Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OiIJ6VoABmbepx9HrWvQJfMz9T8.roa
File: OiIJ6VoABmbepx9HrWvQJfMz9T8.roa (raw, json)
Hash identifier: QTQAS4czr75CcaTI0tNeFqUIdqs49i0sIB37n/r09ew=
Subject key identifier: 3A:22:09:E9:5A:00:06:66:DE:A7:1F:47:AD:6B:D0:25:F3:33:F5:3F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 351B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OiIJ6VoABmbepx9HrWvQJfMz9T8.roa
Signing time: Sat 30 Mar 2024 09:22:08 +0000
ROA not before: Sat 30 Mar 2024 09:22:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13595 (0x351b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 09:22:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A2209E95A000666DEA71F47AD6BD025F333F53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:79:bc:1a:7b:5e:0d:c4:e9:a8:ef:f7:a5:
1e:b1:31:90:c6:36:ad:d2:2a:0a:9a:b7:f2:9a:53:
1e:aa:ff:e1:bc:50:53:dc:a1:2e:92:e1:99:be:dc:
ae:0b:ea:3c:09:4c:a4:ec:31:65:21:68:d0:4a:d2:
00:ba:a8:78:c2:c3:5d:5a:c9:05:37:c2:4c:fc:ba:
50:ba:01:ef:07:a2:e6:a0:f2:b4:5a:ff:29:88:36:
61:7e:2c:3e:34:52:f4:7f:07:16:33:11:38:71:34:
c2:27:2b:d8:dc:51:db:4e:e9:0f:eb:dd:7b:33:f3:
74:bc:51:a0:4a:a1:e8:88:14:76:36:45:9c:12:b7:
9b:72:26:37:ea:94:a3:89:8a:21:ea:f9:75:42:0d:
f0:96:20:3a:99:d5:5c:c3:e7:a2:43:2b:e4:73:01:
20:2e:f4:fe:7a:81:84:d5:b2:73:0b:5b:5e:87:fe:
80:aa:2b:e8:7a:f5:77:06:46:ce:1f:ed:1d:96:29:
c3:89:18:ae:b5:67:c9:8a:e7:2e:c5:43:79:8f:02:
d9:f7:e1:3a:5d:e4:c8:6f:7f:c6:17:6f:6c:e9:c5:
e2:ad:5a:28:b1:97:35:5c:47:48:9d:9d:e6:1e:e3:
e1:00:a3:e7:01:eb:0a:9d:f5:86:7c:f6:92:a1:0d:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:09:E9:5A:00:06:66:DE:A7:1F:47:AD:6B:D0:25:F3:33:F5:3F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OiIJ6VoABmbepx9HrWvQJfMz9T8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
25:19:65:27:4b:56:18:f8:e7:f8:66:43:26:0f:9c:69:3c:73:
30:4f:78:e9:1e:cd:e4:a4:37:a2:99:a1:2d:55:38:ca:2b:97:
e5:9c:65:3a:a3:b9:0a:90:dc:4d:f0:2e:2e:08:93:d7:94:9d:
d2:af:af:63:61:f1:64:3c:61:79:0d:6c:09:2d:a0:25:75:fa:
72:4b:93:56:a3:58:89:7e:bc:a5:2c:f5:93:cc:50:6f:ce:0a:
ca:e7:8f:7b:bf:1c:30:e6:31:5b:6c:1a:30:32:43:d2:17:45:
d5:8f:4c:00:d3:72:ea:90:06:7c:a8:3d:03:8e:2a:a5:bd:cb:
11:da:d4:1e:cb:86:45:1c:87:71:b8:7d:93:bb:6b:c0:07:14:
33:4a:31:22:7b:3a:27:aa:ab:81:bb:74:60:01:99:b4:ab:fc:
96:93:ea:9f:24:2e:eb:04:4b:50:ba:03:55:9a:fb:12:e4:86:
11:e4:8b:0b:aa:d7:36:fb:be:c8:e4:d7:6b:c4:a9:5a:8a:0b:
d4:3c:ac:a4:77:74:ad:73:ac:dd:7d:1e:96:43:bf:28:ca:c7:
05:a2:d9:1c:cd:e9:97:d9:cc:7c:1d:37:0a:06:94:ef:6c:d2:
a3:21:51:0f:ed:6e:5c:f2:20:c0:9a:2a:77:26:2b:9b:7c:8f:
48:65:80:81
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
OTIyMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNBMjIwOUU5NUEwMDA2
NjZERUE3MUY0N0FENkJEMDI1RjMzM0Y1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEBHm8GnteDcTpqO/3pR6xMZDGNq3SKgqat/KaUx6q/+G8UFPc
oS6S4Zm+3K4L6jwJTKTsMWUhaNBK0gC6qHjCw11ayQU3wkz8ulC6Ae8Houag8rRa
/ymINmF+LD40UvR/BxYzEThxNMInK9jcUdtO6Q/r3Xsz83S8UaBKoeiIFHY2RZwS
t5tyJjfqlKOJiiHq+XVCDfCWIDqZ1VzD56JDK+RzASAu9P56gYTVsnMLW16H/oCq
K+h69XcGRs4f7R2WKcOJGK61Z8mK5y7FQ3mPAtn34Tpd5Mhvf8YXb2zpxeKtWiix
lzVcR0idneYe4+EAo+cB6wqd9YZ89pKhDUkPAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUOiIJ6VoABmbepx9HrWvQJfMz9T8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L09pSUo2Vm9BQm1iZXB4
OUhyV3ZRSmZNejlUOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACUZZSdLVhj45/hmQyYPnGk8czBPeOke
zeSkN6KZoS1VOMorl+WcZTqjuQqQ3E3wLi4Ik9eUndKvr2Nh8WQ8YXkNbAktoCV1
+nJLk1ajWIl+vKUs9ZPMUG/OCsrnj3u/HDDmMVtsGjAyQ9IXRdWPTADTcuqQBnyo
PQOOKqW9yxHa1B7LhkUch3G4fZO7a8AHFDNKMSJ7Oieqq4G7dGABmbSr/JaT6p8k
LusES1C6A1Wa+xLkhhHkiwuq1zb7vsjk12vEqVqKC9Q8rKR3dK1zrN19HpZDvyjK
xwWi2RzN6ZfZzHwdNwoGlO9s0qMhUQ/tblzyIMCaKncmK5t8j0hlgIE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org