Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VdgUyoZ5chXwy9Tz3HblToI80Ik.roa
File: VdgUyoZ5chXwy9Tz3HblToI80Ik.roa (raw, json)
Hash identifier: 8kaE3R6KX/CAeRDCxA2SrrbbI+sCZjHv4nKFBZrmymI=
Subject key identifier: 55:D8:14:CA:86:79:72:15:F0:CB:D4:F3:DC:76:E5:4E:82:3C:D0:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 32DF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VdgUyoZ5chXwy9Tz3HblToI80Ik.roa
Signing time: Wed 27 Mar 2024 09:52:07 +0000
ROA not before: Wed 27 Mar 2024 09:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13023 (0x32df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 09:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=55D814CA86797215F0CBD4F3DC76E54E823CD089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:0d:90:df:80:8e:22:15:10:4f:79:34:87:
9f:08:5e:96:6a:c1:d1:f5:b2:3e:5e:de:bf:12:40:
00:57:af:d9:5c:e4:e4:05:2f:01:18:2f:44:7c:1a:
69:34:b4:b1:2e:fc:76:22:08:27:8a:47:fb:90:ae:
dd:8f:51:c9:06:57:a7:d2:a2:bb:3a:bb:a2:2e:dd:
f4:eb:33:7b:2e:8f:e1:56:98:41:fc:fb:98:fa:d3:
a3:34:b7:af:54:53:81:14:bf:03:95:44:1c:63:38:
8a:ac:69:d8:80:26:8f:dc:61:d0:bf:3a:d9:5f:0e:
69:10:c0:20:ff:5e:27:ff:63:23:55:51:85:0e:ab:
82:80:14:31:27:03:04:74:d7:c4:73:91:0e:e4:91:
07:f8:7a:be:67:21:bb:f0:09:9c:95:ab:13:d8:18:
ed:c5:ef:91:19:cf:70:48:aa:ad:97:a3:21:f6:ff:
db:2f:98:c9:3b:f2:61:df:7c:2e:cc:f8:ab:4c:9b:
77:d1:18:a3:40:ed:05:02:fe:a8:2f:41:cf:c0:20:
0e:30:53:92:69:63:a7:08:f3:ec:51:ef:5b:b3:eb:
a2:4c:4e:1b:2f:3a:aa:7d:db:00:78:a1:b6:c9:0d:
ba:4e:9c:38:62:0e:10:fc:23:29:65:de:44:58:ee:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:14:CA:86:79:72:15:F0:CB:D4:F3:DC:76:E5:4E:82:3C:D0:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VdgUyoZ5chXwy9Tz3HblToI80Ik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:8a:21:bb:84:b0:04:e8:c8:e9:6e:0b:75:44:7a:8d:e5:4f:
55:bb:25:36:4a:e0:de:87:51:8d:0c:e2:c1:ad:8c:cf:e8:57:
f2:5f:76:2f:01:85:b7:85:fa:50:19:2c:ec:3f:66:5f:dd:3e:
05:35:7f:4c:0b:1b:59:e9:38:9d:a5:dd:10:33:83:22:db:fe:
50:6f:4f:03:40:ec:f3:18:e8:86:ce:c3:ea:a8:f7:fd:3c:76:
20:4b:b3:4c:7a:f7:5f:1d:3e:48:0d:f9:cd:f0:d1:3e:e1:6c:
a3:2c:6b:a5:d5:65:20:4b:c3:df:fe:40:c2:4a:b9:6e:18:26:
89:ea:ee:e5:75:1d:8f:34:11:25:94:61:34:05:18:75:9d:ee:
11:8d:24:01:2e:dc:d4:b6:b3:a9:e4:a2:2f:a2:b8:b1:2f:bf:
c5:dc:a3:17:e6:91:50:42:45:4e:fe:df:24:88:24:7a:82:d0:
fd:d6:a9:17:c3:c2:02:c5:10:e5:30:1e:49:54:bd:89:b8:83:
ed:12:d1:64:a6:09:be:9d:1a:70:1c:b4:fa:c6:c3:a2:89:70:
c0:43:15:4f:ef:a3:2d:b0:4f:78:b6:bf:8b:21:f8:8d:d4:35:
0b:99:d6:38:fe:16:a7:9b:2a:d5:5a:89:e2:27:a8:57:36:6a:
99:c8:8f:a9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICMt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjcw
OTUyMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU1RDgxNENBODY3OTcy
MTVGMENCRDRGM0RDNzZFNTRFODIzQ0QwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCytQ2Q34COIhUQT3k0h58IXpZqwdH1sj5e3r8SQABXr9lc5OQF
LwEYL0R8Gmk0tLEu/HYiCCeKR/uQrt2PUckGV6fSors6u6Iu3fTrM3suj+FWmEH8
+5j606M0t69UU4EUvwOVRBxjOIqsadiAJo/cYdC/OtlfDmkQwCD/Xif/YyNVUYUO
q4KAFDEnAwR018RzkQ7kkQf4er5nIbvwCZyVqxPYGO3F75EZz3BIqq2XoyH2/9sv
mMk78mHffC7M+KtMm3fRGKNA7QUC/qgvQc/AIA4wU5JpY6cI8+xR71uz66JMThsv
Oqp92wB4obbJDbpOnDhiDhD8Iyll3kRY7jedAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUVdgUyoZ5chXwy9Tz3HblToI80IkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ZkZ1V5b1o1Y2hYd3k5
VHozSGJsVG9JODBJay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAIyKIbuEsAToyOluC3VEeo3lT1W7JTZK
4N6HUY0M4sGtjM/oV/Jfdi8BhbeF+lAZLOw/Zl/dPgU1f0wLG1npOJ2l3RAzgyLb
/lBvTwNA7PMY6IbOw+qo9/08diBLs0x6918dPkgN+c3w0T7hbKMsa6XVZSBLw9/+
QMJKuW4YJonq7uV1HY80ESWUYTQFGHWd7hGNJAEu3NS2s6nkoi+iuLEvv8Xcoxfm
kVBCRU7+3ySIJHqC0P3WqRfDwgLFEOUwHklUvYm4g+0S0WSmCb6dGnActPrGw6KJ
cMBDFU/voy2wT3i2v4sh+I3UNQuZ1jj+FqebKtVaieInqFc2apnIj6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org