Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H4CFPZJLcwBlE0vbuWLs8Sy1uZ0.roa
File: H4CFPZJLcwBlE0vbuWLs8Sy1uZ0.roa (raw, json)
Hash identifier: AB1tHN/ezVN9wkMTBTvVia6u3UyVcKJ2laxdnv0uWO4=
Subject key identifier: 1F:80:85:3D:92:4B:73:00:65:13:4B:DB:B9:62:EC:F1:2C:B5:B9:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55BF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H4CFPZJLcwBlE0vbuWLs8Sy1uZ0.roa
Signing time: Sun 12 May 2024 21:54:12 +0000
ROA not before: Sun 12 May 2024 21:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21951 (0x55bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 21:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F80853D924B730065134BDBB962ECF12CB5B99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:9a:07:fe:7d:ae:bd:b9:9c:33:6d:70:5a:
33:8a:fd:e3:4d:d4:08:15:a2:7b:45:6c:2a:08:9c:
9c:f3:75:65:88:a4:20:f8:73:83:c6:39:0c:9f:fe:
97:51:a3:cb:cc:05:76:5a:1c:c1:51:42:59:7e:ce:
74:ce:b4:df:0f:fc:05:02:ac:3e:ac:71:70:e8:1b:
38:c0:3b:eb:96:62:5a:81:f5:74:8f:dc:32:c4:d3:
ee:1b:91:cd:10:ab:e7:15:1b:a5:54:98:49:b2:dc:
3e:43:dd:43:29:9b:11:f5:ab:00:13:f6:8b:ca:3c:
d1:8f:bd:57:ab:91:77:3c:95:bf:b2:00:5f:1f:45:
68:39:1c:85:f3:d8:e8:ec:a5:37:b8:52:f1:38:9b:
4c:0b:5c:3c:26:ae:2f:1b:27:26:3d:3a:3f:4f:a5:
2a:1b:cf:b2:84:90:06:b1:66:c4:3e:1e:72:b3:59:
bc:96:43:34:2e:38:8b:0e:8a:f5:83:ef:0a:fc:e3:
08:34:b8:1e:56:17:c9:5c:64:aa:93:a6:f5:b4:53:
ac:2c:85:27:90:92:6f:e1:a5:00:61:af:30:6d:e6:
1c:47:2c:b9:e3:31:22:d4:32:22:97:6d:7a:8d:b4:
c3:6a:d9:6d:0b:6b:23:26:a1:3c:81:cd:35:84:87:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:85:3D:92:4B:73:00:65:13:4B:DB:B9:62:EC:F1:2C:B5:B9:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H4CFPZJLcwBlE0vbuWLs8Sy1uZ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:8f:16:db:22:52:0d:2e:b1:df:6a:4d:20:6b:88:15:64:74:
b0:55:a3:7d:5b:c5:47:7b:d9:fd:43:d7:b3:a2:bb:77:a6:8e:
78:c0:6b:29:56:5a:9a:37:e7:c0:30:95:c2:06:d4:9d:a8:65:
bc:7d:3b:49:91:fa:39:63:ac:77:45:81:c2:20:f7:51:ec:47:
75:e0:f9:2c:ec:ac:b9:8f:7d:a5:0b:cf:92:6a:77:34:5b:8f:
f6:fa:b0:a1:45:eb:f2:e1:c4:1e:c1:a5:98:6a:44:f8:c5:0f:
dc:f1:6d:b4:57:59:6c:4c:f1:7c:9b:9e:2a:a4:d5:9f:1c:2e:
84:b1:7e:94:cd:a5:3b:7a:f1:5b:72:58:f6:3f:90:8f:30:75:
42:9c:82:43:02:75:81:fe:e5:32:1c:7e:a4:68:df:f0:f0:14:
e2:e2:6d:63:6c:3f:3a:d3:7a:88:0c:ed:b4:31:29:66:ce:05:
6d:ec:74:34:28:ce:61:fc:a2:bc:fc:bd:65:39:75:7b:d9:c4:
1d:6f:9d:4a:5e:9c:5c:98:0a:42:e4:fd:d9:06:1c:7d:51:6d:
c5:38:01:37:c7:9b:54:a1:d8:56:9d:9f:b1:4e:dd:76:af:0a:
91:b2:68:2b:99:29:03:45:21:f6:51:95:49:81:33:15:32:ed:
2b:36:f8:9c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTIy
MTU0MTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFGODA4NTNEOTI0Qjcz
MDA2NTEzNEJEQkI5NjJFQ0YxMkNCNUI5OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC72JoH/n2uvbmcM21wWjOK/eNN1AgVontFbCoInJzzdWWIpCD4
c4PGOQyf/pdRo8vMBXZaHMFRQll+znTOtN8P/AUCrD6scXDoGzjAO+uWYlqB9XSP
3DLE0+4bkc0Qq+cVG6VUmEmy3D5D3UMpmxH1qwAT9ovKPNGPvVerkXc8lb+yAF8f
RWg5HIXz2OjspTe4UvE4m0wLXDwmri8bJyY9Oj9PpSobz7KEkAaxZsQ+HnKzWbyW
QzQuOIsOivWD7wr84wg0uB5WF8lcZKqTpvW0U6wshSeQkm/hpQBhrzBt5hxHLLnj
MSLUMiKXbXqNtMNq2W0LayMmoTyBzTWEh75vAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUH4CFPZJLcwBlE0vbuWLs8Sy1uZ0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0g0Q0ZQWkpMY3dCbEUw
dmJ1V0xzOFN5MXVaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAF6PFtsiUg0usd9qTSBriBVkdLBVo31b
xUd72f1D17Oiu3emjnjAaylWWpo358AwlcIG1J2oZbx9O0mR+jljrHdFgcIg91Hs
R3Xg+SzsrLmPfaULz5JqdzRbj/b6sKFF6/LhxB7BpZhqRPjFD9zxbbRXWWxM8Xyb
niqk1Z8cLoSxfpTNpTt68VtyWPY/kI8wdUKcgkMCdYH+5TIcfqRo3/DwFOLibWNs
PzrTeogM7bQxKWbOBW3sdDQozmH8orz8vWU5dXvZxB1vnUpenFyYCkLk/dkGHH1R
bcU4ATfHm1Sh2Fadn7FO3XavCpGyaCuZKQNFIfZRlUmBMxUy7Ss2+Jw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:28 2024 by rpki-client on console-ams.rpki-client.org