Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZQDO_8MOydUz2ylmYNtbX_hs4.roa
File: 95ZQDO_8MOydUz2ylmYNtbX_hs4.roa (raw, json)
Hash identifier: JIhnnzKg7Vs2KA+Ob9HdwTtHSz7eySnGA367NSWRaFY=
Subject key identifier: F7:96:50:0C:EF:FC:30:EC:9D:53:3D:B2:96:66:0D:B5:B5:FF:86:CE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5387
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZQDO_8MOydUz2ylmYNtbX_hs4.roa
Signing time: Thu 09 May 2024 22:54:00 +0000
ROA not before: Thu 09 May 2024 22:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21383 (0x5387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 22:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F796500CEFFC30EC9D533DB296660DB5B5FF86CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:95:df:75:d0:c5:a6:b6:fd:2d:2f:f5:b0:
e4:ea:c9:da:c8:6b:99:6e:c7:4a:bd:ca:90:a3:59:
6a:54:1c:65:9e:ba:a7:1b:9d:a0:a8:79:64:3e:58:
1b:7f:aa:fc:82:78:b3:8a:e2:0a:ed:c0:4c:09:34:
e6:1c:32:09:6b:84:20:21:03:0f:eb:03:f5:dd:ce:
82:74:74:64:17:24:d0:af:dc:04:31:6a:d9:fb:f7:
11:ee:19:75:b8:37:00:a7:c8:51:c6:93:a4:15:f3:
36:91:19:6d:ff:aa:df:fa:4c:f3:bd:ed:3e:c9:e2:
f4:7f:62:73:8e:3c:8f:e8:1a:99:c8:97:80:56:53:
d5:10:bd:24:22:a5:dd:6c:db:bb:b0:f4:f0:e6:51:
fb:d9:e5:1d:53:8b:61:14:48:78:2e:58:4e:54:8c:
c0:2d:20:9a:fe:2b:d0:5f:d6:df:32:a9:d3:a9:cf:
33:b3:fa:67:b2:ae:3b:ff:ae:6a:53:8a:fa:55:6c:
db:69:2a:e8:3b:5f:43:20:12:22:09:83:dc:f6:50:
a5:b9:b0:42:69:88:3f:9b:6b:69:26:8b:96:a1:09:
de:9e:44:95:73:e1:25:e9:f3:61:49:49:78:2e:28:
fe:46:71:b0:4d:e9:80:b5:ae:49:26:2f:d7:93:95:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:50:0C:EF:FC:30:EC:9D:53:3D:B2:96:66:0D:B5:B5:FF:86:CE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/95ZQDO_8MOydUz2ylmYNtbX_hs4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:a2:cb:a5:f1:e6:16:12:32:22:80:c4:1f:33:33:53:bd:47:
8f:b5:05:80:50:a9:90:8e:08:59:a7:94:64:f3:a2:ab:a3:f4:
65:23:c7:40:d2:b3:cf:5d:96:77:23:c1:e3:f6:64:d8:38:a5:
4c:c1:d2:3e:d3:5f:40:91:19:5d:6d:6f:1c:b9:42:59:4f:46:
dc:33:66:84:9d:07:91:2b:de:08:e4:36:78:35:3e:70:3b:6d:
e3:59:5c:2f:14:d6:bc:bb:5f:d6:cc:6c:14:8d:57:32:2b:86:
4c:04:f9:ca:a9:4d:27:d2:3b:c8:d9:c7:20:39:f1:35:6a:20:
21:87:d7:ed:b1:1d:73:12:9e:bc:cd:fe:7c:11:bd:eb:16:b8:
bd:9b:b1:1a:59:9a:84:a0:d4:23:41:eb:f3:c8:d0:f6:f6:f4:
ae:b7:e6:92:b8:36:61:5e:25:68:a0:35:99:e8:69:fc:d9:0f:
cf:63:f1:55:11:f1:7a:05:af:83:49:62:48:f5:1d:51:33:c7:
7a:73:7b:0a:e7:52:db:1d:95:4a:28:d4:86:75:22:8e:47:e5:
c1:87:0a:8a:6f:2d:42:3a:01:50:c3:6b:94:e9:e8:5f:d5:1b:
8c:d4:46:c5:8a:88:97:4b:9f:68:84:5d:d1:7b:e4:35:70:a3:
81:ff:36:83
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICU4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDky
MjU0MDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY3OTY1MDBDRUZGQzMw
RUM5RDUzM0RCMjk2NjYwREI1QjVGRjg2Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCncZXfddDFprb9LS/1sOTqydrIa5lux0q9ypCjWWpUHGWeuqcb
naCoeWQ+WBt/qvyCeLOK4grtwEwJNOYcMglrhCAhAw/rA/XdzoJ0dGQXJNCv3AQx
atn79xHuGXW4NwCnyFHGk6QV8zaRGW3/qt/6TPO97T7J4vR/YnOOPI/oGpnIl4BW
U9UQvSQipd1s27uw9PDmUfvZ5R1Ti2EUSHguWE5UjMAtIJr+K9Bf1t8yqdOpzzOz
+meyrjv/rmpTivpVbNtpKug7X0MgEiIJg9z2UKW5sEJpiD+ba2kmi5ahCd6eRJVz
4SXp82FJSXguKP5GcbBN6YC1rkkmL9eTla59AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU95ZQDO/8MOydUz2ylmYNtbX/hs4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Lzk1WlFET184TU95ZFV6
MnlsbVlOdGJYX2hzNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAB6iy6Xx5hYSMiKAxB8zM1O9R4+1BYBQ
qZCOCFmnlGTzoquj9GUjx0DSs89dlncjweP2ZNg4pUzB0j7TX0CRGV1tbxy5QllP
RtwzZoSdB5Er3gjkNng1PnA7beNZXC8U1ry7X9bMbBSNVzIrhkwE+cqpTSfSO8jZ
xyA58TVqICGH1+2xHXMSnrzN/nwRvesWuL2bsRpZmoSg1CNB6/PI0Pb29K635pK4
NmFeJWigNZnoafzZD89j8VUR8XoFr4NJYkj1HVEzx3pzewrnUtsdlUoo1IZ1Io5H
5cGHCopvLUI6AVDDa5Tp6F/VG4zURsWKiJdLn2iEXdF75DVwo4H/NoM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:33 2025 by rpki-client