Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FbRE1AFGhL3pn1rkqy-smrq5l5g.roa
File: FbRE1AFGhL3pn1rkqy-smrq5l5g.roa (raw, json)
Hash identifier: g/5GYzsWpaJjvYlGzznS1hwb4ve43Jd7ms/+dQITDxU=
Subject key identifier: 15:B4:44:D4:01:46:84:BD:E9:9F:5A:E4:AB:2F:AC:9A:BA:B9:97:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FbRE1AFGhL3pn1rkqy-smrq5l5g.roa
Signing time: Sat 30 Mar 2024 00:52:13 +0000
ROA not before: Sat 30 Mar 2024 00:52:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13527 (0x34d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 00:52:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=15B444D4014684BDE99F5AE4AB2FAC9ABAB99798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:10:53:7b:be:63:ba:11:88:ef:a1:fe:73:
4d:f2:7e:cf:b7:c3:8a:9e:49:38:bc:f5:aa:71:97:
24:22:c9:33:f2:4c:04:41:b9:a1:c3:e6:96:01:c7:
48:a4:80:9d:c4:82:cb:ee:91:a4:6b:67:51:98:40:
5e:2d:b6:30:33:58:24:97:2d:93:df:ad:92:6d:bb:
ec:5c:e7:f5:32:42:d0:76:21:9f:22:45:6f:48:0f:
f1:94:c9:d2:40:06:8b:b3:88:c6:06:3f:ef:bd:70:
5b:3b:e5:3d:12:0f:f4:56:4d:7f:64:3e:97:ef:11:
3a:66:5a:45:3c:47:dd:98:55:eb:73:c0:99:cf:d7:
4d:5a:ff:ca:5d:b9:23:51:ee:ec:4f:92:3e:d8:61:
d0:73:e3:7f:9c:bc:45:3c:ca:cb:0b:48:05:83:3b:
db:bf:11:b7:16:db:e9:d8:d2:55:7e:5c:1a:71:2d:
12:cb:5b:bd:79:3e:e7:63:48:66:1c:c3:04:5d:f3:
0e:de:3a:eb:e5:62:be:8d:5b:52:f7:40:9c:fa:d5:
b3:79:72:6f:db:61:35:e2:ed:64:58:39:29:7a:18:
fe:81:ae:bf:2b:68:16:cc:12:0a:db:e3:42:b6:87:
8b:9a:c5:86:20:7b:b3:e2:6a:33:e0:26:a5:d8:9b:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:44:D4:01:46:84:BD:E9:9F:5A:E4:AB:2F:AC:9A:BA:B9:97:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FbRE1AFGhL3pn1rkqy-smrq5l5g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:b6:83:c5:04:e7:ca:3d:27:31:db:3b:a9:37:74:d5:ea:e8:
4a:be:39:73:18:5e:f4:34:35:d0:97:ba:1b:61:d1:c8:6d:82:
a0:d1:7e:11:ca:41:16:01:1f:fe:8e:b1:50:b7:f2:ad:a2:85:
bf:48:87:3b:5f:1c:34:ae:a0:26:33:fb:7e:51:e9:ce:f2:3b:
76:ff:7a:a2:51:2e:0c:59:c5:4d:bf:35:6d:7c:b5:54:a8:97:
6c:d8:22:6d:70:58:c6:72:24:e4:d7:8f:cb:b6:a2:87:7c:d7:
48:d5:bd:fa:c3:b1:36:16:81:65:81:ae:b4:e1:4a:23:da:8b:
db:7e:d5:e3:56:bf:65:18:6a:0e:1d:ec:16:66:46:9e:ba:1d:
0d:80:80:72:18:7b:c8:ce:2c:26:31:46:09:1e:f3:05:7a:d5:
c5:58:7f:b0:2d:8d:ca:e3:05:3c:44:2d:d2:c1:76:79:c6:29:
4d:c5:82:75:c3:bd:71:b3:10:75:1b:da:80:58:4f:27:23:e2:
20:8e:ec:89:f5:d9:b5:c4:51:ce:7c:b7:f3:59:10:b3:86:3d:
c9:bd:8d:c6:bb:03:12:61:69:63:0a:9e:e8:8d:1e:f2:67:f6:
cb:22:c8:65:b9:32:07:24:5c:36:6e:f0:7e:7b:f0:b0:1d:fd:
ea:2b:92:56
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
MDUyMTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE1QjQ0NEQ0MDE0Njg0
QkRFOTlGNUFFNEFCMkZBQzlBQkFCOTk3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOrxBTe75juhGI76H+c03yfs+3w4qeSTi89apxlyQiyTPyTARB
uaHD5pYBx0ikgJ3EgsvukaRrZ1GYQF4ttjAzWCSXLZPfrZJtu+xc5/UyQtB2IZ8i
RW9ID/GUydJABouziMYGP++9cFs75T0SD/RWTX9kPpfvETpmWkU8R92YVetzwJnP
101a/8pduSNR7uxPkj7YYdBz43+cvEU8yssLSAWDO9u/EbcW2+nY0lV+XBpxLRLL
W715PudjSGYcwwRd8w7eOuvlYr6NW1L3QJz61bN5cm/bYTXi7WRYOSl6GP6Brr8r
aBbMEgrb40K2h4uaxYYge7PiajPgJqXYmw53AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUFbRE1AFGhL3pn1rkqy+smrq5l5gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZiUkUxQUZHaEwzcG4x
cmtxeS1zbXJxNWw1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADK2g8UE58o9JzHbO6k3dNXq6Eq+OXMY
XvQ0NdCXuhth0chtgqDRfhHKQRYBH/6OsVC38q2ihb9IhztfHDSuoCYz+35R6c7y
O3b/eqJRLgxZxU2/NW18tVSol2zYIm1wWMZyJOTXj8u2ood810jVvfrDsTYWgWWB
rrThSiPai9t+1eNWv2UYag4d7BZmRp66HQ2AgHIYe8jOLCYxRgke8wV61cVYf7At
jcrjBTxELdLBdnnGKU3FgnXDvXGzEHUb2oBYTycj4iCO7In12bXEUc58t/NZELOG
Pcm9jca7AxJhaWMKnuiNHvJn9ssiyGW5MgckXDZu8H578LAd/eorklY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org