Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RxrU2d8MeRM_EGGzUE66XSTrYsk.roa
File: RxrU2d8MeRM_EGGzUE66XSTrYsk.roa (raw, json)
Hash identifier: LwibSeUsbXO10JuinNwpdES9loXcYh6Vz2/KP33fUhA=
Subject key identifier: 47:1A:D4:D9:DF:0C:79:13:3F:10:61:B3:50:4E:BA:5D:24:EB:62:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 554F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RxrU2d8MeRM_EGGzUE66XSTrYsk.roa
Signing time: Sun 12 May 2024 07:54:04 +0000
ROA not before: Sun 12 May 2024 07:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21839 (0x554f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 07:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=471AD4D9DF0C79133F1061B3504EBA5D24EB62C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:e6:b0:3d:de:f6:ca:f3:63:51:ed:e7:a3:
fa:aa:ec:65:c0:e2:eb:ab:a7:88:69:5e:e6:8e:98:
0c:ee:b9:b3:12:7e:75:e4:9b:70:b5:1e:aa:3b:e3:
33:95:c9:52:e5:30:37:a8:f5:82:46:7b:a5:d0:15:
28:b2:28:4f:0d:af:eb:1f:f3:b5:f3:9e:ff:0f:4e:
d9:6a:19:2e:57:80:fc:49:29:60:3c:f4:19:b3:fa:
3d:71:1f:9c:7f:71:09:d2:df:7a:8e:9b:3b:50:8e:
d3:3c:27:9a:90:8f:65:5a:cf:67:a9:b7:f5:25:e6:
1d:fc:44:b2:8a:fe:98:b5:8c:23:e7:65:e8:7b:ed:
f1:6a:87:d4:e7:0c:4e:d7:6f:5c:06:14:cd:ed:83:
ec:a0:09:0b:fa:51:db:fc:93:84:f8:e4:d1:1f:58:
d2:46:ea:48:61:2e:b4:13:e4:c3:f6:4d:05:5f:78:
67:05:f7:8e:8c:f7:d8:f2:23:64:a2:95:6d:5a:bc:
bb:66:70:a2:d0:5f:09:c8:6b:44:8a:d2:91:fb:de:
39:e9:a2:5b:8a:a7:20:49:e0:c7:ff:7a:e9:9e:81:
63:7d:12:a6:9b:2c:43:b0:8f:bc:e5:e4:e9:69:51:
33:c6:35:bc:fe:ef:f2:61:16:c3:bd:a7:98:81:93:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:D4:D9:DF:0C:79:13:3F:10:61:B3:50:4E:BA:5D:24:EB:62:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RxrU2d8MeRM_EGGzUE66XSTrYsk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:71:aa:bd:f7:e3:db:3e:df:be:b7:10:b7:62:e6:d1:dd:de:
83:ea:1c:74:05:21:c5:92:f0:40:d5:bb:bd:b4:e6:d2:d5:99:
eb:d5:2e:b0:c8:c7:f5:e2:73:5e:30:33:c4:f5:59:95:69:34:
eb:4f:04:38:58:4a:1e:08:c7:cf:80:0d:ad:1f:d5:d7:fa:4f:
6f:5d:29:d2:fa:f3:d1:d8:af:74:f7:15:ab:d8:03:15:09:2a:
52:c9:cb:c2:ce:73:3d:7e:08:27:ba:a2:b1:74:93:14:f3:4f:
d2:c2:52:3a:41:20:29:40:5c:8e:f9:6f:57:56:81:df:e6:d7:
dc:1b:47:1e:3c:08:56:d3:3c:fd:51:01:93:4f:fa:85:f6:38:
81:90:5c:34:33:e1:c4:7e:96:7d:77:b0:b9:60:f2:d8:47:5e:
35:b9:2e:1f:82:2e:56:ab:d5:3a:67:67:2a:9e:c8:e5:16:60:
d5:29:5f:f2:53:52:42:d7:f2:93:90:bb:04:48:c5:a7:77:7d:
5b:34:4f:18:68:36:a4:3b:b6:db:dc:f5:c0:a8:33:47:0f:be:
b7:bb:e3:9f:59:01:b4:7e:25:64:af:c0:94:2c:53:d6:fa:3e:
cf:8b:24:f6:62:1e:21:38:ef:41:40:fd:70:af:ec:6e:4c:e2:
45:e6:e4:de
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTIw
NzU0MDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ3MUFENEQ5REYwQzc5
MTMzRjEwNjFCMzUwNEVCQTVEMjRFQjYyQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt+OawPd72yvNjUe3no/qq7GXA4uurp4hpXuaOmAzuubMSfnXk
m3C1Hqo74zOVyVLlMDeo9YJGe6XQFSiyKE8Nr+sf87Xznv8PTtlqGS5XgPxJKWA8
9Bmz+j1xH5x/cQnS33qOmztQjtM8J5qQj2Vaz2ept/Ul5h38RLKK/pi1jCPnZeh7
7fFqh9TnDE7Xb1wGFM3tg+ygCQv6Udv8k4T45NEfWNJG6khhLrQT5MP2TQVfeGcF
946M99jyI2SilW1avLtmcKLQXwnIa0SK0pH73jnpoluKpyBJ4Mf/eumegWN9Eqab
LEOwj7zl5OlpUTPGNbz+7/JhFsO9p5iBkzo9AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQURxrU2d8MeRM/EGGzUE66XSTrYskwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1J4clUyZDhNZVJNX0VH
R3pVRTY2WFNUcllzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAF5xqr3349s+3763ELdi5tHd3oPqHHQF
IcWS8EDVu7205tLVmevVLrDIx/Xic14wM8T1WZVpNOtPBDhYSh4Ix8+ADa0f1df6
T29dKdL689HYr3T3FavYAxUJKlLJy8LOcz1+CCe6orF0kxTzT9LCUjpBIClAXI75
b1dWgd/m19wbRx48CFbTPP1RAZNP+oX2OIGQXDQz4cR+ln13sLlg8thHXjW5Lh+C
Llar1TpnZyqeyOUWYNUpX/JTUkLX8pOQuwRIxad3fVs0TxhoNqQ7ttvc9cCoM0cP
vre7459ZAbR+JWSvwJQsU9b6Ps+LJPZiHiE470FA/XCv7G5M4kXm5N4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:42 2024 by rpki-client on console-ams.rpki-client.org