Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GEdQjCTcowg1tFcPcZiqfQiHOog.roa
File: GEdQjCTcowg1tFcPcZiqfQiHOog.roa (raw, json)
Hash identifier: BSIhIzFeBHudtS9wZHmmCKjmLRmBTCwY2OTY5t/0zs4=
Subject key identifier: 18:47:50:8C:24:DC:A3:08:35:B4:57:0F:71:98:AA:7D:08:87:3A:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F6F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GEdQjCTcowg1tFcPcZiqfQiHOog.roa
Signing time: Sat 13 Apr 2024 03:52:53 +0000
ROA not before: Sat 13 Apr 2024 03:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16239 (0x3f6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 03:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1847508C24DCA30835B4570F7198AA7D08873A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:98:87:07:ff:37:fc:01:4d:5c:24:a4:3f:
2e:12:79:b5:9c:b1:5b:1a:60:93:82:66:0e:bc:86:
06:94:22:d8:d1:76:e0:70:a3:12:18:d5:e8:fa:08:
f4:28:d5:9a:37:00:cb:1a:91:de:2c:78:16:95:17:
1c:ad:18:51:52:27:72:b9:83:a1:d6:e5:17:27:29:
51:bd:39:6f:e9:77:7e:f4:7c:62:2d:c3:f7:dc:42:
ea:66:f5:8d:01:6b:e7:c5:b2:2e:54:cf:84:10:fd:
14:21:1b:35:70:a2:89:11:f7:de:15:99:f6:e1:ce:
38:3f:38:49:10:61:ae:6d:a3:55:9b:2e:af:90:fe:
62:dc:fd:7c:e1:d3:c1:3a:05:47:f9:a7:23:36:c3:
0e:38:91:39:85:e3:a4:00:4f:8e:64:5f:6c:b4:4f:
84:82:27:04:6f:a5:35:bf:82:7b:c6:89:8a:01:4e:
7c:fa:47:cf:38:7f:e6:d3:f3:ba:f9:d7:17:73:43:
87:6b:ec:3b:2b:8d:ec:74:d3:4a:99:3b:c7:5d:50:
fb:17:23:80:a4:c1:39:99:5f:52:fc:eb:ec:c5:cd:
85:13:00:92:47:ed:e4:8d:c2:78:70:61:e0:68:03:
88:9f:e2:2d:a6:7b:f0:c0:fe:c1:6a:62:87:70:85:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:50:8C:24:DC:A3:08:35:B4:57:0F:71:98:AA:7D:08:87:3A:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GEdQjCTcowg1tFcPcZiqfQiHOog.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:a8:9b:14:b2:82:b5:df:be:f7:a3:ad:fa:d0:a8:d1:61:e6:
bb:ab:57:3e:a8:ec:13:b3:52:2a:8c:ef:8d:56:e7:3d:39:9a:
17:7d:4d:17:8d:99:0e:c0:a8:9f:3d:24:a6:3b:93:38:a4:3e:
14:9b:b6:71:3b:c0:70:c9:36:46:76:86:a7:f0:82:b2:a0:11:
16:98:be:85:33:cd:d0:bb:85:df:ed:1e:a5:ff:cb:72:d8:34:
e2:54:6a:50:01:c0:74:81:4a:e5:6e:7c:24:5e:a4:15:b4:4d:
27:81:8c:fb:47:1f:c8:a7:fa:0f:18:ac:f9:c1:4f:d6:25:41:
bb:c6:3e:a7:7d:6c:1a:32:59:af:c3:7a:b9:ef:22:04:6f:c2:
e4:d6:e0:8a:b2:27:ec:c0:3c:7d:a7:f1:20:fb:9b:e1:d7:fa:
d5:6e:8d:1c:40:e7:cb:22:94:91:13:60:c9:f9:78:6b:db:83:
f7:0d:66:ee:a6:c2:e3:92:3b:52:02:ac:2e:80:83:16:95:e1:
6d:6e:b0:06:a7:a0:dc:62:6c:ca:30:fe:b7:cf:22:d8:ba:54:
c8:61:b8:8a:c1:d7:ee:9f:93:c1:bd:4a:63:e6:1b:54:a9:8d:
15:08:cf:1c:79:f4:47:4f:18:94:ea:b4:49:25:a4:b7:19:b9:
3e:cc:1c:6a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICP28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMw
MzUyNTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE4NDc1MDhDMjREQ0Ez
MDgzNUI0NTcwRjcxOThBQTdEMDg4NzNBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW4piHB/83/AFNXCSkPy4SebWcsVsaYJOCZg68hgaUItjRduBw
oxIY1ej6CPQo1Zo3AMsakd4seBaVFxytGFFSJ3K5g6HW5RcnKVG9OW/pd370fGIt
w/fcQupm9Y0Ba+fFsi5Uz4QQ/RQhGzVwookR994Vmfbhzjg/OEkQYa5to1WbLq+Q
/mLc/Xzh08E6BUf5pyM2ww44kTmF46QAT45kX2y0T4SCJwRvpTW/gnvGiYoBTnz6
R884f+bT87r51xdzQ4dr7Dsrjex000qZO8ddUPsXI4CkwTmZX1L86+zFzYUTAJJH
7eSNwnhwYeBoA4if4i2me/DA/sFqYodwhWepAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUGEdQjCTcowg1tFcPcZiqfQiHOogwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dFZFFqQ1Rjb3dnMXRG
Y1BjWmlxZlFpSE9vZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFyomxSygrXfvvejrfrQqNFh5rurVz6o
7BOzUiqM741W5z05mhd9TReNmQ7AqJ89JKY7kzikPhSbtnE7wHDJNkZ2hqfwgrKg
ERaYvoUzzdC7hd/tHqX/y3LYNOJUalABwHSBSuVufCRepBW0TSeBjPtHH8in+g8Y
rPnBT9YlQbvGPqd9bBoyWa/DernvIgRvwuTW4IqyJ+zAPH2n8SD7m+HX+tVujRxA
58silJETYMn5eGvbg/cNZu6mwuOSO1ICrC6AgxaV4W1usAanoNxibMow/rfPIti6
VMhhuIrB1+6fk8G9SmPmG1SpjRUIzxx59EdPGJTqtEklpLcZuT7MHGo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org