Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RTW40cqBxc_5jTHpkN4S3PIm9ms.roa
File: RTW40cqBxc_5jTHpkN4S3PIm9ms.roa (raw, json)
Hash identifier: ZJJcJOTrguvlLH4Yt7W+tjeTROdm71H9gm4UzpdFHVE=
Subject key identifier: 45:35:B8:D1:CA:81:C5:CF:F9:8D:31:E9:90:DE:12:DC:F2:26:F6:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5777
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RTW40cqBxc_5jTHpkN4S3PIm9ms.roa
Signing time: Wed 15 May 2024 04:54:11 +0000
ROA not before: Wed 15 May 2024 04:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22391 (0x5777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 04:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4535B8D1CA81C5CFF98D31E990DE12DCF226F66B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:2a:59:a9:40:34:20:53:2b:8b:ab:a7:2f:
8d:0b:6e:cc:13:d9:44:a4:15:7a:bf:b9:9e:a1:59:
00:19:43:f3:01:91:12:85:3e:db:a5:2e:01:21:96:
80:fd:56:0d:aa:e1:79:68:4d:1a:43:c3:7c:36:b2:
12:16:0a:a7:de:da:e9:5e:d9:35:5d:17:7c:6d:15:
98:e8:71:e0:70:00:96:35:3f:6a:51:96:87:63:fd:
8f:1a:f8:9d:c6:4b:fb:f8:ad:b1:86:ba:8d:ec:ce:
52:9a:c9:b5:c9:03:2d:30:08:2a:6c:20:c9:6a:d8:
32:18:5d:ec:b3:a8:12:aa:b2:9b:a3:1b:31:25:0f:
a7:c7:6b:f9:17:d3:61:48:09:a3:3b:e3:de:36:6a:
0c:03:04:b1:fe:63:30:0b:c4:d5:4d:d7:da:14:60:
fb:39:49:96:68:9e:c8:b8:8b:2b:f0:ae:6d:73:2f:
42:ae:65:8e:be:fe:76:1f:fe:0a:b4:ec:28:cd:a0:
db:79:de:e3:23:33:6d:58:88:9d:7b:c1:16:0d:3e:
da:2d:41:20:f4:a7:88:03:5a:47:75:f6:31:77:60:
03:29:f4:df:83:9f:83:cd:9d:95:d5:c9:55:f2:89:
99:8c:7f:c2:22:76:29:73:ee:b6:bc:f9:56:0d:ac:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:B8:D1:CA:81:C5:CF:F9:8D:31:E9:90:DE:12:DC:F2:26:F6:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RTW40cqBxc_5jTHpkN4S3PIm9ms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
75:c9:7f:ac:50:97:0a:14:66:be:5c:46:4e:6a:92:47:bd:00:
76:2f:9d:06:9a:7c:f6:9f:49:b9:64:d8:5d:d2:78:57:2c:b8:
b6:af:ae:17:3d:6a:d0:cd:91:67:1b:43:a7:9f:f3:db:37:11:
0c:e8:63:20:f1:f8:65:bd:69:98:55:46:ff:1b:45:52:5c:d2:
98:98:ee:34:09:23:02:75:54:dc:4c:95:00:cc:5c:5a:3e:85:
42:5a:f5:fd:e9:15:cb:d5:0a:6c:1c:2f:d0:51:a8:2a:8d:f9:
8a:b9:6d:64:ed:bb:f7:12:d7:80:6b:28:05:3b:5a:37:57:c2:
58:e7:21:32:b1:07:ce:2b:c8:31:b9:e5:7c:d5:85:ec:18:0f:
9f:8c:b8:58:0a:ef:a2:e0:20:10:69:ba:29:aa:40:88:c5:7a:
a3:b9:04:25:2a:98:4c:8b:69:58:11:c5:f6:6f:a1:54:c5:91:
5b:99:f0:f8:a2:34:5d:d4:04:86:87:7e:45:12:9d:a2:3d:f6:
b2:02:13:2c:5d:24:30:c2:c4:59:9e:a6:06:83:af:ab:77:ef:
a2:ef:1d:a0:ac:ac:15:47:65:da:28:81:a7:fc:53:a3:e6:3a:
3f:84:af:b3:63:ef:4a:8c:a8:bc:19:0f:a2:9c:9d:8a:2e:c2:
e7:71:7f:a4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICV3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUw
NDU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ1MzVCOEQxQ0E4MUM1
Q0ZGOThEMzFFOTkwREUxMkRDRjIyNkY2NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmfSpZqUA0IFMri6unL40LbswT2USkFXq/uZ6hWQAZQ/MBkRKF
PtulLgEhloD9Vg2q4XloTRpDw3w2shIWCqfe2ule2TVdF3xtFZjoceBwAJY1P2pR
lodj/Y8a+J3GS/v4rbGGuo3szlKaybXJAy0wCCpsIMlq2DIYXeyzqBKqspujGzEl
D6fHa/kX02FICaM74942agwDBLH+YzALxNVN19oUYPs5SZZonsi4iyvwrm1zL0Ku
ZY6+/nYf/gq07CjNoNt53uMjM21YiJ17wRYNPtotQSD0p4gDWkd19jF3YAMp9N+D
n4PNnZXVyVXyiZmMf8Iidilz7ra8+VYNrBS1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQURTW40cqBxc/5jTHpkN4S3PIm9mswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1JUVzQwY3FCeGNfNWpU
SHBrTjRTM1BJbTltcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHXJf6xQlwoUZr5cRk5qkke9AHYvnQaa
fPafSblk2F3SeFcsuLavrhc9atDNkWcbQ6ef89s3EQzoYyDx+GW9aZhVRv8bRVJc
0piY7jQJIwJ1VNxMlQDMXFo+hUJa9f3pFcvVCmwcL9BRqCqN+Yq5bWTtu/cS14Br
KAU7WjdXwljnITKxB84ryDG55XzVhewYD5+MuFgK76LgIBBpuimqQIjFeqO5BCUq
mEyLaVgRxfZvoVTFkVuZ8PiiNF3UBIaHfkUSnaI99rICEyxdJDDCxFmepgaDr6t3
76LvHaCsrBVHZdoogaf8U6PmOj+Er7Nj70qMqLwZD6KcnYouwudxf6Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:41 2024 by rpki-client on console-ams.rpki-client.org