Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Lv37_nnHQXBSaF2gYdSKFaQUj3g.roa
File: Lv37_nnHQXBSaF2gYdSKFaQUj3g.roa (raw, json)
Hash identifier: WPcN1mcNZqZ8IvE/B9CtLGEovfpPwaRYWqe4KNbKVWw=
Subject key identifier: 2E:FD:FB:FE:79:C7:41:70:52:68:5D:A0:61:D4:8A:15:A4:14:8F:78
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C5B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lv37_nnHQXBSaF2gYdSKFaQUj3g.roa
Signing time: Tue 09 Apr 2024 01:22:35 +0000
ROA not before: Tue 09 Apr 2024 01:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15451 (0x3c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 01:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2EFDFBFE79C7417052685DA061D48A15A4148F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:f7:99:20:0a:c5:52:44:1d:27:47:e6:8c:
84:c1:f5:09:cd:69:61:5c:7f:c9:ee:c8:1d:fd:cf:
c4:85:68:5d:c0:b2:d7:92:6d:b7:79:38:08:d5:dd:
c7:d6:5d:29:32:11:56:e1:38:00:9e:ab:a6:4d:e6:
b1:01:69:a5:4f:eb:6c:5f:3e:6c:98:26:de:ea:50:
c5:02:5a:cc:11:f3:36:a1:2e:20:60:ac:f0:7e:ad:
e4:7d:df:78:89:10:97:f5:4f:d3:d1:8b:94:b1:7a:
97:8f:3c:97:77:8a:19:c8:1b:7b:53:6d:c3:60:da:
d6:99:2a:d1:ea:b4:07:53:44:a3:f3:ba:32:0d:11:
a0:4c:b8:32:4d:a1:23:3b:58:af:e9:16:d3:4e:e6:
8e:ff:ba:07:94:e2:d4:df:40:31:54:8c:77:88:bb:
9a:4c:23:a4:a2:cb:93:4b:d9:cf:b3:2e:db:c3:b6:
c1:b4:9d:fb:14:a9:d4:8a:58:d2:bc:70:9b:fa:f2:
f4:15:d8:3d:4d:0a:ce:1c:b6:df:33:54:17:34:9e:
8b:be:dd:85:3a:84:d7:15:4d:07:15:16:55:c4:9d:
fe:1c:bc:fa:6d:8b:89:c9:ff:c8:59:7d:be:62:21:
a2:84:cc:79:8f:cc:ae:03:7e:b4:4b:4b:20:80:83:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:FB:FE:79:C7:41:70:52:68:5D:A0:61:D4:8A:15:A4:14:8F:78
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lv37_nnHQXBSaF2gYdSKFaQUj3g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
41:f0:6b:98:d4:37:bd:ae:19:bd:29:f9:da:ca:b3:d7:d6:d8:
e1:db:04:57:e3:2a:88:77:6e:d1:47:4f:1d:b4:4f:74:06:ba:
64:b0:28:69:d0:59:35:ce:91:3a:2b:75:33:fa:ce:78:88:ee:
57:63:b4:af:fd:d8:73:be:54:e2:dc:ef:a2:69:1f:e4:c1:59:
4c:f1:9a:3e:6f:b3:cd:70:90:41:8a:5d:2d:74:f6:fc:a2:01:
38:af:f3:a9:cb:4a:68:e4:8e:b9:40:df:43:31:33:e0:d4:d5:
6c:e7:89:39:4b:60:a2:09:39:3a:83:0a:16:49:9b:e0:76:95:
f8:8e:10:0f:ec:14:03:e5:23:6a:fd:74:23:96:28:ff:ef:6b:
85:5b:f4:b6:28:cc:5f:2b:49:c1:c5:45:2b:04:0a:8d:cd:a9:
7f:29:1e:d5:c1:d2:b6:c3:83:83:f1:fa:7b:33:78:63:a0:64:
a9:ea:c5:ad:62:3b:1d:36:47:2b:ad:84:e6:65:47:52:8e:6d:
95:98:71:d4:52:1c:f4:3c:1c:b7:a6:9e:45:af:70:f6:55:27:
c5:08:7d:48:16:0d:87:5e:cf:cb:2c:a2:e8:ad:6c:e6:62:c0:
1c:70:c0:28:94:8c:b7:3d:46:55:d0:d4:93:08:36:39:99:e7:
b0:20:74:68
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkw
MTIyMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJFRkRGQkZFNzlDNzQx
NzA1MjY4NURBMDYxRDQ4QTE1QTQxNDhGNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC85feZIArFUkQdJ0fmjITB9QnNaWFcf8nuyB39z8SFaF3AsteS
bbd5OAjV3cfWXSkyEVbhOACeq6ZN5rEBaaVP62xfPmyYJt7qUMUCWswR8zahLiBg
rPB+reR933iJEJf1T9PRi5SxepePPJd3ihnIG3tTbcNg2taZKtHqtAdTRKPzujIN
EaBMuDJNoSM7WK/pFtNO5o7/ugeU4tTfQDFUjHeIu5pMI6Siy5NL2c+zLtvDtsG0
nfsUqdSKWNK8cJv68vQV2D1NCs4ctt8zVBc0nou+3YU6hNcVTQcVFlXEnf4cvPpt
i4nJ/8hZfb5iIaKEzHmPzK4DfrRLSyCAg1vBAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQULv37/nnHQXBSaF2gYdSKFaQUj3gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0x2Mzdfbm5IUVhCU2FG
MmdZZFNLRmFRVWozZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEHwa5jUN72uGb0p+drKs9fW2OHbBFfj
Koh3btFHTx20T3QGumSwKGnQWTXOkTordTP6zniI7ldjtK/92HO+VOLc76JpH+TB
WUzxmj5vs81wkEGKXS109vyiATiv86nLSmjkjrlA30MxM+DU1WzniTlLYKIJOTqD
ChZJm+B2lfiOEA/sFAPlI2r9dCOWKP/va4Vb9LYozF8rScHFRSsECo3NqX8pHtXB
0rbDg4Px+nszeGOgZKnqxa1iOx02RyuthOZlR1KObZWYcdRSHPQ8HLemnkWvcPZV
J8UIfUgWDYdez8ssouitbOZiwBxwwCiUjLc9RlXQ1JMINjmZ57AgdGg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org