Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UQXr95dehc8F0agPdGDKdtD6t8k.roa
File: UQXr95dehc8F0agPdGDKdtD6t8k.roa (raw, json)
Hash identifier: GSBReklI4tbujiMCeFb6N8JSqabY4UOTOFiAJGfFlpg=
Subject key identifier: 51:05:EB:F7:97:5E:85:CF:05:D1:A8:0F:74:60:CA:76:D0:FA:B7:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 456B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQXr95dehc8F0agPdGDKdtD6t8k.roa
Signing time: Sun 21 Apr 2024 03:23:06 +0000
ROA not before: Sun 21 Apr 2024 03:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17771 (0x456b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 03:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5105EBF7975E85CF05D1A80F7460CA76D0FAB7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:03:cb:6f:26:f1:ed:7c:f2:00:a2:7a:62:
38:55:3c:f6:62:71:30:14:7f:2b:d6:39:88:e2:ff:
e3:f7:2c:ba:5d:df:3c:3b:1d:38:1d:49:22:88:e9:
fe:c3:68:72:45:b4:5d:43:a2:3f:d1:07:9d:06:30:
57:6f:4e:b0:3f:10:81:be:39:f8:3d:b8:fd:ac:cf:
96:27:ae:ee:32:49:12:0a:dc:01:8c:36:a9:3d:7a:
20:cc:25:4c:0c:7e:52:a9:d6:62:28:b0:7c:32:28:
ac:e5:b5:53:03:5f:24:97:a5:51:0e:4d:17:50:60:
89:d0:be:17:a1:1d:6a:15:c6:1d:e8:0b:d2:c7:9f:
dd:f9:75:29:2b:1b:49:68:bf:72:bf:0b:a1:21:0a:
41:35:aa:8d:b7:53:5b:e9:6a:4c:be:42:3c:fc:10:
5e:2a:c4:46:bc:87:01:6f:bb:36:e0:ec:d0:f1:a2:
4b:13:ec:a0:fc:d8:33:5c:43:d2:29:37:3e:0d:e8:
a7:49:89:eb:ad:71:38:18:56:5b:3b:fa:f9:32:65:
3a:d6:89:25:26:8e:d7:c0:de:75:f0:b3:27:1e:c6:
e8:18:84:75:3f:56:1c:aa:08:4b:93:3f:97:85:f6:
34:1a:46:b6:bb:81:4a:60:b8:93:10:25:4c:ba:70:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:EB:F7:97:5E:85:CF:05:D1:A8:0F:74:60:CA:76:D0:FA:B7:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQXr95dehc8F0agPdGDKdtD6t8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:71:d6:31:70:e5:0c:b5:c2:29:38:b4:43:01:76:31:a5:f3:
f7:36:45:3a:28:fd:10:f8:40:c2:74:30:49:bf:19:3d:8c:4b:
25:f2:ef:a1:1f:c2:38:18:0d:8f:be:d6:e6:47:4d:69:8d:7a:
c3:a8:90:a3:b9:81:d9:f9:f0:a6:ef:1e:8a:7b:3d:ef:4a:b9:
41:a2:f7:e0:6a:b2:bc:42:2d:a5:36:a1:6b:12:4e:94:81:25:
8d:00:f0:ec:13:b3:6f:6e:ac:14:ec:76:b6:49:37:54:f7:23:
a3:65:47:fb:18:c2:9e:f8:1b:7c:d3:be:50:3e:cf:49:3d:cc:
c7:90:0e:24:06:b8:83:75:00:44:86:9a:69:dc:0a:5c:b6:b1:
37:d2:e7:c3:32:0e:e3:70:6f:16:47:e5:73:0e:ba:1f:94:e9:
f5:e1:e9:dd:11:a2:f0:99:b7:56:32:ed:04:6f:56:8e:29:a3:
a5:a6:af:50:db:4f:b2:cb:c8:73:98:48:7d:3f:19:0f:a2:bd:
42:c5:cc:31:5e:89:a9:8f:40:e8:61:2e:e7:49:b6:0c:eb:93:
07:71:83:a9:70:9c:5e:eb:00:8a:2b:17:0e:2a:75:c5:30:2a:
1d:50:f6:a6:50:25:91:cd:14:da:1f:db:b7:b3:03:fd:48:46:
8e:8e:f3:bb
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjEw
MzIzMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUxMDVFQkY3OTc1RTg1
Q0YwNUQxQTgwRjc0NjBDQTc2RDBGQUI3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHSwPLbybx7XzyAKJ6YjhVPPZicTAUfyvWOYji/+P3LLpd3zw7
HTgdSSKI6f7DaHJFtF1Doj/RB50GMFdvTrA/EIG+Ofg9uP2sz5Ynru4ySRIK3AGM
Nqk9eiDMJUwMflKp1mIosHwyKKzltVMDXySXpVEOTRdQYInQvhehHWoVxh3oC9LH
n935dSkrG0lov3K/C6EhCkE1qo23U1vpaky+Qjz8EF4qxEa8hwFvuzbg7NDxoksT
7KD82DNcQ9IpNz4N6KdJieutcTgYVls7+vkyZTrWiSUmjtfA3nXwsycexugYhHU/
VhyqCEuTP5eF9jQaRra7gUpguJMQJUy6cBFJAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUUQXr95dehc8F0agPdGDKdtD6t8kwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VRWHI5NWRlaGM4RjBh
Z1BkR0RLZHRENnQ4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABZx1jFw5Qy1wik4tEMBdjGl8/c2RToo
/RD4QMJ0MEm/GT2MSyXy76EfwjgYDY++1uZHTWmNesOokKO5gdn58KbvHop7Pe9K
uUGi9+BqsrxCLaU2oWsSTpSBJY0A8OwTs29urBTsdrZJN1T3I6NlR/sYwp74G3zT
vlA+z0k9zMeQDiQGuIN1AESGmmncCly2sTfS58MyDuNwbxZH5XMOuh+U6fXh6d0R
ovCZt1Yy7QRvVo4po6Wmr1DbT7LLyHOYSH0/GQ+ivULFzDFeiamPQOhhLudJtgzr
kwdxg6lwnF7rAIorFw4qdcUwKh1Q9qZQJZHNFNof27ezA/1IRo6O87s=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:12 2025 by rpki-client