Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U6wYmFBoXb80ERgG-uE4igZIark.roa
File: U6wYmFBoXb80ERgG-uE4igZIark.roa (raw, json)
Hash identifier: JlnuDRmBC0lZquJD1aT+1oLCZnv8jIiFNGINP0wttRU=
Subject key identifier: 53:AC:18:98:50:68:5D:BF:34:11:18:06:FA:E1:38:8A:06:48:6A:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38DB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U6wYmFBoXb80ERgG-uE4igZIark.roa
Signing time: Thu 04 Apr 2024 09:22:20 +0000
ROA not before: Thu 04 Apr 2024 09:22:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14555 (0x38db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 09:22:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53AC189850685DBF34111806FAE1388A06486AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:6b:16:dc:df:50:01:29:ef:79:1c:e2:d7:
75:f5:0f:4b:fe:1f:fd:ab:13:cd:43:11:dd:6c:fd:
c5:3a:65:5c:b2:fe:db:4d:02:98:15:16:0e:d1:42:
76:ea:a8:ad:7f:e8:39:13:6c:20:67:63:85:48:fb:
44:0a:c9:cc:a9:9e:7f:52:8c:7d:bf:61:35:4f:d5:
71:b4:42:66:5b:a7:d1:79:62:bd:ce:47:c9:60:06:
88:8e:20:49:2c:fd:e1:fb:d4:ff:a2:b4:3c:8d:61:
ed:bf:76:5b:cc:24:a8:23:39:6c:84:02:0c:60:b0:
66:76:96:25:07:41:48:a4:09:36:ff:0d:cb:89:8b:
4a:57:0b:d5:15:3f:d5:cc:48:08:7a:c7:a6:67:ae:
90:04:b6:b3:46:f6:c9:c9:02:d0:dd:42:94:ae:33:
18:90:31:c9:02:f1:c8:6c:21:3c:1e:ba:89:c1:7b:
48:9f:11:72:74:97:eb:72:eb:f4:b0:f9:98:d9:5d:
36:ea:8b:ff:6b:5a:1b:e3:31:a7:f6:a4:14:32:c4:
d7:df:38:fb:eb:09:bf:c6:67:b7:c3:2e:c8:ac:a3:
06:c2:c1:3e:98:8e:0a:f1:15:2e:25:b2:29:10:5b:
be:31:db:e3:db:cf:9c:0d:8c:ef:f1:b1:1f:29:22:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:18:98:50:68:5D:BF:34:11:18:06:FA:E1:38:8A:06:48:6A:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U6wYmFBoXb80ERgG-uE4igZIark.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
37:69:95:b8:63:f3:c8:e8:77:37:2f:ed:99:d7:cf:0a:41:5e:
d7:01:3a:29:49:19:ef:e0:48:65:84:79:e2:62:c9:9e:77:6d:
00:17:4e:dd:95:03:f8:90:02:50:b7:35:0b:3c:58:35:fd:0a:
3c:e4:66:19:97:29:75:e4:82:3c:1a:a0:6b:42:a0:1d:26:22:
51:ed:cd:3d:84:23:29:e6:a3:50:c6:e2:1e:13:f4:e9:04:9d:
7f:fe:8e:1b:aa:54:87:4d:83:4a:03:8b:a5:d0:ac:b0:05:2e:
b6:90:5d:33:99:9e:6a:f4:67:eb:de:7f:aa:6c:95:6a:d9:a5:
c4:98:01:63:d9:7b:ee:79:0a:bc:e0:5c:b8:ee:e9:90:46:05:
51:c2:e7:6e:36:7d:6d:ee:1b:51:2f:29:df:36:e5:3d:86:4d:
81:f6:80:f0:40:9b:b2:b0:43:59:4e:03:7f:d1:64:39:89:a0:
df:4d:19:e3:a7:cc:e3:91:a4:41:9d:ed:59:d7:1c:8d:6a:ad:
61:cd:92:65:7b:37:80:5d:61:e2:8e:f5:0f:0a:37:af:ab:67:
6a:06:7d:7a:6c:cb:b9:e4:4d:85:99:7d:8b:d0:76:ee:60:e6:
2f:64:27:76:f2:38:0e:5f:21:f5:14:a5:2b:e8:fc:04:17:8c:
67:85:a2:ce
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICONswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQw
OTIyMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUzQUMxODk4NTA2ODVE
QkYzNDExMTgwNkZBRTEzODhBMDY0ODZBQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnLGsW3N9QASnveRzi13X1D0v+H/2rE81DEd1s/cU6ZVyy/ttN
ApgVFg7RQnbqqK1/6DkTbCBnY4VI+0QKycypnn9SjH2/YTVP1XG0QmZbp9F5Yr3O
R8lgBoiOIEks/eH71P+itDyNYe2/dlvMJKgjOWyEAgxgsGZ2liUHQUikCTb/DcuJ
i0pXC9UVP9XMSAh6x6ZnrpAEtrNG9snJAtDdQpSuMxiQMckC8chsITweuonBe0if
EXJ0l+ty6/Sw+ZjZXTbqi/9rWhvjMaf2pBQyxNffOPvrCb/GZ7fDLsisowbCwT6Y
jgrxFS4lsikQW74x2+Pbz5wNjO/xsR8pIqxpAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUU6wYmFBoXb80ERgG+uE4igZIarkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1U2d1ltRkJvWGI4MEVS
Z0ctdUU0aWdaSWFyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADdplbhj88jodzcv7ZnXzwpBXtcBOilJ
Ge/gSGWEeeJiyZ53bQAXTt2VA/iQAlC3NQs8WDX9CjzkZhmXKXXkgjwaoGtCoB0m
IlHtzT2EIynmo1DG4h4T9OkEnX/+jhuqVIdNg0oDi6XQrLAFLraQXTOZnmr0Z+ve
f6pslWrZpcSYAWPZe+55CrzgXLju6ZBGBVHC5242fW3uG1EvKd825T2GTYH2gPBA
m7KwQ1lOA3/RZDmJoN9NGeOnzOORpEGd7VnXHI1qrWHNkmV7N4BdYeKO9Q8KN6+r
Z2oGfXpsy7nkTYWZfYvQdu5g5i9kJ3byOA5fIfUUpSvo/AQXjGeFos4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org