Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C6auieYi_t9EF2-TlGyyc8brOGE.roa
File: C6auieYi_t9EF2-TlGyyc8brOGE.roa (raw, json)
Hash identifier: mD9pFC81ltx+laul+EOih+sMOKDgp77oBztRv2zC5Aw=
Subject key identifier: 0B:A6:AE:89:E6:22:FE:DF:44:17:6F:93:94:6C:B2:73:C6:EB:38:61
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B4F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C6auieYi_t9EF2-TlGyyc8brOGE.roa
Signing time: Sun 07 Apr 2024 15:52:34 +0000
ROA not before: Sun 07 Apr 2024 15:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15183 (0x3b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 15:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BA6AE89E622FEDF44176F93946CB273C6EB3861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:04:01:68:cf:8f:b7:33:5d:a6:d0:51:ce:
03:57:6f:45:5b:af:ea:91:23:b0:35:d8:fd:5e:d4:
ea:4e:12:43:09:8d:84:65:d0:11:89:25:99:88:5c:
a8:a9:20:99:39:61:5a:38:e1:ce:55:f4:e7:7f:9f:
58:ef:60:81:5a:8c:8c:cc:dd:c4:cb:20:f3:63:e1:
97:5d:16:12:84:11:47:59:7b:90:eb:4f:e9:4d:ba:
01:9a:6e:ee:a1:fa:96:e8:9f:19:58:8f:77:7e:b5:
5d:af:2a:eb:c3:b7:bf:7a:9c:5a:59:63:44:88:2a:
7d:dc:29:f1:58:d0:28:99:59:c1:71:24:24:f7:57:
2f:b2:cf:f2:9e:39:81:2a:2e:d4:e3:5b:29:fc:a4:
23:4e:09:4e:8b:0c:f3:53:42:20:1e:6d:96:ef:a1:
fc:fa:15:cb:a3:73:f3:a9:48:02:cf:f5:0a:14:a4:
86:74:61:a2:d8:a5:01:75:94:ce:3a:a0:14:50:98:
31:19:3b:20:13:5a:7f:0f:7a:bb:3f:7a:88:c1:5b:
f1:dd:c7:6d:06:3a:8b:67:25:57:8e:65:7f:c5:d9:
8d:9b:1f:08:7f:c6:ce:ba:3d:8a:6e:67:60:09:9e:
84:38:99:c1:bd:62:c2:39:16:1e:8e:88:22:f2:50:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:AE:89:E6:22:FE:DF:44:17:6F:93:94:6C:B2:73:C6:EB:38:61
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C6auieYi_t9EF2-TlGyyc8brOGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:ec:9f:78:86:74:04:10:a7:0d:d5:21:d2:b3:b8:d1:9b:92:
2c:5d:27:7c:9c:79:eb:20:b4:cc:83:0d:3f:42:a8:e4:5b:e7:
0a:54:21:09:13:85:fe:db:26:f1:48:4b:5a:ea:f6:8a:6d:0d:
fd:7f:22:a0:7f:81:2f:8f:63:53:69:f0:f7:9e:b9:b2:e2:a0:
03:2f:dd:a3:81:92:ec:72:cd:d1:6f:4d:22:13:34:2a:d0:5b:
9e:46:89:83:ae:49:20:f3:c1:ff:d3:67:20:a6:18:f5:e0:3c:
2e:1e:f1:e3:ba:87:58:e0:b0:1a:14:1b:7a:89:c5:e4:a6:44:
45:cb:48:b7:ee:da:45:24:6f:2e:be:ad:00:5f:e4:37:bf:86:
cd:08:0a:53:ed:f9:cc:04:c7:4d:d8:67:85:a0:dd:03:6f:6d:
e5:5e:65:1f:89:13:25:f7:44:65:d5:30:c9:29:66:76:62:4a:
a8:e6:12:e0:da:8b:54:d4:3a:10:3c:f8:9e:4f:00:57:c6:1b:
eb:be:97:75:dd:41:94:e1:ee:d6:52:cc:9f:2b:ea:1f:e8:63:
ef:15:20:82:41:42:06:c6:be:b4:f5:08:5e:0c:81:d7:98:e0:
6c:2c:20:14:56:2f:56:0c:c9:fe:a7:c2:b4:d6:1d:c5:26:ef:
e3:b3:ed:99
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcx
NTUyMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBCQTZBRTg5RTYyMkZF
REY0NDE3NkY5Mzk0NkNCMjczQzZFQjM4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ0AQBaM+PtzNdptBRzgNXb0Vbr+qRI7A12P1e1OpOEkMJjYRl
0BGJJZmIXKipIJk5YVo44c5V9Od/n1jvYIFajIzM3cTLIPNj4ZddFhKEEUdZe5Dr
T+lNugGabu6h+pbonxlYj3d+tV2vKuvDt796nFpZY0SIKn3cKfFY0CiZWcFxJCT3
Vy+yz/KeOYEqLtTjWyn8pCNOCU6LDPNTQiAebZbvofz6Fcujc/OpSALP9QoUpIZ0
YaLYpQF1lM46oBRQmDEZOyATWn8Pers/eojBW/Hdx20GOotnJVeOZX/F2Y2bHwh/
xs66PYpuZ2AJnoQ4mcG9YsI5Fh6OiCLyUOZNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUC6auieYi/t9EF2+TlGyyc8brOGEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0M2YXVpZVlpX3Q5RUYy
LVRsR3l5Yzhick9HRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFrsn3iGdAQQpw3VIdKzuNGbkixdJ3yc
eesgtMyDDT9CqORb5wpUIQkThf7bJvFIS1rq9optDf1/IqB/gS+PY1Np8PeeubLi
oAMv3aOBkuxyzdFvTSITNCrQW55GiYOuSSDzwf/TZyCmGPXgPC4e8eO6h1jgsBoU
G3qJxeSmREXLSLfu2kUkby6+rQBf5De/hs0IClPt+cwEx03YZ4Wg3QNvbeVeZR+J
EyX3RGXVMMkpZnZiSqjmEuDai1TUOhA8+J5PAFfGG+u+l3XdQZTh7tZSzJ8r6h/o
Y+8VIIJBQgbGvrT1CF4MgdeY4GwsIBRWL1YMyf6nwrTWHcUm7+Oz7Zk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:12 2025 by rpki-client