Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NT1RreGGDNtZ5HQs-LFcwwIq_50.roa
File: NT1RreGGDNtZ5HQs-LFcwwIq_50.roa (raw, json)
Hash identifier: HgudojzZvYdGi/8gyyohk8UwNzJ5Z8/UU7cTGEWCVUk=
Subject key identifier: 35:3D:51:AD:E1:86:0C:DB:59:E4:74:2C:F8:B1:5C:C3:02:2A:FF:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3367
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NT1RreGGDNtZ5HQs-LFcwwIq_50.roa
Signing time: Thu 28 Mar 2024 02:52:07 +0000
ROA not before: Thu 28 Mar 2024 02:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13159 (0x3367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 02:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=353D51ADE1860CDB59E4742CF8B15CC3022AFF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:4b:0d:76:7d:07:7f:1b:77:3b:5c:d2:3e:
74:94:10:e8:71:6f:d0:3f:93:1e:db:81:bc:f0:55:
1e:b7:2a:98:f4:7c:37:df:fa:87:6b:ff:72:9d:f8:
57:cc:c2:a0:4e:fa:d2:7a:81:a3:df:70:aa:a8:8c:
e6:4b:75:24:c8:de:0a:ad:0c:4a:86:90:04:9a:07:
09:33:e9:85:3c:ea:7b:b4:f2:3e:63:e2:6b:58:b4:
31:57:a9:eb:e9:db:c8:a9:9d:23:1d:1c:23:3e:bc:
1d:25:af:ab:f0:1b:3f:dd:14:df:b5:38:f8:bc:7a:
ad:dd:0f:a3:08:1b:45:84:c3:9a:74:50:71:9f:c0:
0e:d1:df:7a:4b:36:b0:f9:35:d7:c9:cd:27:15:b8:
35:26:07:be:22:62:1f:18:1a:22:fd:af:b1:0a:9e:
47:b8:9c:a0:22:bc:e6:d1:e8:a3:a2:8e:3d:46:22:
d2:e8:2d:e9:80:e4:5f:e0:5c:7b:0d:36:bf:bd:ac:
6b:a3:64:86:d2:ac:01:8b:4f:78:ce:f5:1a:f0:a9:
3a:cf:55:82:e6:90:55:39:6e:77:e2:86:27:41:35:
0a:a7:67:86:43:f7:34:a4:54:b5:30:37:36:c9:f1:
4c:aa:f4:72:98:ae:98:f7:12:8d:cf:c3:9c:1a:47:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3D:51:AD:E1:86:0C:DB:59:E4:74:2C:F8:B1:5C:C3:02:2A:FF:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NT1RreGGDNtZ5HQs-LFcwwIq_50.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
67:fe:5d:e1:73:80:90:4f:70:be:a3:6a:69:14:a5:0d:19:99:
df:58:b8:6c:d1:6b:f6:d2:a4:3b:f7:c9:3e:5c:dc:c7:ca:aa:
bb:4d:25:85:94:79:98:1a:48:f8:50:07:cd:e0:45:68:95:e4:
bb:16:67:51:b4:6d:e8:50:39:70:d0:61:c4:10:f3:57:7a:d6:
26:03:09:e8:c5:39:24:f7:c6:f1:51:a1:33:c3:ff:15:08:28:
1e:2b:ff:68:f3:74:a6:ff:5f:d9:c2:01:96:56:2a:28:c0:7d:
e4:0e:63:13:91:7d:e5:4f:d1:5c:7a:bd:51:40:2b:2f:3f:5d:
39:8c:bd:78:9c:8e:26:b3:94:a0:58:79:9b:9c:44:a9:fb:d7:
f1:0b:a2:a2:23:72:35:b5:a9:6f:b4:e3:b7:6d:92:4f:e7:f6:
b8:89:84:51:31:56:4a:25:01:3f:54:d1:a8:67:93:6f:6e:e2:
e3:f6:6b:1a:61:2e:50:00:9d:be:be:a6:30:0f:29:17:7f:cc:
6a:95:d1:65:c8:b8:de:5b:00:f4:35:35:67:50:b4:7d:1a:3e:
30:23:f0:e9:6c:60:12:9e:05:89:3d:9c:28:a0:0b:3a:34:5b:
23:3c:0c:b9:fe:65:8f:87:ec:08:71:bc:c0:79:10:7d:43:62:
03:80:65:09
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICM2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw
MjUyMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM1M0Q1MUFERTE4NjBD
REI1OUU0NzQyQ0Y4QjE1Q0MzMDIyQUZGOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKzEsNdn0Hfxt3O1zSPnSUEOhxb9A/kx7bgbzwVR63Kpj0fDff
+odr/3Kd+FfMwqBO+tJ6gaPfcKqojOZLdSTI3gqtDEqGkASaBwkz6YU86nu08j5j
4mtYtDFXqevp28ipnSMdHCM+vB0lr6vwGz/dFN+1OPi8eq3dD6MIG0WEw5p0UHGf
wA7R33pLNrD5NdfJzScVuDUmB74iYh8YGiL9r7EKnke4nKAivObR6KOijj1GItLo
LemA5F/gXHsNNr+9rGujZIbSrAGLT3jO9RrwqTrPVYLmkFU5bnfihidBNQqnZ4ZD
9zSkVLUwNzbJ8Uyq9HKYrpj3Eo3Pw5waR/MjAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUNT1RreGGDNtZ5HQs+LFcwwIq/50wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L05UMVJyZUdHRE50WjVI
UXMtTEZjd3dJcV81MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAGf+XeFzgJBPcL6jamkUpQ0Zmd9YuGzR
a/bSpDv3yT5c3MfKqrtNJYWUeZgaSPhQB83gRWiV5LsWZ1G0behQOXDQYcQQ81d6
1iYDCejFOST3xvFRoTPD/xUIKB4r/2jzdKb/X9nCAZZWKijAfeQOYxORfeVP0Vx6
vVFAKy8/XTmMvXicjiazlKBYeZucRKn71/ELoqIjcjW1qW+047dtkk/n9riJhFEx
VkolAT9U0ahnk29u4uP2axphLlAAnb6+pjAPKRd/zGqV0WXIuN5bAPQ1NWdQtH0a
PjAj8OlsYBKeBYk9nCigCzo0WyM8DLn+ZY+H7AhxvMB5EH1DYgOAZQk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:22 2024 by rpki-client on console-fra.rpki-client.org