Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/N5ZelB7UW05FiQWeftzLlWZoVrU.roa
File: N5ZelB7UW05FiQWeftzLlWZoVrU.roa (raw, json)
Hash identifier: acQAHA6PfANFjeS1wrwtr4jrkaZrpWL+08krhS0oo2g=
Subject key identifier: 37:96:5E:94:1E:D4:5B:4E:45:89:05:9E:7E:DC:CB:95:66:68:56:B5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5287
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N5ZelB7UW05FiQWeftzLlWZoVrU.roa
Signing time: Wed 08 May 2024 14:54:07 +0000
ROA not before: Wed 08 May 2024 14:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21127 (0x5287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 14:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37965E941ED45B4E4589059E7EDCCB95666856B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:95:57:3c:d5:e6:ce:74:a5:f5:cb:9e:3b:
16:10:a9:8c:09:5f:57:fa:53:34:51:2c:61:5b:5f:
e5:86:72:06:dc:a9:4d:b3:08:5d:e0:77:59:99:23:
27:6c:83:e3:59:cc:02:ce:4f:26:bc:28:cf:58:7e:
a2:c5:a7:25:b2:8a:22:bf:66:93:19:20:14:85:46:
e1:75:f0:0b:59:6b:4e:ef:74:79:60:98:fa:9f:09:
e6:fd:99:17:58:51:69:04:46:3b:b9:14:ec:14:ea:
49:7f:eb:9b:be:af:58:15:f8:ce:3c:dc:53:00:01:
26:39:8c:5d:ec:9c:dc:de:df:02:df:5e:20:49:e8:
d0:c9:af:41:41:1f:ae:4b:9a:28:b2:4e:c2:f6:b1:
92:0f:81:63:44:04:8c:2c:2c:26:7b:0f:22:86:2a:
1c:a3:4e:61:51:d5:33:cc:d0:8f:c4:37:ae:59:b6:
df:c9:11:54:4f:dc:31:99:94:a4:54:e7:b2:e8:95:
9b:7f:ee:35:8c:fc:e1:a6:8f:02:aa:f6:45:9a:4c:
95:72:a9:b4:29:a1:a1:65:ef:be:24:12:d9:c0:f8:
0b:e0:ed:06:4f:4d:8e:46:25:a7:50:ee:4a:4a:e5:
90:6d:1e:3f:dd:d1:bc:48:db:1d:b0:36:79:7a:95:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:5E:94:1E:D4:5B:4E:45:89:05:9E:7E:DC:CB:95:66:68:56:B5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N5ZelB7UW05FiQWeftzLlWZoVrU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:2e:d4:53:3e:70:6a:73:df:7f:67:3d:fe:8f:82:4f:07:66:
f3:57:00:6b:34:20:ce:f4:cf:ce:19:df:11:49:de:04:e6:c4:
8c:2d:a5:6e:f1:d9:b8:f3:3a:92:14:30:21:b3:a6:1f:04:8a:
e7:e7:1d:a7:00:2c:fe:db:2e:71:cb:4e:59:fd:ce:9c:3e:33:
75:91:c2:33:ca:d2:e5:b2:72:f7:b7:f8:65:0e:d2:b3:0a:75:
fa:fd:d5:7d:8e:c3:32:6f:d8:96:4c:f6:8b:fa:4d:cc:6e:e1:
f1:9d:9d:b9:eb:7e:db:5f:c7:97:ce:81:9b:95:b3:a8:78:94:
52:da:f5:65:dd:93:9e:58:35:f3:65:67:f3:1c:95:97:6f:01:
84:4c:ad:60:35:0a:55:68:35:95:e7:f3:aa:21:57:3c:18:87:
ab:21:1f:59:9b:37:65:f0:d5:82:5a:c0:93:d0:5e:5c:a0:aa:
bb:74:5f:57:7d:c3:d2:86:88:a5:32:da:ad:78:e3:6c:8c:62:
27:3b:39:ec:8e:96:3b:1e:8d:39:09:66:b0:2e:42:9b:1e:f9:
f5:eb:a0:8e:98:19:ec:7d:01:ba:b5:01:ba:51:29:1b:70:83:
55:9c:9b:c7:85:bc:23:51:c1:20:10:a3:dc:b2:fc:8e:89:91:
90:25:cd:e2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICUocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDgx
NDU0MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM3OTY1RTk0MUVENDVC
NEU0NTg5MDU5RTdFRENDQjk1NjY2ODU2QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxlpVXPNXmznSl9cueOxYQqYwJX1f6UzRRLGFbX+WGcgbcqU2z
CF3gd1mZIydsg+NZzALOTya8KM9YfqLFpyWyiiK/ZpMZIBSFRuF18AtZa07vdHlg
mPqfCeb9mRdYUWkERju5FOwU6kl/65u+r1gV+M483FMAASY5jF3snNze3wLfXiBJ
6NDJr0FBH65LmiiyTsL2sZIPgWNEBIwsLCZ7DyKGKhyjTmFR1TPM0I/EN65Ztt/J
EVRP3DGZlKRU57LolZt/7jWM/OGmjwKq9kWaTJVyqbQpoaFl774kEtnA+Avg7QZP
TY5GJadQ7kpK5ZBtHj/d0bxI2x2wNnl6lbQFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUN5ZelB7UW05FiQWeftzLlWZoVrUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L041WmVsQjdVVzA1RmlR
V2VmdHpMbFdab1ZyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHMu1FM+cGpz339nPf6Pgk8HZvNXAGs0
IM70z84Z3xFJ3gTmxIwtpW7x2bjzOpIUMCGzph8EiufnHacALP7bLnHLTln9zpw+
M3WRwjPK0uWycve3+GUO0rMKdfr91X2OwzJv2JZM9ov6Tcxu4fGdnbnrfttfx5fO
gZuVs6h4lFLa9WXdk55YNfNlZ/MclZdvAYRMrWA1ClVoNZXn86ohVzwYh6shH1mb
N2Xw1YJawJPQXlygqrt0X1d9w9KGiKUy2q1442yMYic7OeyOljsejTkJZrAuQpse
+fXroI6YGex9Abq1AbpRKRtwg1Wcm8eFvCNRwSAQo9yy/I6JkZAlzeI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:21 2024 by rpki-client on console-fra.rpki-client.org