Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FJlP4m3YaeZTuQvU-st-TosNMEk.roa
File: FJlP4m3YaeZTuQvU-st-TosNMEk.roa (raw, json)
Hash identifier: XLsdJVtoQ887sl0Is8nMXmGHgjtSIXKMc8QK86I49QM=
Subject key identifier: 14:99:4F:E2:6D:D8:69:E6:53:B9:0B:D4:FA:CB:7E:4E:8B:0D:30:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37B7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FJlP4m3YaeZTuQvU-st-TosNMEk.roa
Signing time: Tue 02 Apr 2024 20:52:18 +0000
ROA not before: Tue 02 Apr 2024 20:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14263 (0x37b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 20:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14994FE26DD869E653B90BD4FACB7E4E8B0D3049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:4c:95:6f:7a:07:cc:c1:95:2b:5d:51:c7:
e8:fb:a1:8d:75:b5:78:fa:9f:3b:8a:6d:c2:96:86:
6e:f1:ea:2a:58:2d:4d:11:a6:f1:54:cb:01:10:76:
ef:c2:d3:08:bf:0d:c6:cd:5d:91:2e:ce:39:98:76:
28:2c:a1:d0:a7:17:fe:ad:c9:36:33:38:8f:b6:a4:
56:da:6f:d7:aa:45:b0:14:c6:c0:6a:11:f9:16:ec:
a1:d6:d1:92:7d:e1:f4:7d:64:7b:cb:75:20:e2:c1:
aa:97:40:70:97:71:9d:e6:05:41:5e:19:80:1d:c8:
17:b4:0f:9c:1c:07:75:ac:3f:8d:11:80:63:af:aa:
86:f5:af:e1:65:36:f4:88:25:99:6e:c1:e0:3b:90:
3c:d2:31:7a:5d:a6:7e:6c:ac:71:78:88:1c:0c:ff:
9d:51:ae:cc:0f:3b:2e:52:7a:55:dd:9a:df:e7:2f:
c0:4d:d2:83:df:83:33:81:dd:81:26:87:ad:5b:81:
37:b8:47:55:41:1f:9e:85:3e:51:72:8f:05:78:54:
06:e0:2d:cf:ed:60:e1:76:a1:b9:4c:39:34:74:fb:
44:61:18:52:56:e4:7f:cb:e1:f0:1d:0b:52:38:0f:
f5:f9:fe:33:bf:c8:48:64:3e:e8:8e:8e:5a:0f:22:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:4F:E2:6D:D8:69:E6:53:B9:0B:D4:FA:CB:7E:4E:8B:0D:30:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FJlP4m3YaeZTuQvU-st-TosNMEk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:92:0e:74:69:b4:a9:f5:b0:67:56:44:f4:35:e5:2c:2c:bb:
a0:a5:16:77:06:6b:d9:13:18:f7:9d:3c:01:79:6b:ac:25:d3:
e4:39:2c:37:73:8e:cf:03:6e:47:75:cd:ba:ac:fe:f7:bc:13:
2b:00:40:41:e3:79:b0:8c:1f:58:90:62:79:7f:50:15:3c:48:
53:25:f8:bc:79:49:b4:56:17:ca:fb:39:81:f4:c7:be:51:09:
db:a6:8e:cd:b8:21:91:02:ec:58:c6:13:d9:28:ce:58:b0:c6:
52:95:79:db:36:9a:67:af:82:c0:98:f6:ca:68:c0:0e:a4:4e:
ea:f5:e9:13:35:e1:0c:27:3a:4b:68:e2:46:dc:61:05:c9:3b:
7e:3f:1e:b9:e5:24:09:f4:32:fc:2a:af:73:19:d8:92:f9:6d:
d6:39:4d:26:9e:cc:c1:7d:e8:13:1d:fb:4a:a3:ed:ac:c6:22:
88:9e:a5:66:60:4e:b4:06:e9:42:27:ca:cb:b7:6a:55:88:93:
23:c1:1a:e8:52:b3:e7:71:85:9f:8b:b2:9f:19:10:22:f8:0e:
f1:5f:ed:ef:2e:31:c1:3d:a8:64:a4:25:a1:58:cc:1d:b3:81:
65:fd:93:ae:7f:48:4e:80:75:2c:f1:04:46:6d:d5:b0:c7:c8:
b5:93:d5:4b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICN7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDIy
MDUyMThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE0OTk0RkUyNkREODY5
RTY1M0I5MEJENEZBQ0I3RTRFOEIwRDMwNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg0kyVb3oHzMGVK11Rx+j7oY11tXj6nzuKbcKWhm7x6ipYLU0R
pvFUywEQdu/C0wi/DcbNXZEuzjmYdigsodCnF/6tyTYzOI+2pFbab9eqRbAUxsBq
EfkW7KHW0ZJ94fR9ZHvLdSDiwaqXQHCXcZ3mBUFeGYAdyBe0D5wcB3WsP40RgGOv
qob1r+FlNvSIJZluweA7kDzSMXpdpn5srHF4iBwM/51RrswPOy5SelXdmt/nL8BN
0oPfgzOB3YEmh61bgTe4R1VBH56FPlFyjwV4VAbgLc/tYOF2oblMOTR0+0RhGFJW
5H/L4fAdC1I4D/X5/jO/yEhkPuiOjloPIsJdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUFJlP4m3YaeZTuQvU+st+TosNMEkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZKbFA0bTNZYWVaVHVR
dlUtc3QtVG9zTk1Fay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAF2SDnRptKn1sGdWRPQ15Swsu6ClFncG
a9kTGPedPAF5a6wl0+Q5LDdzjs8Dbkd1zbqs/ve8EysAQEHjebCMH1iQYnl/UBU8
SFMl+Lx5SbRWF8r7OYH0x75RCdumjs24IZEC7FjGE9kozliwxlKVeds2mmevgsCY
9spowA6kTur16RM14QwnOkto4kbcYQXJO34/HrnlJAn0Mvwqr3MZ2JL5bdY5TSae
zMF96BMd+0qj7azGIoiepWZgTrQG6UInysu3alWIkyPBGuhSs+dxhZ+Lsp8ZECL4
DvFf7e8uMcE9qGSkJaFYzB2zgWX9k65/SE6AdSzxBEZt1bDHyLWT1Us=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org