Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LspiOi46WgnUNDMfptVTGtTIcOk.roa
File: LspiOi46WgnUNDMfptVTGtTIcOk.roa (raw, json)
Hash identifier: TO5weJZcOIfBrySSGvzwWsqZPoHW4LbB/0XHw+pnl2Y=
Subject key identifier: 2E:CA:62:3A:2E:3A:5A:09:D4:34:33:1F:A6:D5:53:1A:D4:C8:70:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 545F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LspiOi46WgnUNDMfptVTGtTIcOk.roa
Signing time: Sat 11 May 2024 01:54:08 +0000
ROA not before: Sat 11 May 2024 01:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21599 (0x545f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 01:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2ECA623A2E3A5A09D434331FA6D5531AD4C870E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:b3:43:b0:3b:a5:b8:55:ce:ad:25:b8:89:
6e:0b:ca:22:aa:1a:dd:4f:96:de:46:cd:52:f9:42:
25:c8:d1:e2:bb:60:cb:67:a7:08:82:dd:24:ad:af:
37:a4:3f:96:ba:bf:47:13:71:70:aa:85:2c:ed:82:
bf:d3:33:b5:4b:bc:2e:e2:d5:53:ec:a4:e5:cc:75:
6c:2b:d4:65:b7:9a:1b:14:6f:d5:ba:8c:0a:85:d2:
5e:1b:61:d5:ed:87:cf:f4:00:cc:cb:c8:a6:f1:58:
e7:90:75:48:21:6c:94:59:a7:c9:8f:75:b6:c0:9e:
64:a1:5e:61:ae:3c:8a:77:30:86:34:49:8b:72:6c:
be:83:bb:b4:3f:3e:2e:89:4e:68:3f:9c:88:df:0b:
e7:2c:94:2d:e6:e6:63:b8:c0:fe:2f:b1:d6:0d:2d:
43:9f:ce:6c:7d:1d:a7:9a:cf:15:26:85:d4:47:c1:
62:7c:ae:7f:d0:12:49:28:40:e8:6f:f8:47:5b:7e:
e0:b1:cf:2c:2d:a5:67:f1:9c:b2:31:4f:c8:33:5b:
ac:27:43:6b:28:58:11:5a:10:b2:a0:16:3c:aa:ad:
28:a9:06:de:37:a8:08:3d:12:0b:fa:1a:19:5f:8f:
b4:c6:a3:f9:7b:c8:bb:e6:61:6e:54:91:fb:1c:ce:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:62:3A:2E:3A:5A:09:D4:34:33:1F:A6:D5:53:1A:D4:C8:70:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LspiOi46WgnUNDMfptVTGtTIcOk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:d1:01:83:06:85:5d:49:5c:de:13:92:1d:5c:0a:85:e0:b8:
b6:d1:7d:9c:c3:57:4f:99:7b:92:bf:5b:bf:02:ba:65:67:17:
d9:98:62:9c:cc:6a:5e:2d:0e:ee:4a:e9:13:73:a7:77:f5:6e:
66:71:32:cf:9d:44:9a:80:6d:f9:bc:33:31:73:47:b4:56:4e:
c4:8a:ed:d7:51:c4:1a:28:fb:82:3f:13:57:a6:4b:21:61:83:
ca:a2:b6:59:73:7d:80:17:84:2b:7e:12:6d:94:ba:2f:87:ce:
05:d8:84:88:03:5d:a9:35:c9:a1:8a:c0:16:0f:4f:0c:00:53:
23:08:32:b2:0e:00:95:47:0c:80:da:d3:25:a1:8f:f8:6e:d8:
d0:f7:6f:41:ea:34:af:e9:b0:cf:1d:0c:dc:c7:fa:e5:bd:dd:
7d:81:9e:31:83:13:a6:07:5d:f1:6f:40:65:30:b9:c5:62:0a:
e5:cb:81:a6:21:79:21:04:21:0b:06:0e:12:5d:2b:61:d4:c1:
83:0c:5e:e8:ca:a8:9f:25:e3:3d:10:c7:e6:05:90:1d:b6:c4:
14:50:02:05:9b:d3:c7:d9:e6:cd:94:9c:97:a6:e1:0f:85:6c:
aa:9f:ae:b6:85:63:8f:37:bd:f7:19:b4:3b:43:98:b6:3d:b8:
00:72:48:e7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTEw
MTU0MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJFQ0E2MjNBMkUzQTVB
MDlENDM0MzMxRkE2RDU1MzFBRDRDODcwRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxTLNDsDuluFXOrSW4iW4LyiKqGt1Plt5GzVL5QiXI0eK7YMtn
pwiC3SStrzekP5a6v0cTcXCqhSztgr/TM7VLvC7i1VPspOXMdWwr1GW3mhsUb9W6
jAqF0l4bYdXth8/0AMzLyKbxWOeQdUghbJRZp8mPdbbAnmShXmGuPIp3MIY0SYty
bL6Du7Q/Pi6JTmg/nIjfC+cslC3m5mO4wP4vsdYNLUOfzmx9HaeazxUmhdRHwWJ8
rn/QEkkoQOhv+EdbfuCxzywtpWfxnLIxT8gzW6wnQ2soWBFaELKgFjyqrSipBt43
qAg9Egv6Ghlfj7TGo/l7yLvmYW5UkfsczuifAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQULspiOi46WgnUNDMfptVTGtTIcOkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0xzcGlPaTQ2V2duVU5E
TWZwdFZUR3RUSWNPay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAIvRAYMGhV1JXN4Tkh1cCoXguLbRfZzD
V0+Ze5K/W78CumVnF9mYYpzMal4tDu5K6RNzp3f1bmZxMs+dRJqAbfm8MzFzR7RW
TsSK7ddRxBoo+4I/E1emSyFhg8qitllzfYAXhCt+Em2Uui+HzgXYhIgDXak1yaGK
wBYPTwwAUyMIMrIOAJVHDIDa0yWhj/hu2ND3b0HqNK/psM8dDNzH+uW93X2BnjGD
E6YHXfFvQGUwucViCuXLgaYheSEEIQsGDhJdK2HUwYMMXujKqJ8l4z0Qx+YFkB22
xBRQAgWb08fZ5s2UnJem4Q+FbKqfrraFY483vfcZtDtDmLY9uABySOc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org