Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/REcKuZmmCZh1X6zgnf1GXxbB5V4.roa
File: REcKuZmmCZh1X6zgnf1GXxbB5V4.roa (raw, json)
Hash identifier: 5hoXrXC6TOr9wcS9s4614AawhNWs+QJEXRRN7Rd1hL4=
Subject key identifier: 44:47:0A:B9:99:A6:09:98:75:5F:AC:E0:9D:FD:46:5F:16:C1:E5:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 402F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/REcKuZmmCZh1X6zgnf1GXxbB5V4.roa
Signing time: Sun 14 Apr 2024 03:52:55 +0000
ROA not before: Sun 14 Apr 2024 03:52:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16431 (0x402f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 03:52:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=44470AB999A60998755FACE09DFD465F16C1E55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:6c:12:c3:a6:40:1a:a9:c2:d3:63:db:70:
46:53:cd:95:11:6d:a7:72:24:fe:d9:88:8a:dc:d6:
80:f3:78:9b:ae:14:19:5b:62:5b:8f:29:e0:18:18:
64:81:28:63:60:cc:58:53:06:c4:76:01:78:de:14:
08:8f:53:94:d8:0b:8a:ef:80:7f:24:24:56:6a:a6:
cc:b0:42:fd:31:af:ed:33:55:52:b3:b8:71:3a:52:
d9:9b:08:cf:ce:d9:b3:d7:05:a5:4f:0d:c3:34:57:
d8:50:a9:bc:f9:1d:c2:a4:05:5c:f2:13:07:b2:2f:
b9:07:f2:28:17:f5:cd:69:12:91:4e:31:a9:28:49:
16:65:54:bb:56:3c:22:7f:9a:1e:23:79:19:41:a2:
1d:e4:fe:f5:a1:87:bd:c5:3b:9a:87:f6:69:42:54:
d5:0b:ff:c9:47:10:4c:b4:c0:3a:7a:0a:21:92:30:
c2:fd:65:9f:82:a5:1c:ef:53:d6:61:04:3a:a2:f8:
e7:d2:c2:b3:1b:7b:af:59:c2:9f:d6:81:5d:b1:c5:
fd:b0:64:f8:f6:ec:c9:b2:51:01:4a:38:c9:38:a3:
9e:42:b2:56:d8:f3:6b:8b:83:95:d0:97:22:98:23:
13:e4:a3:f4:b6:58:de:e3:69:b3:9f:3f:32:21:21:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:0A:B9:99:A6:09:98:75:5F:AC:E0:9D:FD:46:5F:16:C1:E5:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/REcKuZmmCZh1X6zgnf1GXxbB5V4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:af:e4:a0:65:99:dd:ee:41:a4:6d:db:1b:8c:52:74:ab:0d:
b1:a9:dd:4e:40:47:63:96:97:5c:de:7e:67:bb:2a:7e:09:fd:
0c:e7:ac:04:b1:26:b9:44:38:2c:6d:04:38:5c:02:69:e2:c5:
31:79:62:61:34:1f:68:f5:16:cb:3c:55:4a:ec:c1:d0:93:94:
c3:c0:b4:6a:a7:09:9c:48:46:d7:63:1f:d1:a5:c4:92:ff:e2:
97:b1:5e:ab:d4:8c:ff:4b:4a:04:16:51:4d:30:96:68:4b:51:
43:81:1b:3d:42:76:e8:c5:4e:ce:22:73:5d:75:2a:ae:ea:16:
39:19:ab:c1:dd:6d:d4:02:cc:06:6b:bc:5e:c1:ba:10:92:c7:
ee:78:f6:5c:4e:5a:34:8b:57:43:90:47:02:2f:43:45:7c:3c:
51:6e:2a:11:7c:cd:6e:a0:26:bc:4d:78:09:bb:13:04:58:f0:
b3:67:13:f5:10:6b:9f:b0:92:71:a5:c7:08:eb:fe:10:22:8c:
4f:fc:c5:29:03:df:a4:e1:7a:f5:0f:9e:26:06:82:09:9e:37:
fe:7e:d1:a6:93:9a:8c:67:d9:b8:1f:4e:03:6d:b8:ee:a0:a4:
ad:f8:f9:81:75:f8:5c:db:5e:ae:3e:b9:17:c2:4c:e1:b5:22:
ef:8d:4f:c6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQw
MzUyNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ0NDcwQUI5OTlBNjA5
OTg3NTVGQUNFMDlERkQ0NjVGMTZDMUU1NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD/GwSw6ZAGqnC02PbcEZTzZURbadyJP7ZiIrc1oDzeJuuFBlb
YluPKeAYGGSBKGNgzFhTBsR2AXjeFAiPU5TYC4rvgH8kJFZqpsywQv0xr+0zVVKz
uHE6UtmbCM/O2bPXBaVPDcM0V9hQqbz5HcKkBVzyEweyL7kH8igX9c1pEpFOMako
SRZlVLtWPCJ/mh4jeRlBoh3k/vWhh73FO5qH9mlCVNUL/8lHEEy0wDp6CiGSMML9
ZZ+CpRzvU9ZhBDqi+OfSwrMbe69Zwp/WgV2xxf2wZPj27MmyUQFKOMk4o55CslbY
82uLg5XQlyKYIxPko/S2WN7jabOfPzIhIbB7AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUREcKuZmmCZh1X6zgnf1GXxbB5V4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1JFY0t1Wm1tQ1poMVg2
emduZjFHWHhiQjVWNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALav5KBlmd3uQaRt2xuMUnSrDbGp3U5A
R2OWl1zefme7Kn4J/QznrASxJrlEOCxtBDhcAmnixTF5YmE0H2j1Fss8VUrswdCT
lMPAtGqnCZxIRtdjH9GlxJL/4pexXqvUjP9LSgQWUU0wlmhLUUOBGz1CdujFTs4i
c111Kq7qFjkZq8HdbdQCzAZrvF7BuhCSx+549lxOWjSLV0OQRwIvQ0V8PFFuKhF8
zW6gJrxNeAm7EwRY8LNnE/UQa5+wknGlxwjr/hAijE/8xSkD36ThevUPniYGggme
N/5+0aaTmoxn2bgfTgNtuO6gpK34+YF1+FzbXq4+uRfCTOG1Iu+NT8Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org