Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A2tdLqUwb8pY6nA5-zrTqDVEONU.roa
File: A2tdLqUwb8pY6nA5-zrTqDVEONU.roa (raw, json)
Hash identifier: JvZ9R8Ui+3y9LRr+soE7ZTxjC8l4neRujomCnz/2p6M=
Subject key identifier: 03:6B:5D:2E:A5:30:6F:CA:58:EA:70:39:FB:3A:D3:A8:35:44:38:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B93
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A2tdLqUwb8pY6nA5-zrTqDVEONU.roa
Signing time: Mon 08 Apr 2024 00:23:00 +0000
ROA not before: Mon 08 Apr 2024 00:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15251 (0x3b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 00:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=036B5D2EA5306FCA58EA7039FB3AD3A8354438D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:06:e7:aa:17:a4:e3:45:ca:42:c3:7b:c1:
41:97:0d:dd:20:5b:08:68:f7:1e:e4:9d:0a:92:f5:
4d:c5:5d:a7:65:11:49:85:b8:42:08:bc:df:82:96:
81:56:de:05:08:08:a7:07:cb:4b:13:49:58:6c:83:
6c:78:90:18:b2:12:ea:4b:8b:18:9e:f3:f2:46:03:
c5:31:73:b4:28:a9:d8:53:c5:23:a5:3d:1a:1f:91:
a7:8b:64:fb:e1:b4:b4:3e:6a:78:41:e7:3d:3c:85:
68:f7:4f:59:3a:03:43:7c:cf:63:42:b5:87:67:e0:
5b:e7:19:25:2e:63:5b:12:a8:aa:0d:42:e8:d6:dc:
15:a5:9a:20:48:41:28:ce:a1:8a:18:14:9d:08:12:
01:7f:a2:42:e8:81:55:06:d4:3c:d8:83:0b:c5:ab:
7d:42:96:1d:f9:9a:6d:3f:25:9e:12:ce:40:3b:03:
0e:e3:61:3c:24:42:24:7e:c7:da:bb:a8:08:69:0e:
3a:43:a3:d6:b9:ca:af:51:b8:cf:06:78:8d:e1:e8:
8e:bb:3f:bf:57:76:69:6d:3c:fe:e9:14:5c:53:a9:
01:cf:15:ed:9c:c1:d7:3f:4f:b6:74:ea:83:5d:e8:
ab:fb:e0:da:46:df:8b:b8:cc:7a:0f:6e:6a:b1:0e:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:5D:2E:A5:30:6F:CA:58:EA:70:39:FB:3A:D3:A8:35:44:38:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A2tdLqUwb8pY6nA5-zrTqDVEONU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:1d:f2:b2:09:d4:0c:ef:91:9f:7c:3e:04:63:e3:c2:b4:26:
13:10:52:26:ca:d7:0f:7e:f7:11:c4:aa:03:93:04:22:b9:90:
95:71:b7:78:7e:1a:e1:21:7b:74:4a:b0:6f:ad:36:61:12:ab:
76:cd:3a:4d:bf:1d:0a:aa:da:79:c5:06:52:8e:f4:c5:4f:a4:
4d:d5:ab:95:60:b3:4b:5b:f5:cb:90:d8:0d:4d:af:e4:31:6d:
3d:ec:ff:57:8f:d6:18:df:50:2b:f1:c2:d8:66:71:08:e8:73:
55:d6:cc:41:a7:70:97:be:fa:ac:2a:2b:10:22:b9:34:43:07:
7b:f5:4b:48:54:45:a4:45:06:33:fe:f1:3b:cc:77:9d:d3:e2:
02:ac:34:49:d9:53:0e:56:c9:a1:da:aa:d1:c8:27:bc:12:76:
6a:49:50:4f:a7:34:a9:ae:2d:71:71:37:ef:2b:59:76:03:8c:
38:20:2a:27:0a:96:77:6d:3e:21:cd:04:5d:ed:a0:dd:90:a8:
52:1f:d4:cf:fa:47:ef:91:c2:92:12:5d:53:9e:09:8e:34:10:
60:71:f4:dc:a2:47:65:01:b5:bc:fc:27:a3:7b:cd:61:ea:b1:
b4:99:2e:96:04:73:d0:84:a6:31:89:cf:fd:5c:8b:66:b7:4c:
a6:fb:14:16
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw
MDIzMDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAzNkI1RDJFQTUzMDZG
Q0E1OEVBNzAzOUZCM0FEM0E4MzU0NDM4RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBywbnqhek40XKQsN7wUGXDd0gWwho9x7knQqS9U3FXadlEUmF
uEIIvN+CloFW3gUICKcHy0sTSVhsg2x4kBiyEupLixie8/JGA8Uxc7QoqdhTxSOl
PRofkaeLZPvhtLQ+anhB5z08hWj3T1k6A0N8z2NCtYdn4FvnGSUuY1sSqKoNQujW
3BWlmiBIQSjOoYoYFJ0IEgF/okLogVUG1DzYgwvFq31Clh35mm0/JZ4SzkA7Aw7j
YTwkQiR+x9q7qAhpDjpDo9a5yq9RuM8GeI3h6I67P79XdmltPP7pFFxTqQHPFe2c
wdc/T7Z06oNd6Kv74NpG34u4zHoPbmqxDiZbAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUA2tdLqUwb8pY6nA5+zrTqDVEONUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0EydGRMcVV3YjhwWTZu
QTUtenJUcURWRU9OVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKMd8rIJ1AzvkZ98PgRj48K0JhMQUibK
1w9+9xHEqgOTBCK5kJVxt3h+GuEhe3RKsG+tNmESq3bNOk2/HQqq2nnFBlKO9MVP
pE3Vq5Vgs0tb9cuQ2A1Nr+QxbT3s/1eP1hjfUCvxwthmcQjoc1XWzEGncJe++qwq
KxAiuTRDB3v1S0hURaRFBjP+8TvMd53T4gKsNEnZUw5WyaHaqtHIJ7wSdmpJUE+n
NKmuLXFxN+8rWXYDjDggKicKlndtPiHNBF3toN2QqFIf1M/6R++RwpISXVOeCY40
EGBx9NyiR2UBtbz8J6N7zWHqsbSZLpYEc9CEpjGJz/1ci2a3TKb7FBY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:21 2024 by rpki-client on console-ams.rpki-client.org