Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Gul03-oj36KmCmPiR0WFYBkVrWI.roa
File: Gul03-oj36KmCmPiR0WFYBkVrWI.roa (raw, json)
Hash identifier: rfdkawEz+oH/MCe5QhmAe0s5jJrlzDyXpf0n7BW+rEA=
Subject key identifier: 1A:E9:74:DF:EA:23:DF:A2:A6:0A:63:E2:47:45:85:60:19:15:AD:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3567
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Gul03-oj36KmCmPiR0WFYBkVrWI.roa
Signing time: Sat 30 Mar 2024 18:52:08 +0000
ROA not before: Sat 30 Mar 2024 18:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13671 (0x3567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 18:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1AE974DFEA23DFA2A60A63E2474585601915AD62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:a2:c9:66:80:a1:a6:d8:e3:e4:a4:7e:0b:
06:1e:ef:79:eb:5a:5b:ea:8c:ad:25:bf:61:04:67:
05:92:f8:bb:60:2d:02:5a:1f:a8:64:65:bc:fd:be:
a8:1c:73:e2:0d:e0:5c:4f:35:de:d2:cb:0a:c0:2a:
b8:3c:08:ab:19:d2:68:76:6c:0d:5d:9e:8a:50:8c:
8a:96:73:34:6f:f5:78:d5:0a:61:21:ca:0b:5e:26:
44:0b:6f:49:5c:34:e5:42:5e:48:32:9b:72:02:88:
ae:27:30:42:6f:36:f5:79:c5:9d:f6:c9:40:2e:31:
74:95:f7:8d:a9:0b:c4:16:6c:d7:c8:87:3a:12:d2:
fc:a8:a8:c2:6b:10:ea:6a:ea:23:6c:64:7f:3b:19:
58:d1:9c:fb:9e:9d:c9:1a:5f:59:ad:05:c6:5f:4e:
9a:9c:59:e9:59:e3:a1:81:10:fc:f0:ef:0e:d6:11:
e2:7a:12:96:9d:43:79:22:4c:b9:2f:20:fb:8b:09:
6b:97:23:5d:74:f8:5a:43:b0:be:4e:d3:ed:8e:fa:
55:bb:da:c4:2a:cd:09:b1:84:98:ae:70:ea:f3:a2:
9f:0e:95:40:fa:e1:2b:fe:91:6a:fb:ab:6b:ae:c2:
76:52:fb:c2:df:de:94:1a:01:2f:1c:e8:e8:89:96:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:74:DF:EA:23:DF:A2:A6:0A:63:E2:47:45:85:60:19:15:AD:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Gul03-oj36KmCmPiR0WFYBkVrWI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:59:46:45:c5:ce:c0:5a:a2:9d:c7:82:18:38:7a:b4:11:4f:
47:a0:28:2d:62:cc:60:d5:12:59:67:99:f3:40:fe:d5:ca:8e:
52:fd:f2:35:ca:c7:9d:53:f5:13:4b:ba:a4:7c:50:c6:ea:c4:
70:81:1c:d1:0b:43:df:08:44:01:06:4b:07:e5:54:5e:ee:14:
f5:b1:02:5e:5f:99:1c:34:79:b6:78:ee:41:fb:e0:47:f9:ff:
db:cc:e0:b9:32:44:3f:a0:b9:2a:49:3e:33:41:24:62:4c:f3:
4c:38:08:21:44:09:05:a6:e5:e4:5b:e7:a7:d4:e8:b2:bd:7b:
3f:1e:e8:7a:52:87:1c:c3:55:47:5f:db:5f:61:0d:85:10:01:
ce:37:bc:5e:2e:f5:67:00:c0:f4:5d:0a:18:a0:f1:ad:ea:57:
58:b6:fd:8d:ce:50:29:27:3e:aa:cb:1c:45:d8:aa:0a:74:13:
2a:3e:4e:60:f3:cf:cf:97:9a:04:10:d3:23:7a:77:52:89:5e:
04:ea:fb:06:5b:84:61:6e:de:82:aa:40:00:9f:6f:8f:ed:c6:
d3:d8:35:3d:d6:aa:df:59:b6:28:b7:d0:d0:26:29:08:af:d2:
93:d0:91:e0:80:6b:88:6f:d3:37:d7:95:53:96:15:80:c7:fb:
c5:c9:13:04
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAx
ODUyMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFBRTk3NERGRUEyM0RG
QTJBNjBBNjNFMjQ3NDU4NTYwMTkxNUFENjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS9qLJZoChptjj5KR+CwYe73nrWlvqjK0lv2EEZwWS+LtgLQJa
H6hkZbz9vqgcc+IN4FxPNd7SywrAKrg8CKsZ0mh2bA1dnopQjIqWczRv9XjVCmEh
ygteJkQLb0lcNOVCXkgym3ICiK4nMEJvNvV5xZ32yUAuMXSV942pC8QWbNfIhzoS
0vyoqMJrEOpq6iNsZH87GVjRnPuenckaX1mtBcZfTpqcWelZ46GBEPzw7w7WEeJ6
EpadQ3kiTLkvIPuLCWuXI110+FpDsL5O0+2O+lW72sQqzQmxhJiucOrzop8OlUD6
4Sv+kWr7q2uuwnZS+8Lf3pQaAS8c6OiJliO1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUGul03+oj36KmCmPiR0WFYBkVrWIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0d1bDAzLW9qMzZLbUNt
UGlSMFdGWUJrVnJXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAA1ZRkXFzsBaop3Hghg4erQRT0egKC1i
zGDVEllnmfNA/tXKjlL98jXKx51T9RNLuqR8UMbqxHCBHNELQ98IRAEGSwflVF7u
FPWxAl5fmRw0ebZ47kH74Ef5/9vM4LkyRD+guSpJPjNBJGJM80w4CCFECQWm5eRb
56fU6LK9ez8e6HpShxzDVUdf219hDYUQAc43vF4u9WcAwPRdChig8a3qV1i2/Y3O
UCknPqrLHEXYqgp0Eyo+TmDzz8+XmgQQ0yN6d1KJXgTq+wZbhGFu3oKqQACfb4/t
xtPYNT3Wqt9Ztii30NAmKQiv0pPQkeCAa4hv0zfXlVOWFYDH+8XJEwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:28 2024 by rpki-client on console-ams.rpki-client.org