Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Mo9CBPDiHCeJlpQLYo6_gqBi4aY.roa
File: Mo9CBPDiHCeJlpQLYo6_gqBi4aY.roa (raw, json)
Hash identifier: eJigVEzGHAoSpgcgxwmju1r75cgWTo75Q6EZWjQ506c=
Subject key identifier: 32:8F:42:04:F0:E2:1C:27:89:96:94:0B:62:8E:BF:82:A0:62:E1:A6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33BB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Mo9CBPDiHCeJlpQLYo6_gqBi4aY.roa
Signing time: Thu 28 Mar 2024 13:22:03 +0000
ROA not before: Thu 28 Mar 2024 13:22:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13243 (0x33bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 13:22:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=328F4204F0E21C278996940B628EBF82A062E1A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:37:7c:88:56:7b:8a:fd:0f:c3:cc:c9:75:
a4:68:9f:2e:22:43:0e:66:25:c6:e3:77:7f:90:09:
bf:36:1c:da:d4:04:d8:a9:f1:2f:0a:21:c0:e1:ba:
5d:b6:99:48:58:f1:9e:c4:96:ea:8a:cb:8c:6c:46:
16:e2:fb:a9:9d:0e:15:e2:8d:6a:04:fa:94:ce:95:
e9:27:85:41:83:a2:e0:cc:73:79:40:68:ac:4a:59:
e5:e5:1b:40:cb:45:9b:3c:0a:16:d8:ed:a3:bc:df:
1f:f7:c4:d0:8e:4a:90:99:ef:bd:8b:60:e7:21:0a:
e5:c7:67:44:4e:34:cd:44:0a:53:d7:96:9c:6e:58:
b3:f2:a8:1a:35:d1:db:c0:f8:c0:94:67:2b:8e:23:
c9:6c:e5:c9:3d:90:98:d4:05:24:b2:10:6e:65:f9:
0a:9a:ed:ea:a7:d1:1a:31:a8:f8:5f:5d:b6:79:36:
d1:7f:19:83:43:40:d0:24:41:47:e2:f2:2b:a3:e4:
e2:8c:00:be:52:ee:ac:16:8e:d2:73:1b:9f:7b:0f:
d7:3a:29:eb:1e:b6:31:b9:07:e1:fc:69:94:e0:cf:
d1:b7:97:dc:63:04:15:73:90:5a:e4:31:01:de:d5:
16:30:05:24:8a:3a:0d:88:18:c1:2f:9b:45:fa:01:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:42:04:F0:E2:1C:27:89:96:94:0B:62:8E:BF:82:A0:62:E1:A6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Mo9CBPDiHCeJlpQLYo6_gqBi4aY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:fa:92:2c:89:71:a7:95:28:af:4b:49:49:4b:6e:7c:11:ba:
30:07:ae:59:f3:5c:db:87:fe:3c:4b:df:66:00:36:56:80:d6:
49:50:4c:fd:ce:f9:e0:18:b9:a0:69:d3:36:c6:5c:ec:3d:0f:
e4:fa:a2:f7:4c:40:3b:06:bd:61:42:bd:c3:c7:c2:c7:12:84:
ca:9d:a3:25:b0:8e:42:d6:db:8e:e1:5b:0f:bc:ec:0f:8b:50:
2b:12:2b:4d:90:c0:a9:2e:14:52:d1:07:85:17:ea:e1:1a:c5:
94:07:1a:05:ef:2c:f7:7d:53:52:ae:55:d1:63:ea:46:70:e9:
6a:13:c6:b4:07:ae:10:a8:6a:11:17:ec:b8:e5:ae:ce:d6:a7:
61:d2:b7:70:74:0e:e7:67:6f:94:95:73:b2:73:77:21:5b:32:
0a:39:10:09:93:1e:ca:c2:95:7a:6a:a8:54:61:18:89:a1:a4:
2f:b5:51:77:1f:e8:1f:07:17:2a:3e:1d:16:f0:7d:da:89:8f:
2b:b9:96:27:e4:df:87:e1:68:2d:5e:5d:73:27:ee:0e:40:07:
18:94:8d:95:33:bb:7f:39:c8:32:4a:db:67:1e:c3:d9:41:4c:
8f:78:0b:6f:84:bb:bd:c8:fd:69:b2:62:c8:ba:e6:b3:d3:b8:
d7:a5:c2:7d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICM7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgx
MzIyMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMyOEY0MjA0RjBFMjFD
Mjc4OTk2OTQwQjYyOEVCRjgyQTA2MkUxQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+pzd8iFZ7iv0Pw8zJdaRony4iQw5mJcbjd3+QCb82HNrUBNip
8S8KIcDhul22mUhY8Z7EluqKy4xsRhbi+6mdDhXijWoE+pTOleknhUGDouDMc3lA
aKxKWeXlG0DLRZs8ChbY7aO83x/3xNCOSpCZ772LYOchCuXHZ0RONM1EClPXlpxu
WLPyqBo10dvA+MCUZyuOI8ls5ck9kJjUBSSyEG5l+Qqa7eqn0RoxqPhfXbZ5NtF/
GYNDQNAkQUfi8iuj5OKMAL5S7qwWjtJzG597D9c6KesetjG5B+H8aZTgz9G3l9xj
BBVzkFrkMQHe1RYwBSSKOg2IGMEvm0X6AdilAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUMo9CBPDiHCeJlpQLYo6/gqBi4aYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L01vOUNCUERpSENlSmxw
UUxZbzZfZ3FCaTRhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEb6kiyJcaeVKK9LSUlLbnwRujAHrlnz
XNuH/jxL32YANlaA1klQTP3O+eAYuaBp0zbGXOw9D+T6ovdMQDsGvWFCvcPHwscS
hMqdoyWwjkLW247hWw+87A+LUCsSK02QwKkuFFLRB4UX6uEaxZQHGgXvLPd9U1Ku
VdFj6kZw6WoTxrQHrhCoahEX7Ljlrs7Wp2HSt3B0Dudnb5SVc7JzdyFbMgo5EAmT
HsrClXpqqFRhGImhpC+1UXcf6B8HFyo+HRbwfdqJjyu5lifk34fhaC1eXXMn7g5A
BxiUjZUzu385yDJK22cew9lBTI94C2+Eu73I/WmyYsi65rPTuNelwn0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:21 2024 by rpki-client on console-fra.rpki-client.org