Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T-JjoYPiBSr5rtKE2nrGdr2dy-U.roa
File: T-JjoYPiBSr5rtKE2nrGdr2dy-U.roa (raw, json)
Hash identifier: 92/3QMvX4fm/pKTC8tDu22BqMXomHGRbkplJn9WJ2F8=
Subject key identifier: 4F:E2:63:A1:83:E2:05:2A:F9:AE:D2:84:DA:7A:C6:76:BD:9D:CB:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 452B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T-JjoYPiBSr5rtKE2nrGdr2dy-U.roa
Signing time: Sat 20 Apr 2024 19:23:06 +0000
ROA not before: Sat 20 Apr 2024 19:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17707 (0x452b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 19:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4FE263A183E2052AF9AED284DA7AC676BD9DCBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:2e:fd:16:8b:cd:11:a4:29:bb:60:a5:f3:
4b:b7:04:cb:85:df:f8:67:b8:d6:32:6d:d8:2d:96:
0e:3a:33:e8:ec:14:e9:c1:65:4d:bd:fa:60:3e:08:
43:d4:a6:48:d2:e6:26:76:f5:01:82:70:d5:ea:21:
29:e0:9e:50:66:68:0a:f4:7e:f3:eb:54:58:ab:e2:
a3:95:91:04:5e:40:32:bd:c7:3c:ab:7d:09:ba:0b:
0f:c0:d3:6b:e5:16:d4:69:94:c5:8d:18:f7:1d:f4:
0e:03:7e:86:c5:e7:9a:e3:e0:91:dd:34:43:df:1b:
94:ee:e8:14:db:1b:b8:6e:69:7c:64:8a:f3:81:b1:
64:c0:62:20:7c:8f:01:e7:d9:0a:9c:b0:7f:9f:ae:
1e:b7:7b:cd:fc:5c:a8:25:95:55:e6:46:a3:34:19:
25:07:77:c7:27:22:6b:73:28:b5:b4:ba:a4:44:d9:
f2:79:d2:26:49:5a:88:93:9b:24:be:2c:fe:a0:88:
6d:cd:53:57:e0:f5:cc:30:90:70:d2:48:10:ed:b0:
3e:94:85:ad:1f:5f:e3:a0:0a:88:6f:48:ee:a9:ac:
35:57:bf:1a:7b:b4:35:0a:69:f2:36:82:6b:a6:e2:
d9:6b:73:cf:c4:93:d0:1a:9c:5e:d6:66:c1:79:17:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:63:A1:83:E2:05:2A:F9:AE:D2:84:DA:7A:C6:76:BD:9D:CB:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T-JjoYPiBSr5rtKE2nrGdr2dy-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:10:04:98:20:5b:8a:26:df:f9:d2:e5:49:4f:f5:6a:e4:fb:
e6:c3:44:02:4b:05:90:54:38:05:4b:94:38:7c:c4:12:5d:6f:
e3:f6:80:7a:2b:49:b4:57:cd:cd:0b:3f:fc:5c:aa:29:26:a4:
7b:3d:42:13:99:7e:90:15:26:a6:ff:c3:3a:8d:c8:cc:0b:84:
e7:7c:ba:c6:28:f4:4d:3d:2a:27:9b:c7:da:ea:66:b9:57:00:
d3:b5:bf:a8:13:53:76:33:3e:5a:76:f3:ec:cc:77:93:4a:cf:
be:50:8e:43:74:f2:90:57:b3:d4:a7:b1:7a:ec:2b:f6:d5:b2:
ed:33:5c:1f:ec:40:b2:45:6d:28:da:28:aa:aa:c8:74:68:a1:
cd:42:75:eb:b6:02:63:69:7e:84:79:90:96:3e:29:36:20:0b:
2d:0e:4d:c3:51:e9:58:b0:d9:e2:c0:cd:8f:b2:29:f2:c6:d0:
54:46:96:f3:b9:f1:9d:d3:76:8a:36:72:fc:6e:e2:80:60:fc:
89:bc:c6:35:6a:14:7f:8b:f7:c5:2d:44:96:46:64:6e:89:14:
48:b4:96:1a:57:c9:df:12:e8:a2:90:d2:6f:dc:df:42:5f:4f:
e0:d9:1b:2b:f3:18:43:fd:68:75:00:ec:13:64:32:a3:19:55:
17:c9:bf:e6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
OTIzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRGRTI2M0ExODNFMjA1
MkFGOUFFRDI4NERBN0FDNjc2QkQ5RENCRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxHC79FovNEaQpu2Cl80u3BMuF3/hnuNYybdgtlg46M+jsFOnB
ZU29+mA+CEPUpkjS5iZ29QGCcNXqISngnlBmaAr0fvPrVFir4qOVkQReQDK9xzyr
fQm6Cw/A02vlFtRplMWNGPcd9A4DfobF55rj4JHdNEPfG5Tu6BTbG7huaXxkivOB
sWTAYiB8jwHn2QqcsH+frh63e838XKgllVXmRqM0GSUHd8cnImtzKLW0uqRE2fJ5
0iZJWoiTmyS+LP6giG3NU1fg9cwwkHDSSBDtsD6Uha0fX+OgCohvSO6prDVXvxp7
tDUKafI2gmum4tlrc8/Ek9AanF7WZsF5Fy+NAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUT+JjoYPiBSr5rtKE2nrGdr2dy+UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1QtSmpvWVBpQlNyNXJ0
S0UybnJHZHIyZHktVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAG4QBJggW4om3/nS5UlP9Wrk++bDRAJL
BZBUOAVLlDh8xBJdb+P2gHorSbRXzc0LP/xcqikmpHs9QhOZfpAVJqb/wzqNyMwL
hOd8usYo9E09Kiebx9rqZrlXANO1v6gTU3YzPlp28+zMd5NKz75QjkN08pBXs9Sn
sXrsK/bVsu0zXB/sQLJFbSjaKKqqyHRooc1Cdeu2AmNpfoR5kJY+KTYgCy0OTcNR
6Viw2eLAzY+yKfLG0FRGlvO58Z3Tdoo2cvxu4oBg/Im8xjVqFH+L98UtRJZGZG6J
FEi0lhpXyd8S6KKQ0m/c30JfT+DZGyvzGEP9aHUA7BNkMqMZVRfJv+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org