Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/L-YtTcdK77GFOLvsghG9tArZzFI.roa
File: L-YtTcdK77GFOLvsghG9tArZzFI.roa (raw, json)
Hash identifier: Gf+NKgGvSdD4HB8Cu+UlfxXiwHd2EICXF5IKb6bYM0I=
Subject key identifier: 2F:E6:2D:4D:C7:4A:EF:B1:85:38:BB:EC:82:11:BD:B4:0A:D9:CC:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4503
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L-YtTcdK77GFOLvsghG9tArZzFI.roa
Signing time: Sat 20 Apr 2024 14:23:27 +0000
ROA not before: Sat 20 Apr 2024 14:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17667 (0x4503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 14:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2FE62D4DC74AEFB18538BBEC8211BDB40AD9CC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:47:5c:2a:ef:58:b2:59:01:68:96:0f:e1:
5a:84:60:d4:61:3f:12:0b:a9:0e:cf:28:78:d4:29:
bd:62:df:3b:9d:82:32:c3:71:88:87:1e:1f:a8:bf:
f0:fc:b5:cd:f5:0e:7c:a6:fb:98:4d:90:7e:64:8d:
4a:8b:0d:71:72:ca:c1:95:2d:00:9b:06:c4:6e:33:
82:cb:29:a4:d4:ca:f5:74:16:67:85:a6:bb:f8:f0:
b6:53:84:ff:0a:3f:0e:d5:31:2c:81:70:84:13:c6:
7e:0d:da:ee:e4:e7:19:f6:38:ff:5f:e7:d1:d7:43:
98:81:86:be:e3:60:82:15:22:0c:2a:50:9e:57:08:
b6:12:22:f6:c8:33:a1:98:49:d8:b3:63:56:e5:ee:
11:d4:0f:e5:25:f0:19:f9:f6:30:9f:24:13:d2:89:
00:7a:24:25:78:42:8c:f6:d9:b5:bf:88:68:f9:8a:
18:78:16:c1:24:1b:81:66:2c:73:59:5b:50:de:86:
2e:0a:9c:f8:3e:b7:06:ae:1d:b3:61:18:aa:11:54:
d5:63:ef:4c:dd:89:68:2b:85:5f:dd:57:39:a9:22:
a2:ea:7c:8f:52:3d:b4:4a:0e:44:f4:19:cc:ed:cd:
d0:da:3e:e1:78:d7:f0:a8:0e:6c:f6:82:43:ef:ca:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:2D:4D:C7:4A:EF:B1:85:38:BB:EC:82:11:BD:B4:0A:D9:CC:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L-YtTcdK77GFOLvsghG9tArZzFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:56:ae:72:72:4d:3c:66:a7:89:23:44:02:a7:58:4d:86:9f:
87:3d:38:65:4b:3c:1b:b0:f8:17:53:67:78:dc:18:a3:7b:2c:
05:d3:5b:20:a9:df:fe:b5:09:4e:26:d7:62:24:dd:b1:5f:01:
94:b6:40:75:98:22:0f:ae:a4:88:4f:8e:09:0d:6e:8a:ed:da:
e7:cd:ef:d7:43:b4:07:13:1a:24:97:45:26:21:68:63:b4:ba:
8a:11:a5:3f:95:05:19:21:d4:a5:66:04:8b:00:c6:41:42:31:
11:1a:bd:bb:64:45:f0:ab:46:49:3e:98:97:71:03:ce:0b:c4:
42:26:6e:22:ad:d1:28:01:00:71:56:d3:32:a9:62:b8:eb:b9:
3b:41:38:11:97:19:70:5a:16:b0:af:23:11:75:e5:d1:19:51:
ac:7c:20:3b:1c:27:03:9b:57:69:e5:a6:47:76:60:45:f4:bc:
3b:dc:3d:e4:0e:76:33:1a:b2:c0:1f:fb:e3:f3:a6:ef:82:ec:
e1:02:4b:a5:ba:a2:92:3b:23:6e:0d:89:71:5d:54:b1:ea:e5:
b1:72:f0:4d:a4:ad:ad:6e:d4:62:95:e7:43:d4:3c:50:aa:5f:
45:94:17:41:8c:c2:f2:40:2c:ed:ff:28:60:46:a7:3b:35:ee:
4e:ca:e6:c2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
NDIzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJGRTYyRDREQzc0QUVG
QjE4NTM4QkJFQzgyMTFCREI0MEFEOUNDNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOxUdcKu9YslkBaJYP4VqEYNRhPxILqQ7PKHjUKb1i3zudgjLD
cYiHHh+ov/D8tc31Dnym+5hNkH5kjUqLDXFyysGVLQCbBsRuM4LLKaTUyvV0FmeF
prv48LZThP8KPw7VMSyBcIQTxn4N2u7k5xn2OP9f59HXQ5iBhr7jYIIVIgwqUJ5X
CLYSIvbIM6GYSdizY1bl7hHUD+Ul8Bn59jCfJBPSiQB6JCV4Qoz22bW/iGj5ihh4
FsEkG4FmLHNZW1Dehi4KnPg+twauHbNhGKoRVNVj70zdiWgrhV/dVzmpIqLqfI9S
PbRKDkT0GcztzdDaPuF41/CoDmz2gkPvyoyFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUL+YtTcdK77GFOLvsghG9tArZzFIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0wtWXRUY2RLNzdHRk9M
dnNnaEc5dEFyWnpGSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFRWrnJyTTxmp4kjRAKnWE2Gn4c9OGVL
PBuw+BdTZ3jcGKN7LAXTWyCp3/61CU4m12Ik3bFfAZS2QHWYIg+upIhPjgkNbort
2ufN79dDtAcTGiSXRSYhaGO0uooRpT+VBRkh1KVmBIsAxkFCMREavbtkRfCrRkk+
mJdxA84LxEImbiKt0SgBAHFW0zKpYrjruTtBOBGXGXBaFrCvIxF15dEZUax8IDsc
JwObV2nlpkd2YEX0vDvcPeQOdjMassAf++Pzpu+C7OECS6W6opI7I24NiXFdVLHq
5bFy8E2kra1u1GKV50PUPFCqX0WUF0GMwvJALO3/KGBGpzs17k7K5sI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org