Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/F_WPIhUmAgp6WJWcsJrKtE2NsY4.roa
File: F_WPIhUmAgp6WJWcsJrKtE2NsY4.roa (raw, json)
Hash identifier: vZtb/O3hXXsW2qIObySI98Oxf+x+ov7wj93COItY7WY=
Subject key identifier: 17:F5:8F:22:15:26:02:0A:7A:58:95:9C:B0:9A:CA:B4:4D:8D:B1:8E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4253
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F_WPIhUmAgp6WJWcsJrKtE2NsY4.roa
Signing time: Wed 17 Apr 2024 00:22:58 +0000
ROA not before: Wed 17 Apr 2024 00:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16979 (0x4253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 00:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=17F58F221526020A7A58959CB09ACAB44D8DB18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:18:db:e6:6c:fd:2e:e7:10:c5:05:f7:75:
2a:f6:39:af:11:dd:75:61:ae:f4:69:62:2f:49:b3:
c4:73:78:40:e9:14:fa:76:9e:d9:89:4a:85:6e:89:
e6:dd:95:ef:fd:05:31:43:6d:b4:3c:d2:58:1e:c0:
c1:b1:7f:c9:b6:2b:a9:68:45:c8:c4:15:74:e7:6b:
93:b8:e5:a8:98:11:4c:f6:02:23:7d:1a:23:cb:dc:
df:e9:49:5b:af:dd:ce:c4:dc:ff:46:9d:e3:a8:c2:
a3:12:b7:6d:97:e8:f2:6a:05:57:cf:c3:37:1f:51:
4e:c4:a2:7d:ec:1e:59:cc:6f:98:ff:75:97:d7:3b:
68:c6:4c:ce:e5:8e:7c:ad:6d:d9:75:f8:23:a7:c1:
30:5a:06:3f:84:76:51:da:47:76:37:7f:d7:30:26:
9d:d6:39:f8:58:49:82:b6:f5:e7:bf:1b:17:fd:e7:
9a:a3:03:0e:ae:1e:db:58:60:87:b9:38:29:51:b6:
95:4e:e0:96:0f:d1:9b:ea:2a:66:d6:5d:32:7c:cb:
ac:28:d8:49:d1:06:c3:ee:d1:fa:6f:b3:43:04:c6:
99:3d:52:c7:31:dc:fb:32:dc:b5:ed:51:fa:74:05:
da:59:31:8e:f8:ed:e5:b5:da:25:db:e5:14:e4:28:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:8F:22:15:26:02:0A:7A:58:95:9C:B0:9A:CA:B4:4D:8D:B1:8E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/F_WPIhUmAgp6WJWcsJrKtE2NsY4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:2d:68:8f:c4:96:bd:00:94:61:43:47:38:28:f4:15:20:d2:
cf:21:8a:da:02:a8:83:c5:42:d9:3e:59:0a:96:51:74:83:4a:
01:ed:b0:db:3f:1f:63:a2:3b:71:68:e8:51:ba:11:45:56:d5:
a3:80:c3:46:e1:33:e3:a9:70:ae:6e:40:c9:0f:dd:18:77:c3:
75:98:28:f5:c7:a5:95:95:40:c9:8d:a8:e6:31:51:8f:32:1d:
82:91:c7:2b:27:23:8a:0a:5a:cb:b6:67:3d:59:ca:31:ea:79:
36:ae:5e:79:6a:ac:68:01:29:5f:74:a5:77:1d:f1:89:6c:2c:
45:6e:c5:df:2d:02:94:e8:2b:87:a0:cf:be:13:70:97:85:64:
ff:76:11:94:63:3d:e8:10:17:1c:26:0e:7a:07:bc:ca:88:59:
c7:44:e0:e5:47:66:16:03:85:3c:13:97:d1:cc:69:bd:81:ef:
e4:aa:a6:ef:a0:1d:92:6b:0f:35:ca:e7:8c:01:98:bb:8c:f7:
92:14:a5:e7:aa:23:d2:8c:62:ba:2e:6b:15:a5:8d:2e:ef:24:
fa:e1:a3:d5:c2:6c:ec:77:c7:69:0b:bd:e1:41:5c:5a:30:2f:
cd:25:94:83:df:b6:54:2e:46:71:c8:d8:d6:da:68:35:7c:f1:
ce:a5:47:26
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
MDIyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE3RjU4RjIyMTUyNjAy
MEE3QTU4OTU5Q0IwOUFDQUI0NEQ4REIxOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFvRjb5mz9LucQxQX3dSr2Oa8R3XVhrvRpYi9Js8RzeEDpFPp2
ntmJSoVuiebdle/9BTFDbbQ80lgewMGxf8m2K6loRcjEFXTna5O45aiYEUz2AiN9
GiPL3N/pSVuv3c7E3P9GneOowqMSt22X6PJqBVfPwzcfUU7Eon3sHlnMb5j/dZfX
O2jGTM7ljnytbdl1+COnwTBaBj+EdlHaR3Y3f9cwJp3WOfhYSYK29ee/Gxf955qj
Aw6uHttYYIe5OClRtpVO4JYP0ZvqKmbWXTJ8y6wo2EnRBsPu0fpvs0MExpk9Uscx
3Psy3LXtUfp0BdpZMY747eW12iXb5RTkKNDrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUF/WPIhUmAgp6WJWcsJrKtE2NsY4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZfV1BJaFVtQWdwNldK
V2NzSnJLdEUyTnNZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEwtaI/Elr0AlGFDRzgo9BUg0s8hitoC
qIPFQtk+WQqWUXSDSgHtsNs/H2OiO3Fo6FG6EUVW1aOAw0bhM+OpcK5uQMkP3Rh3
w3WYKPXHpZWVQMmNqOYxUY8yHYKRxysnI4oKWsu2Zz1ZyjHqeTauXnlqrGgBKV90
pXcd8YlsLEVuxd8tApToK4egz74TcJeFZP92EZRjPegQFxwmDnoHvMqIWcdE4OVH
ZhYDhTwTl9HMab2B7+Sqpu+gHZJrDzXK54wBmLuM95IUpeeqI9KMYrouaxWljS7v
JPrho9XCbOx3x2kLveFBXFowL80llIPftlQuRnHI2NbaaDV88c6lRyY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org