Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GA6YWPM-_A_yDRlH3HxwCUG2LzA.roa
File: GA6YWPM-_A_yDRlH3HxwCUG2LzA.roa (raw, json)
Hash identifier: nD6HWe0q5c1mNnTQrLfB1tffT1B8IMI/bTs1rITzEoM=
Subject key identifier: 18:0E:98:58:F3:3E:FC:0F:F2:0D:19:47:DC:7C:70:09:41:B6:2F:30
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 352B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GA6YWPM-_A_yDRlH3HxwCUG2LzA.roa
Signing time: Sat 30 Mar 2024 11:22:11 +0000
ROA not before: Sat 30 Mar 2024 11:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13611 (0x352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 11:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=180E9858F33EFC0FF20D1947DC7C700941B62F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:dd:c6:4c:fa:12:9a:b5:26:90:3f:60:d6:
f9:43:7b:40:e3:69:4d:ed:4d:fc:86:41:73:5f:79:
9c:de:79:8a:b9:78:a4:78:92:5f:e3:9e:20:33:cf:
0c:f8:63:2b:b9:f8:03:c0:b3:25:e8:26:9d:9f:68:
c7:b1:f9:15:95:ae:1f:ad:7f:05:8f:c6:0b:c4:03:
5b:33:48:e6:c2:86:db:8f:b5:98:ed:7b:95:6c:0a:
ea:ac:a8:94:a8:a6:d0:29:89:34:34:c7:f5:61:60:
ac:44:08:76:e9:e1:73:9b:54:41:2a:64:c0:f6:9d:
60:c4:44:57:88:b8:07:b4:18:5a:fe:ad:0b:e2:b2:
d8:34:3c:76:2d:94:c2:94:38:1b:60:57:00:41:5c:
c2:f0:31:e7:e4:95:fb:47:5c:6e:60:16:99:eb:5e:
77:f0:08:bc:c6:d5:85:91:cd:43:18:d6:4a:9e:97:
93:11:d8:93:b2:be:25:4c:32:9f:99:2c:7a:fa:65:
f9:62:e5:38:e7:4c:5a:7a:a2:ce:ed:10:53:f4:9d:
88:34:01:33:48:10:69:6c:2b:53:13:d4:a3:d7:d6:
fc:3e:cf:82:aa:a5:f6:42:ae:f1:ab:95:ba:e4:db:
d3:5c:ac:29:30:f6:46:53:2c:72:02:da:65:5f:8e:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:98:58:F3:3E:FC:0F:F2:0D:19:47:DC:7C:70:09:41:B6:2F:30
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GA6YWPM-_A_yDRlH3HxwCUG2LzA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
34:41:51:bc:af:9c:91:55:75:89:17:6a:09:61:60:23:64:bc:
df:d6:7c:76:68:36:16:75:85:15:b8:d7:e3:1d:51:11:86:5f:
c5:89:21:8c:e5:c8:0b:28:60:6f:64:90:80:d6:18:1d:3a:ab:
a4:e5:2d:bd:b1:d4:e2:4d:1d:fc:c2:ce:7b:a0:be:3b:6c:16:
7c:f8:20:24:13:bc:9a:b2:a8:4a:97:08:24:b7:79:5d:15:e7:
38:0d:f7:5b:43:47:ba:73:5a:df:f7:49:2d:61:dd:ec:ef:15:
d3:cd:e7:04:55:6c:f8:05:e5:de:b6:e5:d9:ad:bd:f6:54:36:
44:e2:f2:83:8c:f9:2a:c2:1c:e6:a8:9f:99:d2:fd:d3:e2:c1:
38:5c:32:3d:04:4c:b9:46:7b:f8:c9:65:27:fe:3f:27:29:10:
04:b4:cf:22:7e:43:50:1a:04:5e:56:f5:8b:16:f0:9d:0d:9e:
52:8f:cd:62:2d:46:11:38:dc:c7:ba:16:dc:c0:92:6d:49:82:
aa:e1:72:fe:18:e7:6c:66:31:f8:a1:41:97:7c:2e:e2:04:28:
b4:b9:89:d6:4a:69:70:ad:5e:bc:0e:3e:8b:fe:a1:2f:5a:fc:
6e:06:47:82:60:b5:a1:15:1f:c6:ff:53:7d:f4:b8:53:91:1e:
ea:6e:ea:34
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAx
MTIyMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE4MEU5ODU4RjMzRUZD
MEZGMjBEMTk0N0RDN0M3MDA5NDFCNjJGMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCqt3GTPoSmrUmkD9g1vlDe0DjaU3tTfyGQXNfeZzeeYq5eKR4
kl/jniAzzwz4Yyu5+APAsyXoJp2faMex+RWVrh+tfwWPxgvEA1szSObChtuPtZjt
e5VsCuqsqJSoptApiTQ0x/VhYKxECHbp4XObVEEqZMD2nWDERFeIuAe0GFr+rQvi
stg0PHYtlMKUOBtgVwBBXMLwMefklftHXG5gFpnrXnfwCLzG1YWRzUMY1kqel5MR
2JOyviVMMp+ZLHr6Zfli5TjnTFp6os7tEFP0nYg0ATNIEGlsK1MT1KPX1vw+z4Kq
pfZCrvGrlbrk29NcrCkw9kZTLHIC2mVfjhhTAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUGA6YWPM+/A/yDRlH3HxwCUG2LzAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dBNllXUE0tX0FfeURS
bEgzSHh3Q1VHMkx6QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADRBUbyvnJFVdYkXaglhYCNkvN/WfHZo
NhZ1hRW41+MdURGGX8WJIYzlyAsoYG9kkIDWGB06q6TlLb2x1OJNHfzCznugvjts
Fnz4ICQTvJqyqEqXCCS3eV0V5zgN91tDR7pzWt/3SS1h3ezvFdPN5wRVbPgF5d62
5dmtvfZUNkTi8oOM+SrCHOaon5nS/dPiwThcMj0ETLlGe/jJZSf+PycpEAS0zyJ+
Q1AaBF5W9YsW8J0NnlKPzWItRhE43Me6FtzAkm1Jgqrhcv4Y52xmMfihQZd8LuIE
KLS5idZKaXCtXrwOPov+oS9a/G4GR4JgtaEVH8b/U330uFORHupu6jQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:24 2025 by rpki-client