9F:E6:42:FC:CE:DA:FD:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZN-PlVNe4XrColn-ZC_M7a_eo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:6e:db:e0:de:7d:5f:57:34:3d:eb:26:4d:1d:91:70:89:25:
61:25:e1:25:ed:dc:bc:6e:28:b2:f2:d2:3a:9b:11:c1:23:3c:
6e:96:42:6c:c2:3e:47:a6:68:7d:dc:24:33:92:b8:a6:73:3a:
da:41:ca:2b:07:f0:39:22:d0:49:cb:60:c9:df:1e:b4:54:27:
44:93:61:67:05:c3:e1:5c:ab:58:c1:1a:15:8d:cc:8c:7a:60:
36:92:ae:24:32:44:e8:0d:ed:35:3c:7d:2d:5f:2b:35:96:c6:
3a:28:48:8b:7a:a1:57:19:19:72:76:23:b5:c9:f5:1c:5b:71:
b4:c8:4f:55:36:41:f6:4e:a1:ad:24:5c:ed:ea:af:80:8d:9c:
6f:30:e8:51:f4:67:eb:9f:1d:4b:f4:d8:5e:38:fa:de:c6:86:
70:aa:bb:b5:0a:cd:28:f9:21:26:a0:6a:ae:33:06:c2:b1:c3:
4c:9c:de:0c:a0:33:42:2f:18:03:97:e3:2e:3f:39:d6:67:15:
3c:23:ee:70:98:92:9d:be:d5:c3:02:29:5b:8f:e4:09:a8:17:
74:fb:d5:79:55:a9:4b:3b:65:da:02:45:68:4b:96:5b:b0:eb:
f8:b5:84:bd:c0:c0:9b:71:c7:04:b6:85:7f:93:a3:a5:e7:1e:
89:1a:db:01
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYx
MzUyNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY3OTY0REY4Rjk1NTM1
RUUxN0FDMkEyNTlGRTY0MkZDQ0VEQUZERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaxAy20IFnjNt6+AVUYpnaUDom09VgIrYfdxuANALLJpH+5XYP
+zKMks7ZR8k6zf1XD3PX5FAhOyKCaoxvlfnJcqnSvTw0fiw9VKKTuJ4J+wSgBdxv
krJ4TFG0+mBOU3hG9HEygx9vz26mJb2Df0633SAPO37fxL9g0VOFp0JMobH3hBw0
9K/It2yF/Zif5cCESHbXt2pDYW8kZ1CiD5d4oTdBQ73kk4ab7bZbCm4amtJNyD/j
PAPu9uCg8fcDsN6rnLo5z8t6tGcW6MSS0exmwWPTqDQsD36DwwH4MfZ4HOEkkBTa
21UXOaEcBsjuLNimqpbD9paQpzCV7IKPn0w5AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU95ZN+PlVNe4XrColn+ZC/M7a/eowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Lzk1Wk4tUGxWTmU0WHJD
b2xuLVpDX003YV9lby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJhu2+DefV9XND3rJk0dkXCJJWEl4SXt
3LxuKLLy0jqbEcEjPG6WQmzCPkemaH3cJDOSuKZzOtpByisH8Dki0EnLYMnfHrRU
J0STYWcFw+Fcq1jBGhWNzIx6YDaSriQyROgN7TU8fS1fKzWWxjooSIt6oVcZGXJ2
I7XJ9RxbcbTIT1U2QfZOoa0kXO3qr4CNnG8w6FH0Z+ufHUv02F44+t7GhnCqu7UK
zSj5ISagaq4zBsKxw0yc3gygM0IvGAOX4y4/OdZnFTwj7nCYkp2+1cMCKVuP5Amo
F3T71XlVqUs7ZdoCRWhLlluw6/i1hL3AwJtxxwS2hX+To6XnHoka2wE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org