Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RBdY6_b6RaXeKXKPfcIyExvufCU.roa
File: RBdY6_b6RaXeKXKPfcIyExvufCU.roa (raw, json)
Hash identifier: Vt0iBJMJoF+d2ADqo7NR5TOe6ZMm8j9O3IRQa3EEH5o=
Subject key identifier: 44:17:58:EB:F6:FA:45:A5:DE:29:72:8F:7D:C2:32:13:1B:EE:7C:25
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FB3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RBdY6_b6RaXeKXKPfcIyExvufCU.roa
Signing time: Sat 04 May 2024 20:23:49 +0000
ROA not before: Sat 04 May 2024 20:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20403 (0x4fb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 20:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=441758EBF6FA45A5DE29728F7DC232131BEE7C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:e2:93:34:9e:b1:0a:9e:5d:17:47:dc:a1:
12:12:80:80:63:4f:82:fa:76:e7:33:8a:10:09:cc:
c8:e5:6c:51:27:37:28:2b:ab:c6:87:1b:13:85:f1:
91:8c:3a:0a:ba:1a:0e:0e:64:41:8f:5b:5c:c8:16:
9d:86:de:87:bf:53:76:ba:fc:1f:18:bf:9c:53:24:
80:cd:4c:34:45:0a:b4:67:cc:3e:e0:48:9a:29:50:
f2:c1:43:97:47:b5:ec:9d:4f:eb:c1:f4:e0:12:83:
1b:9b:ad:05:69:56:17:4f:06:fb:91:a6:42:b3:dd:
bb:d3:59:4e:18:ad:2d:4a:4b:9a:3d:4e:64:3c:cb:
f5:6b:47:87:67:36:dc:4e:40:11:84:be:68:d1:32:
b4:b0:24:d6:5e:38:9f:cc:0d:6d:a4:b9:46:04:2e:
b7:d4:6e:1a:99:fb:e3:55:d1:ea:92:69:e2:17:5e:
5f:98:3e:5a:61:76:bf:53:2a:42:31:4c:59:f4:2e:
4d:8b:43:46:a1:45:1f:c6:af:70:66:bd:e1:65:9d:
38:11:17:5e:d0:5d:0c:c1:ae:07:e9:79:21:bb:7b:
5b:2f:96:b3:13:a8:d0:06:07:c2:8c:99:fd:cb:b4:
91:8b:dc:63:80:86:91:ed:2f:25:ef:3d:ec:e2:6e:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:58:EB:F6:FA:45:A5:DE:29:72:8F:7D:C2:32:13:1B:EE:7C:25
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RBdY6_b6RaXeKXKPfcIyExvufCU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
96:14:9f:2d:ce:e6:8c:a7:57:96:bc:dc:fc:44:81:06:e6:a6:
0c:2a:4a:41:84:aa:bb:e5:e1:db:f2:bb:5e:61:86:8d:c4:68:
a0:32:8f:fb:9f:8a:c2:a4:b1:45:07:6c:23:fc:de:a3:f9:b2:
1e:31:8b:7c:27:24:18:e3:08:e9:ab:e9:72:48:e8:41:af:00:
40:6c:16:7d:cb:82:90:33:cc:d4:b3:cd:e9:e7:6e:6b:a6:57:
c2:5f:e5:c9:db:9e:a9:33:d2:5b:7f:6c:8b:fd:24:68:6e:1f:
08:4a:84:64:62:0d:01:14:92:1e:8a:54:11:ba:8d:a1:ea:0f:
0f:21:18:99:3e:11:43:d6:09:60:18:01:85:c5:9b:5d:51:f9:
02:b6:25:6c:e0:cb:28:17:7e:67:b3:13:b4:94:a1:db:a2:c5:
d7:85:10:ac:a4:27:82:42:d9:e6:61:41:da:70:56:d8:27:c6:
4b:52:9d:35:b0:7b:21:e9:f7:2d:7d:4b:64:73:0c:c2:cb:e7:
13:ed:c2:04:e7:35:5b:59:b5:e4:36:56:22:be:6f:10:78:56:
1c:a1:cf:36:4c:dd:f6:8f:88:6a:1c:a0:47:22:90:bd:a6:fa:
6b:4d:8b:39:4a:86:db:e8:eb:b7:fe:58:b4:51:78:23:e7:93:
ce:25:70:65
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICT7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQy
MDIzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0MTc1OEVCRjZGQTQ1
QTVERTI5NzI4RjdEQzIzMjEzMUJFRTdDMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhbeKTNJ6xCp5dF0fcoRISgIBjT4L6duczihAJzMjlbFEnNygr
q8aHGxOF8ZGMOgq6Gg4OZEGPW1zIFp2G3oe/U3a6/B8Yv5xTJIDNTDRFCrRnzD7g
SJopUPLBQ5dHteydT+vB9OASgxubrQVpVhdPBvuRpkKz3bvTWU4YrS1KS5o9TmQ8
y/VrR4dnNtxOQBGEvmjRMrSwJNZeOJ/MDW2kuUYELrfUbhqZ++NV0eqSaeIXXl+Y
Plphdr9TKkIxTFn0Lk2LQ0ahRR/Gr3BmveFlnTgRF17QXQzBrgfpeSG7e1svlrMT
qNAGB8KMmf3LtJGL3GOAhpHtLyXvPezibv99AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQURBdY6/b6RaXeKXKPfcIyExvufCUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1JCZFk2X2I2UmFYZUtY
S1BmY0l5RXh2dWZDVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJYUny3O5oynV5a83PxEgQbmpgwqSkGE
qrvl4dvyu15hho3EaKAyj/ufisKksUUHbCP83qP5sh4xi3wnJBjjCOmr6XJI6EGv
AEBsFn3LgpAzzNSzzennbmumV8Jf5cnbnqkz0lt/bIv9JGhuHwhKhGRiDQEUkh6K
VBG6jaHqDw8hGJk+EUPWCWAYAYXFm11R+QK2JWzgyygXfmezE7SUoduixdeFEKyk
J4JC2eZhQdpwVtgnxktSnTWweyHp9y19S2RzDMLL5xPtwgTnNVtZteQ2ViK+bxB4
VhyhzzZM3faPiGocoEcikL2m+mtNizlKhtvo67f+WLRReCPnk84lcGU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:52 2025 by rpki-client