Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PVL7d8s4JerxE99aioNOahh2OpE.roa
File: PVL7d8s4JerxE99aioNOahh2OpE.roa (raw, json)
Hash identifier: 9qPudQCnucziQUfIqzql/4V8LOrlFXeamMcSssQIks8=
Subject key identifier: 3D:52:FB:77:CB:38:25:EA:F1:13:DF:5A:8A:83:4E:6A:18:76:3A:91
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C9B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PVL7d8s4JerxE99aioNOahh2OpE.roa
Signing time: Tue 09 Apr 2024 09:23:06 +0000
ROA not before: Tue 09 Apr 2024 09:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15515 (0x3c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 09:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D52FB77CB3825EAF113DF5A8A834E6A18763A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:12:ed:73:5e:31:06:51:23:dc:bf:4b:5a:
42:e4:e2:dc:18:3a:f8:18:c8:58:5e:58:c2:76:1b:
38:4c:71:02:ac:1e:e9:cd:ac:6a:ac:ee:86:c2:05:
a7:18:15:ca:4c:5f:fd:17:aa:f6:98:8f:08:72:ed:
e7:6b:be:51:3b:d0:84:28:39:86:fc:4c:d0:6a:92:
bb:94:e2:11:02:05:dc:14:d3:ab:d2:8a:a3:24:da:
2c:1a:e7:3c:71:9a:cc:ba:41:db:f8:8a:2b:67:1b:
82:0f:d8:69:4f:e6:7c:71:97:d8:91:d0:80:3b:93:
7f:2a:c9:7a:6c:56:e2:55:a4:5f:ff:72:03:7f:a1:
77:79:9b:a4:42:4a:b8:c0:20:93:bc:8d:4f:ed:a4:
1e:2a:f6:ab:f5:fe:4a:61:3f:17:fc:63:03:1c:c3:
53:88:0e:79:1c:bc:a7:a0:ea:f3:31:07:fc:c2:fb:
26:9c:9c:55:79:14:2c:73:10:a4:9e:e6:97:6a:dc:
a2:ff:92:85:40:e5:0f:79:22:1b:f1:e3:5e:3c:c2:
12:e5:a7:40:4f:7c:69:fb:2c:b5:aa:92:2d:7b:df:
21:3c:7c:f7:4d:89:0c:b3:3c:2c:4f:23:b1:6d:ae:
38:2c:f1:76:de:51:27:70:13:e3:a7:ad:b1:7c:8a:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:FB:77:CB:38:25:EA:F1:13:DF:5A:8A:83:4E:6A:18:76:3A:91
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PVL7d8s4JerxE99aioNOahh2OpE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
87:41:2c:73:9b:7f:4c:5f:b0:25:36:48:65:79:66:9c:08:bc:
dd:4f:df:41:10:40:f4:98:87:c5:e3:27:7a:cc:52:55:42:d5:
32:9b:b6:36:30:a2:ac:43:ed:f3:65:6e:50:89:d7:5f:c8:06:
68:89:ef:77:eb:9f:09:63:57:eb:37:50:6d:33:c0:c9:c9:19:
0d:e8:90:87:78:ca:f6:d7:ac:0e:7e:62:91:ce:6d:fc:dc:26:
12:a9:4e:23:49:bc:c2:b9:b7:33:1b:0f:08:fa:07:e3:37:6f:
5c:ca:ab:31:1d:e2:e8:75:b2:35:1f:a7:c1:71:a4:33:e4:4a:
44:59:1a:ed:35:d7:80:cd:b9:55:3c:90:6e:40:2b:16:95:82:
0e:19:0d:88:f5:b4:dd:22:f5:8b:9f:e8:5d:0f:d5:11:1d:06:
61:84:59:ca:a9:a6:46:61:d6:6e:1e:dc:cf:84:12:8f:aa:1d:
db:43:fe:9f:05:c3:d4:46:51:d2:be:91:6d:83:5c:20:49:17:
21:cd:9d:d2:68:b5:11:6d:39:6d:ba:db:99:fa:b9:56:a8:c9:
a9:9d:32:b5:1f:cc:10:cb:f7:00:c6:aa:b6:ff:46:6e:85:a6:
25:ed:4f:63:06:05:e7:41:08:b0:a4:24:d2:82:d3:16:64:c2:
73:10:8f:a6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkw
OTIzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNENTJGQjc3Q0IzODI1
RUFGMTEzREY1QThBODM0RTZBMTg3NjNBOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTLBLtc14xBlEj3L9LWkLk4twYOvgYyFheWMJ2GzhMcQKsHunN
rGqs7obCBacYFcpMX/0XqvaYjwhy7edrvlE70IQoOYb8TNBqkruU4hECBdwU06vS
iqMk2iwa5zxxmsy6Qdv4iitnG4IP2GlP5nxxl9iR0IA7k38qyXpsVuJVpF//cgN/
oXd5m6RCSrjAIJO8jU/tpB4q9qv1/kphPxf8YwMcw1OIDnkcvKeg6vMxB/zC+yac
nFV5FCxzEKSe5pdq3KL/koVA5Q95Ihvx4148whLlp0BPfGn7LLWqki173yE8fPdN
iQyzPCxPI7Ftrjgs8XbeUSdwE+OnrbF8iveZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUPVL7d8s4JerxE99aioNOahh2OpEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BWTDdkOHM0SmVyeEU5
OWFpb05PYWhoMk9wRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAIdBLHObf0xfsCU2SGV5ZpwIvN1P30EQ
QPSYh8XjJ3rMUlVC1TKbtjYwoqxD7fNlblCJ11/IBmiJ73frnwljV+s3UG0zwMnJ
GQ3okId4yvbXrA5+YpHObfzcJhKpTiNJvMK5tzMbDwj6B+M3b1zKqzEd4uh1sjUf
p8FxpDPkSkRZGu0114DNuVU8kG5AKxaVgg4ZDYj1tN0i9Yuf6F0P1REdBmGEWcqp
pkZh1m4e3M+EEo+qHdtD/p8Fw9RGUdK+kW2DXCBJFyHNndJotRFtOW2625n6uVao
yamdMrUfzBDL9wDGqrb/Rm6FpiXtT2MGBedBCLCkJNKC0xZkwnMQj6Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org