Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IBGnAzVl2tCctnTxRtuHt5b2xF4.roa
File: IBGnAzVl2tCctnTxRtuHt5b2xF4.roa (raw, json)
Hash identifier: 8GP+aDq0hxtN4XFURj3RB60+xFzZngv+gPjQjfulsa8=
Subject key identifier: 20:11:A7:03:35:65:DA:D0:9C:B6:74:F1:46:DB:87:B7:96:F6:C4:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 344F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IBGnAzVl2tCctnTxRtuHt5b2xF4.roa
Signing time: Fri 29 Mar 2024 07:52:05 +0000
ROA not before: Fri 29 Mar 2024 07:52:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 07:52:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2011A7033565DAD09CB674F146DB87B796F6C45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:ce:f7:39:7a:83:dd:ad:a0:7e:4b:53:dd:
f6:fa:a8:7d:c9:b2:74:16:59:16:2f:e9:df:f5:15:
2b:79:87:bc:c5:13:71:fa:ec:de:ad:98:28:27:c5:
b8:e7:48:a4:31:e3:c9:10:10:24:65:d5:1a:09:d7:
07:77:80:dc:00:01:8a:48:d5:82:f0:4c:7d:09:c8:
5f:10:f5:20:3c:e2:44:5f:81:4a:2a:c1:0a:25:e6:
d1:54:bf:6e:d7:94:11:e3:2b:67:eb:8d:72:95:da:
b6:60:d8:3f:d4:ac:b7:81:b6:2d:0a:93:14:6f:35:
9c:6d:68:d0:44:65:88:9b:83:68:8f:f3:33:4b:d8:
de:cd:aa:94:86:8f:fc:ea:c2:bf:24:c1:9e:34:e6:
e7:ac:66:9e:96:55:9c:c9:65:d5:30:b2:9c:60:88:
d3:92:e5:8d:3b:0b:59:05:f7:88:1c:ab:e0:21:52:
69:b2:74:18:b7:07:4f:b5:42:9d:39:f4:f9:e4:ec:
ab:d1:31:53:cb:0e:b3:17:c7:13:35:d5:f4:16:e6:
69:a8:ec:16:86:24:bb:65:fd:8f:7e:75:f5:15:d9:
87:3b:06:41:5f:89:08:4e:c8:87:e3:91:60:88:73:
0a:41:72:e8:bb:87:60:2b:d7:97:ab:dc:05:d5:ee:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:A7:03:35:65:DA:D0:9C:B6:74:F1:46:DB:87:B7:96:F6:C4:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IBGnAzVl2tCctnTxRtuHt5b2xF4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:68:9f:25:ae:78:9d:f3:40:bb:ed:8a:09:ad:14:e7:f1:92:
99:64:9f:9c:ea:10:00:90:96:ed:f7:81:d6:bc:8a:9a:b4:b6:
79:d9:7d:45:9f:45:5f:5f:f4:c7:36:42:06:9e:a3:78:84:f2:
4a:90:8a:c0:7f:b0:8d:94:f8:39:a7:3f:85:91:91:7b:32:4c:
20:87:81:0b:ca:a4:62:d7:27:57:09:d2:e7:50:b6:94:fb:5f:
a9:bf:4b:01:97:ae:90:3f:6d:81:86:1d:f8:f1:44:d2:aa:47:
4b:15:50:61:12:33:b8:15:76:48:71:9e:17:cd:80:c5:e2:9f:
4d:ad:2f:bb:b7:c8:8d:05:80:dc:3f:c9:e9:0c:2a:a0:f8:6a:
06:9b:0d:0f:97:ea:10:96:fe:e5:d2:1b:22:75:21:ac:b7:9c:
7a:3f:2e:09:27:a3:68:6f:ee:50:05:af:53:b4:01:98:a6:f1:
4f:48:a7:f1:9b:10:a1:54:ce:8d:3f:a9:7f:6c:b1:ec:12:21:
97:42:a3:63:39:43:65:ee:17:d1:ca:81:8f:d8:8b:1b:51:7a:
16:ca:cd:84:dd:41:9a:68:12:5f:ce:b8:e5:5c:28:03:8a:72:
5c:b4:d6:2a:32:10:59:07:6e:ed:53:4e:3e:ea:29:57:f8:84:
d0:f7:2b:db
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjkw
NzUyMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIwMTFBNzAzMzU2NURB
RDA5Q0I2NzRGMTQ2REI4N0I3OTZGNkM0NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuaM73OXqD3a2gfktT3fb6qH3JsnQWWRYv6d/1FSt5h7zFE3H6
7N6tmCgnxbjnSKQx48kQECRl1RoJ1wd3gNwAAYpI1YLwTH0JyF8Q9SA84kRfgUoq
wQol5tFUv27XlBHjK2frjXKV2rZg2D/UrLeBti0KkxRvNZxtaNBEZYibg2iP8zNL
2N7NqpSGj/zqwr8kwZ405uesZp6WVZzJZdUwspxgiNOS5Y07C1kF94gcq+AhUmmy
dBi3B0+1Qp059Pnk7KvRMVPLDrMXxxM11fQW5mmo7BaGJLtl/Y9+dfUV2Yc7BkFf
iQhOyIfjkWCIcwpBcui7h2Ar15er3AXV7vJdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUIBGnAzVl2tCctnTxRtuHt5b2xF4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0lCR25BelZsMnRDY3Ru
VHhSdHVIdDViMnhGNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALBonyWueJ3zQLvtigmtFOfxkplkn5zq
EACQlu33gda8ipq0tnnZfUWfRV9f9Mc2Qgaeo3iE8kqQisB/sI2U+DmnP4WRkXsy
TCCHgQvKpGLXJ1cJ0udQtpT7X6m/SwGXrpA/bYGGHfjxRNKqR0sVUGESM7gVdkhx
nhfNgMXin02tL7u3yI0FgNw/yekMKqD4agabDQ+X6hCW/uXSGyJ1Iay3nHo/Lgkn
o2hv7lAFr1O0AZim8U9Ip/GbEKFUzo0/qX9ssewSIZdCo2M5Q2XuF9HKgY/YixtR
ehbKzYTdQZpoEl/OuOVcKAOKcly01ioyEFkHbu1TTj7qKVf4hND3K9s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:29 2024 by rpki-client on console-ams.rpki-client.org