Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AM0juoaFvrvo-0AIHfrW5Yt6KX0.roa
File: AM0juoaFvrvo-0AIHfrW5Yt6KX0.roa (raw, json)
Hash identifier: q3ee6akLnGn+tAV4QCsPuxT6M/qXOqSzTOPAR+2dx48=
Subject key identifier: 00:CD:23:BA:86:85:BE:BB:E8:FB:40:08:1D:FA:D6:E5:8B:7A:29:7D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B47
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AM0juoaFvrvo-0AIHfrW5Yt6KX0.roa
Signing time: Sun 07 Apr 2024 14:52:32 +0000
ROA not before: Sun 07 Apr 2024 14:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15175 (0x3b47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 14:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=00CD23BA8685BEBBE8FB40081DFAD6E58B7A297D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:4c:37:d0:b9:b2:4d:0e:fd:c3:63:b5:0b:
6b:5c:7a:92:25:e3:da:6e:d9:e4:3a:4a:99:ca:43:
72:84:b8:0d:00:71:fd:1a:95:fb:19:77:4e:54:7d:
96:57:20:65:cc:ad:49:ad:87:f6:9f:7b:fb:87:ab:
8f:b4:29:bc:12:f7:c9:5e:f3:c5:e5:0e:cc:8c:0b:
11:bd:d9:83:cc:08:92:94:94:88:6d:b1:c8:61:df:
b3:6b:8f:40:08:82:b4:83:02:48:ec:78:94:16:3f:
28:38:15:ad:50:fb:63:5a:96:e4:0f:9f:75:f4:84:
88:89:43:55:13:60:59:b8:62:0d:70:77:04:a3:cc:
5e:45:ff:cd:95:98:ac:9c:dd:3e:7a:e5:78:9c:cb:
c8:90:aa:d9:dd:32:62:46:5a:ac:8e:d1:6d:c5:db:
18:44:e8:34:e5:83:52:a5:36:02:60:7e:d1:36:2c:
40:9c:44:ad:cc:02:4a:f0:22:f9:d8:23:f9:59:9a:
65:e6:37:09:66:a5:bd:b7:9a:ff:68:03:14:0b:62:
38:76:db:d5:ab:13:a6:4f:32:b9:ff:99:c4:36:53:
82:34:d2:5d:09:e7:12:2c:42:6d:2f:f1:3d:0c:63:
e3:a1:c2:71:35:6b:66:4d:8d:0e:e1:d1:b1:8c:22:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:23:BA:86:85:BE:BB:E8:FB:40:08:1D:FA:D6:E5:8B:7A:29:7D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AM0juoaFvrvo-0AIHfrW5Yt6KX0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:f4:ad:ba:dd:d4:e4:39:e8:af:c5:db:18:4b:f8:d6:f6:c6:
54:b3:6e:d1:a2:eb:45:a5:cd:8a:5c:30:bf:68:80:3f:2e:2d:
84:e0:76:67:49:27:e5:f9:45:80:28:b5:c2:84:29:a5:46:4f:
b5:01:1a:e6:bd:1d:c4:3b:ea:e2:18:e3:fa:9f:cb:90:08:2e:
e1:0a:3f:c9:0a:4b:5c:64:e4:32:93:8c:be:82:a0:d9:8b:8d:
ec:14:2f:18:3f:73:b4:a2:37:7a:1d:4c:58:71:c1:c4:08:a3:
89:65:2d:3c:7b:a9:d7:54:8f:c1:d4:5e:2c:69:57:be:4d:5b:
18:32:dc:55:1e:06:1b:a1:bd:b8:25:3c:2f:e8:10:91:cb:d5:
bd:d6:2f:76:be:16:fd:ec:b3:2e:52:ff:e4:8c:82:f0:f7:3a:
1d:48:a1:1a:4b:52:34:12:27:1f:59:75:72:a2:fa:c5:53:b5:
0a:c3:c0:ab:18:d4:dd:0f:32:d6:e6:20:4f:65:2c:10:f2:27:
63:c2:8f:3d:c8:dc:7e:ad:12:6f:88:cb:a8:79:e0:c4:af:10:
85:94:87:c6:55:b0:9a:c5:ac:be:a0:27:f8:96:7a:7d:07:b8:
a9:da:31:57:28:8e:a7:d3:83:24:93:a7:95:d4:c2:8e:16:06:
aa:11:46:2d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcx
NDUyMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAwQ0QyM0JBODY4NUJF
QkJFOEZCNDAwODFERkFENkU1OEI3QTI5N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5GEw30LmyTQ79w2O1C2tcepIl49pu2eQ6SpnKQ3KEuA0Acf0a
lfsZd05UfZZXIGXMrUmth/afe/uHq4+0KbwS98le88XlDsyMCxG92YPMCJKUlIht
schh37Nrj0AIgrSDAkjseJQWPyg4Fa1Q+2NaluQPn3X0hIiJQ1UTYFm4Yg1wdwSj
zF5F/82VmKyc3T565Xicy8iQqtndMmJGWqyO0W3F2xhE6DTlg1KlNgJgftE2LECc
RK3MAkrwIvnYI/lZmmXmNwlmpb23mv9oAxQLYjh229WrE6ZPMrn/mcQ2U4I00l0J
5xIsQm0v8T0MY+OhwnE1a2ZNjQ7h0bGMIvSlAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUAM0juoaFvrvo+0AIHfrW5Yt6KX0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0FNMGp1b2FGdnJ2by0w
QUlIZnJXNVl0NktYMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJD0rbrd1OQ56K/F2xhL+Nb2xlSzbtGi
60WlzYpcML9ogD8uLYTgdmdJJ+X5RYAotcKEKaVGT7UBGua9HcQ76uIY4/qfy5AI
LuEKP8kKS1xk5DKTjL6CoNmLjewULxg/c7SiN3odTFhxwcQIo4llLTx7qddUj8HU
XixpV75NWxgy3FUeBhuhvbglPC/oEJHL1b3WL3a+Fv3ssy5S/+SMgvD3Oh1IoRpL
UjQSJx9ZdXKi+sVTtQrDwKsY1N0PMtbmIE9lLBDyJ2PCjz3I3H6tEm+Iy6h54MSv
EIWUh8ZVsJrFrL6gJ/iWen0HuKnaMVcojqfTgySTp5XUwo4WBqoRRi0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org