Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WO1m3jp9VpgRGh7mf1Y6p-ofYuc.roa
File: WO1m3jp9VpgRGh7mf1Y6p-ofYuc.roa (raw, json)
Hash identifier: 1q3vptsax/uD5x6CL5cfnugqX6FkyC9WHc8P9W4DzyY=
Subject key identifier: 58:ED:66:DE:3A:7D:56:98:11:1A:1E:E6:7F:56:3A:A7:EA:1F:62:E7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55DF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WO1m3jp9VpgRGh7mf1Y6p-ofYuc.roa
Signing time: Mon 13 May 2024 01:54:11 +0000
ROA not before: Mon 13 May 2024 01:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21983 (0x55df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 01:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=58ED66DE3A7D5698111A1EE67F563AA7EA1F62E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:42:b6:37:d3:de:c5:0c:14:8b:ef:9d:37:
e2:8b:47:bf:b7:92:75:72:9b:ad:60:aa:10:64:c3:
cb:31:ba:c7:a8:1b:2f:2f:6f:eb:09:63:6d:21:e1:
80:98:e2:d7:14:4c:c3:22:cf:58:e1:c8:0e:bd:c5:
a3:89:fa:40:17:27:c1:7e:ce:0c:26:ca:c4:73:51:
c5:50:97:5f:ea:cb:fb:ad:3c:f9:71:09:58:94:c1:
e0:50:5d:ee:6e:6a:67:aa:3e:ad:28:01:8e:2b:77:
01:98:98:29:c4:2c:7c:39:a4:9f:d8:71:02:4f:79:
f2:e2:3d:23:eb:83:07:47:8e:8a:54:2c:67:4c:08:
ff:86:0c:8c:e2:ba:0e:9d:39:a1:b5:bc:74:ce:e3:
d5:f3:56:47:7a:93:0b:b7:dc:7f:da:89:38:11:4e:
cd:05:63:63:86:0a:57:0f:9f:30:3d:ae:7a:52:c2:
8a:83:f5:60:53:e5:21:99:69:43:fa:13:e8:7a:54:
8b:2d:1d:8b:e2:8e:3f:b0:97:d5:83:59:24:b2:d9:
5c:ec:03:b9:e4:21:81:f5:9a:0a:96:bb:51:44:a6:
45:59:8c:aa:bd:1f:0a:a1:c6:e1:25:71:c6:5d:47:
6e:3c:7e:7e:58:ae:b8:61:cc:5d:d8:d8:88:36:18:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:66:DE:3A:7D:56:98:11:1A:1E:E6:7F:56:3A:A7:EA:1F:62:E7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WO1m3jp9VpgRGh7mf1Y6p-ofYuc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:2e:99:1b:54:2b:91:ac:0a:a8:82:72:63:f7:f2:95:bd:09:
90:ef:f0:53:50:35:98:ba:90:e7:19:c6:39:bb:5d:0f:fd:c4:
57:91:37:90:f1:d2:16:11:26:53:f5:ba:b5:a0:8c:4d:4e:74:
f8:85:ca:31:ba:8f:7d:bc:29:f3:be:17:d8:61:65:b8:27:b1:
bb:99:58:80:37:af:c2:cc:f1:75:ac:69:09:33:e1:1b:49:56:
54:10:ba:78:f5:68:66:d0:0f:5c:8e:3c:c8:89:c2:7d:3c:01:
9d:56:49:ca:c2:ff:6a:61:7b:59:54:4f:e0:c1:46:71:17:67:
6b:ab:bb:a8:fe:05:12:4c:d1:c5:33:c0:27:45:c2:44:1c:5b:
62:65:02:7c:23:2a:8d:9f:55:15:05:09:ae:d0:b5:f8:8b:39:
d1:aa:36:4c:22:3b:8c:b4:83:1b:49:d7:18:18:e7:f9:8f:3b:
69:8b:97:0a:5b:9d:a7:53:a8:0f:70:a3:4a:e3:04:72:7a:55:
ad:c4:c2:b3:26:78:ce:11:c6:12:89:9e:11:73:0d:6f:22:e9:
3c:dc:cc:e4:31:0b:25:07:4a:f4:5f:fc:36:10:b5:7f:82:c1:
c4:3f:1d:d6:29:a4:ea:16:0a:d6:13:85:1c:81:4a:f4:92:04:
36:e0:72:38
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTMw
MTU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU4RUQ2NkRFM0E3RDU2
OTgxMTFBMUVFNjdGNTYzQUE3RUExRjYyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKT0K2N9PexQwUi++dN+KLR7+3knVym61gqhBkw8sxuseoGy8v
b+sJY20h4YCY4tcUTMMiz1jhyA69xaOJ+kAXJ8F+zgwmysRzUcVQl1/qy/utPPlx
CViUweBQXe5uameqPq0oAY4rdwGYmCnELHw5pJ/YcQJPefLiPSPrgwdHjopULGdM
CP+GDIziug6dOaG1vHTO49XzVkd6kwu33H/aiTgRTs0FY2OGClcPnzA9rnpSwoqD
9WBT5SGZaUP6E+h6VIstHYvijj+wl9WDWSSy2VzsA7nkIYH1mgqWu1FEpkVZjKq9
HwqhxuElccZdR248fn5YrrhhzF3Y2Ig2GIeDAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUWO1m3jp9VpgRGh7mf1Y6p+ofYucwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1dPMW0zanA5VnBnUkdo
N21mMVk2cC1vZll1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEAumRtUK5GsCqiCcmP38pW9CZDv8FNQ
NZi6kOcZxjm7XQ/9xFeRN5Dx0hYRJlP1urWgjE1OdPiFyjG6j328KfO+F9hhZbgn
sbuZWIA3r8LM8XWsaQkz4RtJVlQQunj1aGbQD1yOPMiJwn08AZ1WScrC/2phe1lU
T+DBRnEXZ2uru6j+BRJM0cUzwCdFwkQcW2JlAnwjKo2fVRUFCa7QtfiLOdGqNkwi
O4y0gxtJ1xgY5/mPO2mLlwpbnadTqA9wo0rjBHJ6Va3EwrMmeM4RxhKJnhFzDW8i
6TzczOQxCyUHSvRf/DYQtX+CwcQ/HdYppOoWCtYThRyBSvSSBDbgcjg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:58 2025 by rpki-client