Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EVJTFET0bF2ODYhewZXap_nHFPA.roa
File: EVJTFET0bF2ODYhewZXap_nHFPA.roa (raw, json)
Hash identifier: osb1XhQPpFvE+nc/dMfju8fRm3LlbRU7Xi4EMoVFWbI=
Subject key identifier: 11:52:53:14:44:F4:6C:5D:8E:0D:88:5E:C1:95:DA:A7:F9:C7:14:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3893
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EVJTFET0bF2ODYhewZXap_nHFPA.roa
Signing time: Thu 04 Apr 2024 00:22:21 +0000
ROA not before: Thu 04 Apr 2024 00:22:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14483 (0x3893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 00:22:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1152531444F46C5D8E0D885EC195DAA7F9C714F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:fb:45:3d:ee:08:10:21:5d:77:31:40:bc:
68:a4:fd:2d:19:70:60:15:b7:ed:79:eb:5e:ab:27:
fc:85:b5:3b:4a:5c:0b:2b:6c:7f:3f:d9:44:c8:d4:
ed:20:44:90:f8:0e:df:97:5d:e8:0a:2d:fc:ea:6e:
26:00:88:e0:7b:c6:a2:cf:f0:74:c4:0c:93:6d:d5:
1b:94:77:fe:1b:be:98:6f:14:9d:6d:ca:20:dd:9d:
10:3e:6a:3c:c7:fb:a1:40:9c:49:49:f4:44:f3:63:
1b:63:9f:68:d8:8d:0a:8e:c1:43:ee:04:11:4f:4b:
19:fb:b9:31:6f:13:6b:78:b0:29:1d:c4:7b:68:2f:
d0:1f:67:0e:f4:62:ce:06:4b:0e:be:d5:aa:14:3c:
30:61:7b:a3:2e:61:da:d4:9a:65:4c:f1:01:76:29:
10:2e:e0:71:22:88:4b:a2:19:c2:51:54:78:84:37:
59:54:5d:0e:65:f1:f7:d5:c6:cf:e4:2f:29:6e:c2:
2e:d0:2c:15:0b:8d:f2:81:fe:4c:a5:b0:8b:05:82:
e0:0b:dc:67:b6:26:41:a7:86:3d:de:d7:3d:6c:2e:
7a:59:fd:27:e2:33:74:19:68:d7:ad:81:92:19:60:
60:86:9f:f0:13:2f:24:2e:46:9b:1e:83:59:a9:11:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:53:14:44:F4:6C:5D:8E:0D:88:5E:C1:95:DA:A7:F9:C7:14:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EVJTFET0bF2ODYhewZXap_nHFPA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:e4:13:ec:9e:8b:20:26:47:20:1f:57:c6:b2:0d:36:b8:45:
8d:56:47:82:15:07:6a:61:67:72:d6:1d:5d:f5:2e:00:2c:43:
4e:cf:4d:03:90:26:5e:65:fb:8e:46:7b:3c:50:3f:3e:22:8a:
c6:20:8a:0e:fb:82:b9:d8:85:f2:b0:16:92:16:80:df:2c:82:
6d:54:e5:26:7e:2c:5d:bc:b5:84:38:0e:6c:c0:ab:e7:fe:39:
45:98:0c:cc:1d:f8:9e:37:db:85:8f:7d:9a:78:47:13:e0:33:
c4:88:07:fc:0b:ed:df:bc:e5:89:02:01:c8:81:02:99:17:74:
ec:fe:05:a2:e5:19:be:72:50:a3:47:e9:f9:50:10:b2:b1:42:
ff:1d:0a:f6:a8:9e:62:d4:69:9c:fa:6a:d5:f7:5f:65:21:09:
1a:02:32:69:5f:fb:fa:1a:f9:50:8e:59:01:d7:cb:3e:94:12:
0b:df:1d:89:11:62:bd:d1:e1:aa:a8:6c:e2:8a:9f:20:5d:15:
54:8a:08:74:ba:05:99:1b:97:7c:eb:97:5d:3e:05:1e:f5:22:
16:88:9e:2d:94:42:50:bb:53:07:0a:4a:7a:e1:84:65:f8:30:
1d:e4:61:ca:7d:53:18:90:8e:eb:b8:27:23:6b:1c:d8:cc:c8:
dd:7e:40:4e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQw
MDIyMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDExNTI1MzE0NDRGNDZD
NUQ4RTBEODg1RUMxOTVEQUE3RjlDNzE0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE/ftFPe4IECFddzFAvGik/S0ZcGAVt+15616rJ/yFtTtKXAsr
bH8/2UTI1O0gRJD4Dt+XXegKLfzqbiYAiOB7xqLP8HTEDJNt1RuUd/4bvphvFJ1t
yiDdnRA+ajzH+6FAnElJ9ETzYxtjn2jYjQqOwUPuBBFPSxn7uTFvE2t4sCkdxHto
L9AfZw70Ys4GSw6+1aoUPDBhe6MuYdrUmmVM8QF2KRAu4HEiiEuiGcJRVHiEN1lU
XQ5l8ffVxs/kLyluwi7QLBULjfKB/kylsIsFguAL3Ge2JkGnhj3e1z1sLnpZ/Sfi
M3QZaNetgZIZYGCGn/ATLyQuRpseg1mpEfjxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUEVJTFET0bF2ODYhewZXap/nHFPAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0VWSlRGRVQwYkYyT0RZ
aGV3WlhhcF9uSEZQQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJPkE+yeiyAmRyAfV8ayDTa4RY1WR4IV
B2phZ3LWHV31LgAsQ07PTQOQJl5l+45GezxQPz4iisYgig77grnYhfKwFpIWgN8s
gm1U5SZ+LF28tYQ4DmzAq+f+OUWYDMwd+J4324WPfZp4RxPgM8SIB/wL7d+85YkC
AciBApkXdOz+BaLlGb5yUKNH6flQELKxQv8dCvaonmLUaZz6atX3X2UhCRoCMmlf
+/oa+VCOWQHXyz6UEgvfHYkRYr3R4aqobOKKnyBdFVSKCHS6BZkbl3zrl10+BR71
IhaIni2UQlC7UwcKSnrhhGX4MB3kYcp9UxiQjuu4JyNrHNjMyN1+QE4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:14 2024 by rpki-client on console-fra.rpki-client.org