Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QDaOdp5ftrwj_q08uZVGD4YwFLo.roa
File: QDaOdp5ftrwj_q08uZVGD4YwFLo.roa (raw, json)
Hash identifier: i0bP2dT+Uuaqxgz6VgE8asI4zL40IIeFQVeiY1EiJIw=
Subject key identifier: 40:36:8E:76:9E:5F:B6:BC:23:FE:AD:3C:B9:95:46:0F:86:30:14:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D0B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QDaOdp5ftrwj_q08uZVGD4YwFLo.roa
Signing time: Wed 01 May 2024 07:23:50 +0000
ROA not before: Wed 01 May 2024 07:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19723 (0x4d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 07:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=40368E769E5FB6BC23FEAD3CB995460F863014BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:87:10:05:2c:4c:20:04:83:18:38:f3:41:
e6:5c:b2:22:dd:20:58:8a:82:21:5c:94:83:11:f2:
7e:3e:fc:ae:41:61:95:a5:af:f9:8f:a9:36:bb:9f:
e4:ab:e8:97:b6:a2:b0:97:90:e6:2d:fd:a7:74:28:
31:ab:b2:57:10:3d:d3:b0:6c:a3:3a:9f:03:90:1f:
d3:b2:b0:46:b5:a7:19:fc:7e:c0:fe:eb:6e:c5:57:
3f:b4:e3:73:f5:5f:95:e9:6f:c9:06:f4:9b:42:a2:
d4:17:73:69:a6:27:4d:30:22:6a:f6:ec:2e:19:ab:
02:a5:7e:5f:c6:8e:1a:88:2a:99:be:e8:cd:13:0b:
b4:83:06:7f:58:48:5f:84:aa:b8:dc:fa:ad:44:7a:
86:24:57:a5:5f:3c:8a:d9:9b:86:16:14:e6:ed:a9:
82:1a:06:e1:8c:fc:57:e3:8e:6c:22:c2:90:30:a6:
b4:2f:7b:1c:dc:f9:90:6e:25:9b:92:ea:b2:62:79:
a6:bc:05:ae:12:fc:87:11:9c:8c:60:52:01:4a:96:
57:99:9d:6e:48:d8:44:ed:2b:ec:1d:06:d2:b6:1a:
77:bd:8f:1c:b0:3a:cb:42:e5:69:9a:27:4f:4c:7b:
db:5f:bf:da:59:7c:da:a7:c7:52:d2:bc:30:12:25:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:36:8E:76:9E:5F:B6:BC:23:FE:AD:3C:B9:95:46:0F:86:30:14:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QDaOdp5ftrwj_q08uZVGD4YwFLo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:2e:6d:f1:e2:c2:3a:0e:81:04:4b:e1:3e:9a:6a:cd:c9:76:
85:47:b1:63:f2:dc:74:c6:37:23:e7:e1:a8:57:cb:70:f7:0f:
93:1f:0d:66:c0:e8:fc:ea:5e:1a:d6:84:a2:6e:59:2c:4a:f8:
23:5a:41:a0:98:c0:e3:86:e8:83:73:05:1a:f0:a1:6b:dc:df:
0a:4e:fc:4f:eb:c2:8a:9b:e5:51:c3:85:bd:cd:e5:d0:0a:d5:
84:1e:8a:25:a1:2b:af:f0:d1:45:be:bf:02:eb:58:b9:13:4d:
52:22:82:cd:df:1b:90:12:5e:ff:e3:77:33:eb:89:be:15:e9:
bd:af:b8:ea:0d:68:d5:a1:16:63:cf:0b:d2:47:60:b8:df:ba:
d5:e1:b6:d3:7a:39:45:82:d6:6c:7c:e3:9e:21:b9:97:3c:eb:
2a:09:f3:29:a1:3e:90:58:35:3a:03:e7:33:6a:9d:d0:86:03:
70:62:21:86:74:53:67:3f:3e:61:42:ff:03:6b:04:3f:8e:e1:
4d:d3:82:e5:45:0a:be:8e:7e:8e:36:82:aa:81:33:da:36:f3:
0a:f4:34:82:01:3c:69:90:c4:63:8a:a8:68:2f:00:2f:2e:e3:
f7:be:1e:6a:fa:fc:eb:5d:e3:15:65:61:e7:86:01:f7:88:b9:
e7:6d:ec:1e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDEw
NzIzNTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQwMzY4RTc2OUU1RkI2
QkMyM0ZFQUQzQ0I5OTU0NjBGODYzMDE0QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2eocQBSxMIASDGDjzQeZcsiLdIFiKgiFclIMR8n4+/K5BYZWl
r/mPqTa7n+Sr6Je2orCXkOYt/ad0KDGrslcQPdOwbKM6nwOQH9OysEa1pxn8fsD+
627FVz+043P1X5Xpb8kG9JtCotQXc2mmJ00wImr27C4ZqwKlfl/GjhqIKpm+6M0T
C7SDBn9YSF+Eqrjc+q1EeoYkV6VfPIrZm4YWFObtqYIaBuGM/FfjjmwiwpAwprQv
exzc+ZBuJZuS6rJieaa8Ba4S/IcRnIxgUgFKlleZnW5I2ETtK+wdBtK2Gne9jxyw
OstC5WmaJ09Me9tfv9pZfNqnx1LSvDASJXUtAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUQDaOdp5ftrwj/q08uZVGD4YwFLowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FEYU9kcDVmdHJ3al9x
MDh1WlZHRDRZd0ZMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEoubfHiwjoOgQRL4T6aas3JdoVHsWPy
3HTGNyPn4ahXy3D3D5MfDWbA6PzqXhrWhKJuWSxK+CNaQaCYwOOG6INzBRrwoWvc
3wpO/E/rwoqb5VHDhb3N5dAK1YQeiiWhK6/w0UW+vwLrWLkTTVIigs3fG5ASXv/j
dzPrib4V6b2vuOoNaNWhFmPPC9JHYLjfutXhttN6OUWC1mx8454huZc86yoJ8ymh
PpBYNToD5zNqndCGA3BiIYZ0U2c/PmFC/wNrBD+O4U3TguVFCr6Ofo42gqqBM9o2
8wr0NIIBPGmQxGOKqGgvAC8u4/e+Hmr6/Otd4xVlYeeGAfeIuedt7B4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org