Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FG1rVKkAgQzC_cHMzTpa1b_l6F8.roa
File: FG1rVKkAgQzC_cHMzTpa1b_l6F8.roa (raw, json)
Hash identifier: OCJJ+UyPLS4Pc77KTlI/iXoefvRWghaC1wvBbolegVw=
Subject key identifier: 14:6D:6B:54:A9:00:81:0C:C2:FD:C1:CC:CD:3A:5A:D5:BF:E5:E8:5F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B77
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FG1rVKkAgQzC_cHMzTpa1b_l6F8.roa
Signing time: Mon 29 Apr 2024 04:53:30 +0000
ROA not before: Mon 29 Apr 2024 04:53:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19319 (0x4b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 04:53:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=146D6B54A900810CC2FDC1CCCD3A5AD5BFE5E85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:59:60:7c:ef:0f:bc:88:79:95:7d:1f:29:
7a:1b:e8:f4:21:7f:25:c9:97:48:f9:fc:10:c4:84:
87:f5:51:23:0e:c6:9e:c5:b6:74:eb:90:8a:cc:48:
62:6f:26:fb:75:13:3d:7e:89:4b:3d:80:17:8d:d6:
62:3a:54:5a:e3:b5:5b:f7:b8:0a:66:3f:08:be:58:
54:bc:1d:38:1c:69:76:83:fa:4b:07:66:ca:c6:78:
71:2c:ff:c9:f5:8c:7b:48:3b:b0:fd:a1:dd:1a:17:
55:1c:ae:d1:9a:c9:ae:1a:5e:1c:2a:2c:8f:98:f0:
46:72:7a:e5:53:85:40:53:a7:52:56:03:1e:6d:e0:
f9:f1:0b:9c:7c:74:85:d7:8f:e3:fb:63:3b:ff:e8:
7e:1e:0b:90:60:23:0a:6e:88:a8:74:c2:87:5f:22:
2a:fa:aa:77:b6:2e:24:26:c6:c1:71:5b:c2:c7:c7:
dc:52:e8:be:d2:94:2b:68:a3:0b:65:9c:61:c3:21:
8b:ea:35:da:63:8a:a6:3f:77:d2:fe:ec:56:a2:89:
92:a3:79:f1:1c:78:f1:70:67:8a:34:60:8f:99:13:
9b:d6:56:c3:f9:21:84:f1:07:93:51:a7:d7:48:f1:
c0:32:60:fa:9b:ee:de:4d:0d:8c:ef:f2:24:26:55:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:6B:54:A9:00:81:0C:C2:FD:C1:CC:CD:3A:5A:D5:BF:E5:E8:5F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FG1rVKkAgQzC_cHMzTpa1b_l6F8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:7e:ee:2b:f8:0b:bb:54:0a:9b:65:83:f2:45:1b:06:97:47:
d8:85:df:aa:ae:e4:e1:32:9b:6e:93:b7:f7:3a:40:0b:c0:1a:
bd:4f:b7:1e:e5:18:40:a7:63:2b:30:71:65:a6:58:9e:e0:eb:
51:a4:95:d9:ed:6b:a3:32:11:55:fc:80:3c:a4:c1:78:3b:7c:
ad:e4:ec:f9:c8:af:38:fa:4e:97:56:3b:01:f8:a6:6a:65:a4:
7d:6b:4a:2b:72:fb:54:c9:3f:c7:40:d7:4d:c5:ec:c6:43:b8:
d5:4f:46:4b:fc:b3:23:48:65:46:b9:d6:56:ef:0a:9f:bc:71:
11:4a:e1:0d:3b:ad:b1:1f:7d:32:f6:34:a2:0f:e4:0c:88:7d:
e1:ed:70:d0:14:f6:15:13:c7:a7:4a:5f:5c:f5:15:79:5c:82:
2f:af:d9:7d:bb:29:19:d2:66:8f:5e:0f:80:92:05:c7:08:5e:
8f:69:7f:fb:f4:8a:36:bf:8d:7d:d0:c8:3e:62:99:69:f4:b4:
bb:ef:76:14:76:9a:7b:ac:0d:43:7c:9a:e1:9b:96:21:9f:f3:
91:41:a5:e0:65:e9:77:ee:96:e6:b8:64:30:95:2d:b8:d1:a2:
6a:7e:07:d5:1c:10:ba:8f:dd:6e:55:6c:31:96:9c:a3:ee:c4:
99:c3:94:71
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICS3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkw
NDUzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE0NkQ2QjU0QTkwMDgx
MENDMkZEQzFDQ0NEM0E1QUQ1QkZFNUU4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhUllgfO8PvIh5lX0fKXob6PQhfyXJl0j5/BDEhIf1USMOxp7F
tnTrkIrMSGJvJvt1Ez1+iUs9gBeN1mI6VFrjtVv3uApmPwi+WFS8HTgcaXaD+ksH
ZsrGeHEs/8n1jHtIO7D9od0aF1UcrtGaya4aXhwqLI+Y8EZyeuVThUBTp1JWAx5t
4PnxC5x8dIXXj+P7Yzv/6H4eC5BgIwpuiKh0wodfIir6qne2LiQmxsFxW8LHx9xS
6L7SlCtoowtlnGHDIYvqNdpjiqY/d9L+7FaiiZKjefEcePFwZ4o0YI+ZE5vWVsP5
IYTxB5NRp9dI8cAyYPqb7t5NDYzv8iQmVVBVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUFG1rVKkAgQzC/cHMzTpa1b/l6F8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZHMXJWS2tBZ1F6Q19j
SE16VHBhMWJfbDZGOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAG5+7iv4C7tUCptlg/JFGwaXR9iF36qu
5OEym26Tt/c6QAvAGr1Ptx7lGECnYyswcWWmWJ7g61Gkldnta6MyEVX8gDykwXg7
fK3k7PnIrzj6TpdWOwH4pmplpH1rSity+1TJP8dA103F7MZDuNVPRkv8syNIZUa5
1lbvCp+8cRFK4Q07rbEffTL2NKIP5AyIfeHtcNAU9hUTx6dKX1z1FXlcgi+v2X27
KRnSZo9eD4CSBccIXo9pf/v0ija/jX3QyD5imWn0tLvvdhR2mnusDUN8muGbliGf
85FBpeBl6Xfulua4ZDCVLbjRomp+B9UcELqP3W5VbDGWnKPuxJnDlHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org