Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VULptQwurZPj-Wt-AeDh_wtSsoQ.roa
File: VULptQwurZPj-Wt-AeDh_wtSsoQ.roa (raw, json)
Hash identifier: TpD48J9dBTsq/ubr0h9FAGii0BP+fgFjX+HTeIb7ut0=
Subject key identifier: 55:42:E9:B5:0C:2E:AD:93:E3:F9:6B:7E:01:E0:E1:FF:0B:52:B2:84
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C2B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VULptQwurZPj-Wt-AeDh_wtSsoQ.roa
Signing time: Mon 08 Apr 2024 19:22:38 +0000
ROA not before: Mon 08 Apr 2024 19:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15403 (0x3c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 19:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5542E9B50C2EAD93E3F96B7E01E0E1FF0B52B284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:f4:c1:f9:47:9a:c6:7b:80:ab:af:31:c4:
f3:8b:1a:cf:9c:ae:14:8c:73:a8:73:a0:8c:72:52:
11:91:79:e1:55:9c:17:62:4c:2c:6a:89:2b:c9:5a:
89:09:15:1b:6d:6f:37:96:c8:f5:7c:b0:b8:e8:21:
1b:14:5f:87:5d:6f:ff:09:61:db:99:59:b5:db:46:
c3:47:a1:a6:54:27:8f:4a:5d:09:1e:7c:f1:bc:4c:
45:1d:9c:7a:cd:d0:5c:6f:af:c4:0e:ce:f0:3f:84:
4b:52:99:d8:c0:aa:d5:84:b1:a0:5f:8a:53:9c:e5:
d8:7b:23:fe:d1:d1:c4:d5:b3:5a:80:7f:f4:30:b9:
9e:dc:04:d1:77:3e:e3:73:81:4d:1b:5c:27:f8:bb:
81:26:32:63:85:f1:42:e1:7a:5d:19:e0:9e:df:46:
54:55:24:b2:62:ba:3d:23:db:82:40:cc:e4:11:ee:
63:91:05:0b:ff:86:a0:8a:e6:e7:b6:f9:fb:9c:31:
f7:97:b6:6a:d6:11:d4:5c:04:b7:cb:d1:b3:5d:40:
25:8e:87:a9:05:2c:66:ec:89:4e:81:90:57:44:85:
1a:1c:80:9e:c9:7a:a7:86:5a:89:58:2a:b5:db:1e:
21:c4:5f:63:fa:7f:67:dc:3d:cb:08:f9:6d:42:9e:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:E9:B5:0C:2E:AD:93:E3:F9:6B:7E:01:E0:E1:FF:0B:52:B2:84
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VULptQwurZPj-Wt-AeDh_wtSsoQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:43:87:4c:1e:dc:4e:2e:cd:9f:61:81:0b:92:3b:41:63:74:
85:9e:30:94:ab:df:96:2c:e8:68:92:6f:e2:b2:ff:4c:77:76:
21:18:2b:3e:74:63:3b:a6:e5:95:88:85:f5:ed:05:8d:4c:86:
e9:f3:92:26:fc:46:c0:83:dc:a1:9c:b7:30:6c:a3:26:db:c3:
b8:a6:47:8a:be:0f:aa:2b:6b:a7:a9:9e:54:6f:b8:a8:62:7f:
cc:7e:e4:ab:29:2e:48:1a:de:08:97:bb:2f:df:6b:a4:7e:4e:
0d:ad:d7:dc:63:0c:27:2c:0c:d4:b6:80:53:e8:0d:36:34:a1:
d1:bc:b4:ac:ce:07:ae:56:13:b5:69:51:fe:3c:64:c4:64:5a:
00:85:ce:b3:8b:1b:c9:5b:38:95:78:5c:14:4a:14:7a:67:bc:
14:f2:81:63:bd:b1:d6:b9:68:96:02:9a:04:47:0c:6c:e3:8e:
3c:36:6f:d5:b4:d9:cf:71:0b:27:84:44:d6:f7:ae:c4:61:76:
03:27:bc:60:96:5b:54:77:fa:e0:4d:c3:98:05:f0:3f:9f:17:
05:e3:2b:e8:6f:96:cd:93:35:56:9a:5e:84:4f:9c:26:af:89:
ea:65:18:72:71:64:58:a8:52:da:9b:27:cf:ce:3f:59:fd:0e:
0f:e3:d7:06
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgx
OTIyMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU1NDJFOUI1MEMyRUFE
OTNFM0Y5NkI3RTAxRTBFMUZGMEI1MkIyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+VPTB+UeaxnuAq68xxPOLGs+crhSMc6hzoIxyUhGReeFVnBdi
TCxqiSvJWokJFRttbzeWyPV8sLjoIRsUX4ddb/8JYduZWbXbRsNHoaZUJ49KXQke
fPG8TEUdnHrN0Fxvr8QOzvA/hEtSmdjAqtWEsaBfilOc5dh7I/7R0cTVs1qAf/Qw
uZ7cBNF3PuNzgU0bXCf4u4EmMmOF8ULhel0Z4J7fRlRVJLJiuj0j24JAzOQR7mOR
BQv/hqCK5ue2+fucMfeXtmrWEdRcBLfL0bNdQCWOh6kFLGbsiU6BkFdEhRocgJ7J
eqeGWolYKrXbHiHEX2P6f2fcPcsI+W1CnuYNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUVULptQwurZPj+Wt+AeDh/wtSsoQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ZVTHB0UXd1clpQai1X
dC1BZURoX3d0U3NvUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFlDh0we3E4uzZ9hgQuSO0FjdIWeMJSr
35Ys6GiSb+Ky/0x3diEYKz50Yzum5ZWIhfXtBY1Mhunzkib8RsCD3KGctzBsoybb
w7imR4q+D6ora6epnlRvuKhif8x+5KspLkga3giXuy/fa6R+Tg2t19xjDCcsDNS2
gFPoDTY0odG8tKzOB65WE7VpUf48ZMRkWgCFzrOLG8lbOJV4XBRKFHpnvBTygWO9
sda5aJYCmgRHDGzjjjw2b9W02c9xCyeERNb3rsRhdgMnvGCWW1R3+uBNw5gF8D+f
FwXjK+hvls2TNVaaXoRPnCavieplGHJxZFioUtqbJ8/OP1n9Dg/j1wY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:40 2025 by rpki-client