Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M8dqRlvY7BGOI_HOmJhQV4Swifk.roa
File: M8dqRlvY7BGOI_HOmJhQV4Swifk.roa (raw, json)
Hash identifier: VcOUskPZ8aBADuFvn3R22lC3mwC3WHxuwTS+YvABwOA=
Subject key identifier: 33:C7:6A:46:5B:D8:EC:11:8E:23:F1:CE:98:98:50:57:84:B0:89:F9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 409F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M8dqRlvY7BGOI_HOmJhQV4Swifk.roa
Signing time: Sun 14 Apr 2024 17:52:54 +0000
ROA not before: Sun 14 Apr 2024 17:52:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16543 (0x409f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 17:52:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33C76A465BD8EC118E23F1CE9898505784B089F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:d5:06:52:3c:c9:5c:c1:11:eb:b5:01:49:
7e:a3:45:b8:28:2f:61:8f:f4:db:22:0b:cf:80:9f:
1d:9e:10:85:0b:21:80:89:0f:c9:72:10:26:6b:d5:
f6:be:81:d9:97:d7:64:85:32:ab:c0:f2:29:55:34:
92:f8:03:ab:46:19:ff:4f:3f:c3:bf:69:ef:ee:85:
06:65:1b:82:e7:58:6e:1e:86:78:76:4e:f8:90:34:
29:00:07:be:18:91:fc:b3:47:9a:75:de:d9:32:c2:
68:64:ec:3e:16:52:b1:08:28:dd:d7:00:4e:94:82:
1c:5d:04:de:48:2a:ae:11:72:9a:0f:49:db:2b:f9:
49:32:0d:b5:fe:b1:78:b9:75:a8:34:1e:a2:af:5f:
94:84:63:4f:86:e4:62:03:f9:75:d2:0c:56:3c:46:
ae:35:11:2c:c0:a4:fe:64:44:56:a3:28:ff:de:fe:
4f:f3:41:91:dc:94:a2:a1:04:09:57:c4:0c:15:52:
7f:fd:a9:95:79:9a:d1:ac:5d:8a:69:b8:af:b6:fa:
4b:cb:c7:96:b0:b1:e7:7b:a1:a8:7e:49:47:8f:49:
3f:ba:46:01:9d:94:a7:9a:f5:f9:c9:82:ce:6f:9b:
79:13:fa:df:b5:96:6f:a2:7a:e7:6d:69:a5:68:88:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:6A:46:5B:D8:EC:11:8E:23:F1:CE:98:98:50:57:84:B0:89:F9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M8dqRlvY7BGOI_HOmJhQV4Swifk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:04:32:a5:fd:f3:d7:c8:5a:7f:8d:9f:03:50:1a:cf:d3:8d:
d8:d2:70:e1:e6:54:2e:21:92:68:34:e5:6b:08:34:91:77:39:
e8:a7:d8:a2:8c:45:37:59:7d:61:ee:3e:d1:f5:2e:9f:1b:d7:
53:9e:fb:7f:c6:94:ad:8a:7a:46:ba:a6:d1:b3:8e:99:86:df:
51:9e:6b:a2:3b:97:10:bf:fa:cc:24:5b:08:83:c3:08:76:01:
05:82:e3:60:0f:80:52:17:1c:0f:69:49:0a:a3:4f:41:39:1f:
14:d0:47:b9:c8:95:50:1b:fa:a9:bb:64:97:c0:6b:74:ef:68:
c9:da:4d:e9:9b:79:ff:6c:fb:5b:49:b9:b4:aa:d8:5f:2f:d0:
86:ab:f0:b3:1a:b9:e4:a9:24:49:56:98:ba:7e:45:fe:e0:07:
bb:2f:5f:94:74:e6:09:da:dc:d2:c6:d2:e3:5d:04:50:bd:19:
00:e9:95:cd:02:17:45:5f:ac:59:47:2d:d6:4b:04:d2:e2:4f:
65:72:bd:f1:6b:f8:34:c6:45:2f:2b:a7:ed:1d:f1:6a:f1:d6:
7c:c4:36:78:75:6e:6f:f4:59:7d:b4:f7:58:7b:67:9d:7a:d9:
18:c7:49:ce:90:dc:55:6b:82:cd:34:a0:d7:19:d4:62:69:c0:
3d:0b:76:e9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQx
NzUyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMzQzc2QTQ2NUJEOEVD
MTE4RTIzRjFDRTk4OTg1MDU3ODRCMDg5RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrbtUGUjzJXMER67UBSX6jRbgoL2GP9NsiC8+Anx2eEIULIYCJ
D8lyECZr1fa+gdmX12SFMqvA8ilVNJL4A6tGGf9PP8O/ae/uhQZlG4LnWG4ehnh2
TviQNCkAB74YkfyzR5p13tkywmhk7D4WUrEIKN3XAE6UghxdBN5IKq4RcpoPSdsr
+UkyDbX+sXi5dag0HqKvX5SEY0+G5GID+XXSDFY8Rq41ESzApP5kRFajKP/e/k/z
QZHclKKhBAlXxAwVUn/9qZV5mtGsXYppuK+2+kvLx5awsed7oah+SUePST+6RgGd
lKea9fnJgs5vm3kT+t+1lm+ieudtaaVoiFlrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUM8dqRlvY7BGOI/HOmJhQV4SwifkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L004ZHFSbHZZN0JHT0lf
SE9tSmhRVjRTd2lmay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFgEMqX989fIWn+NnwNQGs/TjdjScOHm
VC4hkmg05WsINJF3Oein2KKMRTdZfWHuPtH1Lp8b11Oe+3/GlK2Keka6ptGzjpmG
31Gea6I7lxC/+swkWwiDwwh2AQWC42APgFIXHA9pSQqjT0E5HxTQR7nIlVAb+qm7
ZJfAa3TvaMnaTembef9s+1tJubSq2F8v0Iar8LMaueSpJElWmLp+Rf7gB7svX5R0
5gna3NLG0uNdBFC9GQDplc0CF0VfrFlHLdZLBNLiT2VyvfFr+DTGRS8rp+0d8Wrx
1nzENnh1bm/0WX2091h7Z5162RjHSc6Q3FVrgs00oNcZ1GJpwD0Lduk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org