Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GHKeZr6rKrGeS_G_9Y_kA-AhATM.roa
File: GHKeZr6rKrGeS_G_9Y_kA-AhATM.roa (raw, json)
Hash identifier: PmkSf5eYZ5J8Svj46VrtmESkVI49Zw0cD/vsHy/xqGY=
Subject key identifier: 18:72:9E:66:BE:AB:2A:B1:9E:4B:F1:BF:F5:8F:E4:03:E0:21:01:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43C3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GHKeZr6rKrGeS_G_9Y_kA-AhATM.roa
Signing time: Thu 18 Apr 2024 22:22:59 +0000
ROA not before: Thu 18 Apr 2024 22:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17347 (0x43c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 22:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=18729E66BEAB2AB19E4BF1BFF58FE403E0210133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:9d:a8:ec:72:d9:17:bf:60:5e:3d:1e:de:
47:ab:d7:a3:1e:05:a0:21:35:bb:c6:5e:48:de:fa:
0b:2f:ee:7d:97:88:46:c4:30:36:5e:3c:c3:18:12:
fb:c0:f9:9a:d1:18:4f:91:1d:3a:cd:35:ac:85:ec:
31:63:ee:4c:51:71:9a:50:29:c8:e6:b0:36:c5:e2:
11:65:b2:2f:d3:d4:dd:c6:62:bf:9b:b7:ee:b8:3b:
95:f2:56:9a:ce:72:87:da:d5:3e:0c:c6:cb:1c:14:
68:d0:cf:ee:f1:62:1d:4d:c0:0e:6e:ee:ed:49:c7:
f8:5a:78:07:64:b2:d5:73:9b:3d:c6:93:c6:b3:4c:
cd:98:1f:2a:aa:77:72:4b:4a:f0:e4:c4:23:97:18:
94:d0:9e:fa:92:40:91:3e:af:7a:17:c1:45:e3:bb:
be:a4:c6:03:44:5f:25:35:ac:3c:7d:8b:08:59:55:
54:63:9e:de:e2:b7:30:23:14:6c:08:7c:24:53:ed:
fb:a8:f5:df:f0:7c:75:14:f8:66:91:5f:a2:b0:c6:
4c:23:98:40:e9:de:1f:27:f0:63:be:c8:ec:b9:4c:
e0:3e:93:8b:8a:eb:ca:47:66:74:ba:07:1b:e4:63:
14:ed:80:0f:75:3a:3d:52:ef:72:20:6e:0c:dc:0f:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:9E:66:BE:AB:2A:B1:9E:4B:F1:BF:F5:8F:E4:03:E0:21:01:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GHKeZr6rKrGeS_G_9Y_kA-AhATM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
97:48:cd:7b:15:1b:eb:28:5c:df:ea:ff:c5:a2:d1:38:4c:16:
bd:09:46:c4:9b:59:82:35:6b:54:5d:40:95:9c:05:b5:0f:0e:
50:d1:ea:dd:40:1e:29:bc:f5:2f:e1:9d:c8:e8:95:2a:5b:a5:
71:98:be:63:6c:78:4b:5d:28:31:c0:c3:3d:3c:16:99:80:d0:
08:6a:09:05:f6:ea:ba:59:68:f9:9e:92:9c:6c:96:55:fe:e2:
33:cc:f0:4c:49:ff:f7:27:84:be:6f:7e:95:9c:dd:51:5f:85:
73:78:d6:75:d6:95:6c:a3:6e:d9:fc:e1:49:61:d9:6e:c6:16:
b4:ac:af:f7:39:49:0c:ff:52:f3:77:e2:d9:74:84:66:40:b9:
a3:51:b0:b5:50:40:d3:89:b2:b5:c5:13:e0:07:6c:94:40:2e:
3f:a8:c2:8c:79:79:5f:12:ca:9e:46:64:b5:93:7b:bc:da:81:
31:3e:0a:05:61:a9:92:83:62:b3:fa:eb:eb:9d:7a:c0:16:f5:
1d:66:04:e4:71:c4:fd:80:37:42:4a:49:aa:0f:0e:99:2d:5d:
be:cb:ee:c1:37:84:4e:3e:8c:b2:50:ce:2e:b8:bc:80:dd:e3:
9c:7a:a8:98:9e:34:38:50:13:59:0a:08:6b:c0:4c:f6:e5:1c:
0a:55:2b:d5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQ8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgy
MjIyNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE4NzI5RTY2QkVBQjJB
QjE5RTRCRjFCRkY1OEZFNDAzRTAyMTAxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOX52o7HLZF79gXj0e3ker16MeBaAhNbvGXkje+gsv7n2XiEbE
MDZePMMYEvvA+ZrRGE+RHTrNNayF7DFj7kxRcZpQKcjmsDbF4hFlsi/T1N3GYr+b
t+64O5XyVprOcofa1T4MxsscFGjQz+7xYh1NwA5u7u1Jx/haeAdkstVzmz3Gk8az
TM2YHyqqd3JLSvDkxCOXGJTQnvqSQJE+r3oXwUXju76kxgNEXyU1rDx9iwhZVVRj
nt7itzAjFGwIfCRT7fuo9d/wfHUU+GaRX6KwxkwjmEDp3h8n8GO+yOy5TOA+k4uK
68pHZnS6BxvkYxTtgA91Oj1S73IgbgzcD0xZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUGHKeZr6rKrGeS/G/9Y/kA+AhATMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dIS2VacjZyS3JHZVNf
R185WV9rQS1BaEFUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJdIzXsVG+soXN/q/8Wi0ThMFr0JRsSb
WYI1a1RdQJWcBbUPDlDR6t1AHim89S/hncjolSpbpXGYvmNseEtdKDHAwz08FpmA
0AhqCQX26rpZaPmekpxsllX+4jPM8ExJ//cnhL5vfpWc3VFfhXN41nXWlWyjbtn8
4Ulh2W7GFrSsr/c5SQz/UvN34tl0hGZAuaNRsLVQQNOJsrXFE+AHbJRALj+owox5
eV8Syp5GZLWTe7zagTE+CgVhqZKDYrP66+udesAW9R1mBORxxP2AN0JKSaoPDpkt
Xb7L7sE3hE4+jLJQzi64vIDd45x6qJieNDhQE1kKCGvATPblHApVK9U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org