Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GVlfbftyQ7L9LnqeQwfe01fMdj0.roa
File: GVlfbftyQ7L9LnqeQwfe01fMdj0.roa (raw, json)
Hash identifier: ae//gh2UCgQGVNygIb/a0oq5jTd0SHC8CqV0E0ZvvHs=
Subject key identifier: 19:59:5F:6D:FB:72:43:B2:FD:2E:7A:9E:43:07:DE:D3:57:CC:76:3D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3517
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GVlfbftyQ7L9LnqeQwfe01fMdj0.roa
Signing time: Sat 30 Mar 2024 08:52:08 +0000
ROA not before: Sat 30 Mar 2024 08:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 08:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=19595F6DFB7243B2FD2E7A9E4307DED357CC763D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:61:ec:a6:68:bf:25:81:4e:12:a1:45:ce:
19:1a:f9:db:82:16:d9:85:bd:da:31:9a:28:61:e2:
7f:bf:c5:5a:52:bb:ca:02:9d:43:20:bb:0e:10:33:
ce:33:6c:b2:a8:8e:ff:f0:b8:48:45:96:81:28:d0:
96:b0:d6:d9:17:56:83:b8:78:a6:c4:28:55:3e:f6:
57:1f:62:f7:e8:9a:f9:06:91:d2:f6:59:12:42:3e:
88:e9:92:c9:fb:15:eb:23:0b:59:da:ed:11:bf:7b:
fc:fd:ab:ca:4b:c5:e2:2e:46:34:61:2d:94:23:37:
c0:d6:a6:9a:52:0a:a4:c8:49:77:8a:04:08:44:50:
16:ad:5e:f0:c2:ef:27:50:50:f6:a1:dd:80:95:2c:
f4:3b:30:11:aa:ba:83:19:4b:86:b0:e6:ec:28:cd:
52:7c:6d:b3:b9:35:b6:7e:cb:2a:e8:2d:e5:bb:14:
35:2d:a2:37:1b:ae:2e:00:2c:e8:d4:46:8b:b5:18:
2b:45:d7:1c:cf:02:79:ca:1a:36:f4:e5:e0:d0:5c:
1f:09:c5:6f:53:08:aa:12:57:ce:88:1e:e3:9d:09:
2f:07:d7:a5:bf:04:65:01:0f:8b:af:03:b7:eb:23:
55:de:d3:53:c0:93:be:1a:7b:17:63:da:1f:59:ad:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:5F:6D:FB:72:43:B2:FD:2E:7A:9E:43:07:DE:D3:57:CC:76:3D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GVlfbftyQ7L9LnqeQwfe01fMdj0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:40:15:aa:12:1d:06:72:8e:91:be:51:3f:73:eb:d2:24:87:
01:7f:92:6a:04:94:c7:7f:d7:7c:92:34:af:48:b9:b1:0a:9c:
dc:e2:cc:4d:5e:49:e4:d0:61:43:42:71:24:4b:6e:c1:68:fe:
26:05:fc:3f:49:b5:86:6c:49:e5:a2:f8:d2:a3:8d:27:8f:b8:
cc:aa:89:f7:17:42:07:54:ae:27:bd:cb:c4:7a:7f:d9:b5:4b:
b0:3d:54:a1:6f:78:f0:c7:5e:4f:b3:c1:68:4a:3a:87:a6:4e:
40:e8:ab:0f:0b:f1:23:bb:8d:af:7e:64:9b:13:65:0b:37:09:
06:3c:e1:da:4d:1b:21:9f:7e:a6:b1:cc:ea:34:be:1d:e8:95:
9e:5a:20:98:a9:90:c2:57:ef:65:6a:4f:11:e3:8e:75:0d:13:
9c:c3:f6:95:eb:67:9a:d0:e8:64:36:70:0a:4c:06:d3:65:b9:
42:35:62:71:5f:a7:e9:8e:3b:2e:af:cc:08:26:4a:4d:1e:92:
c1:7f:73:6e:b7:41:d3:f9:15:1a:76:4f:c7:81:b9:5c:94:98:
1c:ba:d6:ee:8d:fe:af:01:09:a5:9f:2b:13:f0:03:0a:4a:40:
fa:65:91:de:12:67:a0:08:3f:23:b8:ed:f1:f5:e4:01:3e:d4:
7f:e5:2b:2a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
ODUyMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE5NTk1RjZERkI3MjQz
QjJGRDJFN0E5RTQzMDdERUQzNTdDQzc2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ42Hspmi/JYFOEqFFzhka+duCFtmFvdoxmihh4n+/xVpSu8oC
nUMguw4QM84zbLKojv/wuEhFloEo0Jaw1tkXVoO4eKbEKFU+9lcfYvfomvkGkdL2
WRJCPojpksn7FesjC1na7RG/e/z9q8pLxeIuRjRhLZQjN8DWpppSCqTISXeKBAhE
UBatXvDC7ydQUPah3YCVLPQ7MBGquoMZS4aw5uwozVJ8bbO5NbZ+yyroLeW7FDUt
ojcbri4ALOjURou1GCtF1xzPAnnKGjb05eDQXB8JxW9TCKoSV86IHuOdCS8H16W/
BGUBD4uvA7frI1Xe01PAk74aexdj2h9Zren1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUGVlfbftyQ7L9LnqeQwfe01fMdj0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0dWbGZiZnR5UTdMOUxu
cWVRd2ZlMDFmTWRqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJNAFaoSHQZyjpG+UT9z69IkhwF/kmoE
lMd/13ySNK9IubEKnNzizE1eSeTQYUNCcSRLbsFo/iYF/D9JtYZsSeWi+NKjjSeP
uMyqifcXQgdUrie9y8R6f9m1S7A9VKFvePDHXk+zwWhKOoemTkDoqw8L8SO7ja9+
ZJsTZQs3CQY84dpNGyGffqaxzOo0vh3olZ5aIJipkMJX72VqTxHjjnUNE5zD9pXr
Z5rQ6GQ2cApMBtNluUI1YnFfp+mOOy6vzAgmSk0eksF/c263QdP5FRp2T8eBuVyU
mBy61u6N/q8BCaWfKxPwAwpKQPplkd4SZ6AIPyO47fH15AE+1H/lKyo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org