Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9WMgCEbZBvO3TJXhfMXNAVFt9wA.roa
File: 9WMgCEbZBvO3TJXhfMXNAVFt9wA.roa (raw, json)
Hash identifier: hcjXtcDreVVrQfueYciJKEmcHdMjX6XIVMj6tqzvfYk=
Subject key identifier: F5:63:20:08:46:D9:06:F3:B7:4C:95:E1:7C:C5:CD:01:51:6D:F7:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F83
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9WMgCEbZBvO3TJXhfMXNAVFt9wA.roa
Signing time: Sat 04 May 2024 14:23:48 +0000
ROA not before: Sat 04 May 2024 14:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20355 (0x4f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 14:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F563200846D906F3B74C95E17CC5CD01516DF700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:10:6f:f1:10:99:e8:f5:de:01:ae:80:b6:
31:84:0e:9b:a2:91:25:31:ac:a0:82:ad:81:81:f5:
f8:9b:3c:d3:3c:0e:4c:dc:49:b7:17:ea:27:27:e4:
e0:3f:60:06:f6:57:10:e2:09:2e:a9:ed:55:82:52:
98:a1:e0:87:7f:3c:7e:19:26:96:6d:45:3e:af:82:
40:9a:d3:ea:77:81:15:71:c7:6b:27:60:50:89:9c:
72:e9:d5:1c:12:9c:cb:aa:54:10:5b:53:9f:e4:db:
06:ac:a9:83:d1:3f:20:30:58:13:27:d9:b6:13:a1:
dc:43:9e:ae:a3:30:83:29:d7:e0:ce:6f:5d:7f:2f:
9a:75:1d:67:58:ce:4f:7d:f8:cb:8d:84:27:b3:b9:
5b:15:16:32:d5:df:f1:44:2d:d8:51:8b:35:b3:a4:
ff:9b:4b:e1:2e:64:83:4d:d4:aa:65:f2:fb:69:76:
45:1d:0c:de:70:76:85:93:49:b5:cb:e0:a9:4c:5a:
b6:a6:31:03:52:04:f0:97:be:92:33:f6:69:38:41:
96:b9:2b:8c:ad:73:40:06:ed:a0:55:27:f1:fa:c8:
11:e5:17:04:de:16:5b:40:62:c7:1c:53:da:3e:8c:
29:2d:96:a7:b7:98:ac:9d:c3:30:7e:d7:0d:77:9f:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:20:08:46:D9:06:F3:B7:4C:95:E1:7C:C5:CD:01:51:6D:F7:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9WMgCEbZBvO3TJXhfMXNAVFt9wA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:74:c4:9c:3f:77:23:94:e2:e4:ff:ac:a0:c4:fe:4d:bc:9c:
ed:c8:3c:39:c5:8c:bb:a4:17:83:0a:76:38:58:ec:5c:71:cb:
0a:95:2e:95:95:cc:d1:9b:4d:5e:d7:7b:f1:45:1c:ad:30:fb:
3f:29:29:d7:59:31:c4:fc:fc:01:b3:90:32:94:7f:af:f8:03:
75:c2:ab:7d:d5:d5:54:6e:c9:c5:33:e9:90:18:34:3c:9a:3b:
b0:67:36:8f:5e:75:42:36:50:0e:a3:a6:66:1e:e6:8f:c2:55:
d9:e2:e6:e7:33:a3:30:d1:02:42:e8:fb:02:b4:f6:03:bb:d5:
b4:3c:c3:03:ce:22:21:d9:80:d3:12:9a:d6:f2:59:6b:de:ce:
26:ba:35:45:43:98:31:ef:5d:db:95:8c:85:99:11:14:f2:ab:
47:58:7c:d5:37:0b:1d:12:c6:b7:73:05:39:a1:64:e2:bb:80:
cf:73:5d:e2:e0:85:c2:cd:43:c2:43:12:5e:ac:ed:07:31:1a:
1e:b8:84:b7:c8:41:88:cd:c4:91:d1:74:37:6b:fe:9d:a2:9a:
59:e7:ba:29:21:2e:fa:09:e9:a6:e1:ef:20:07:8c:fb:b0:d3:
ed:5f:60:c6:ef:8a:d5:bb:e9:1e:90:f1:7b:16:63:24:66:17:
0c:2a:db:2d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICT4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQx
NDIzNDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY1NjMyMDA4NDZEOTA2
RjNCNzRDOTVFMTdDQzVDRDAxNTE2REY3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGuhBv8RCZ6PXeAa6AtjGEDpuikSUxrKCCrYGB9fibPNM8Dkzc
SbcX6icn5OA/YAb2VxDiCS6p7VWCUpih4Id/PH4ZJpZtRT6vgkCa0+p3gRVxx2sn
YFCJnHLp1RwSnMuqVBBbU5/k2wasqYPRPyAwWBMn2bYTodxDnq6jMIMp1+DOb11/
L5p1HWdYzk99+MuNhCezuVsVFjLV3/FELdhRizWzpP+bS+EuZINN1Kpl8vtpdkUd
DN5wdoWTSbXL4KlMWramMQNSBPCXvpIz9mk4QZa5K4ytc0AG7aBVJ/H6yBHlFwTe
FltAYsccU9o+jCktlqe3mKydwzB+1w13n+oxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU9WMgCEbZBvO3TJXhfMXNAVFt9wAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzlXTWdDRWJaQnZPM1RK
WGhmTVhOQVZGdDl3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAK50xJw/dyOU4uT/rKDE/k28nO3IPDnF
jLukF4MKdjhY7FxxywqVLpWVzNGbTV7Xe/FFHK0w+z8pKddZMcT8/AGzkDKUf6/4
A3XCq33V1VRuycUz6ZAYNDyaO7BnNo9edUI2UA6jpmYe5o/CVdni5uczozDRAkLo
+wK09gO71bQ8wwPOIiHZgNMSmtbyWWvezia6NUVDmDHvXduVjIWZERTyq0dYfNU3
Cx0SxrdzBTmhZOK7gM9zXeLghcLNQ8JDEl6s7QcxGh64hLfIQYjNxJHRdDdr/p2i
mlnnuikhLvoJ6abh7yAHjPuw0+1fYMbvitW76R6Q8XsWYyRmFwwq2y0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-ams.rpki-client.org