Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/X4VtD6AbZSMg_1O1zYBf_Fbwdv8.roa
File: X4VtD6AbZSMg_1O1zYBf_Fbwdv8.roa (raw, json)
Hash identifier: 7LqcF+C1mVtwEUT71V7k6juhtJWGOL3/4LOPbj3CJJ0=
Subject key identifier: 5F:85:6D:0F:A0:1B:65:23:20:FF:53:B5:CD:80:5F:FC:56:F0:76:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 331F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X4VtD6AbZSMg_1O1zYBf_Fbwdv8.roa
Signing time: Wed 27 Mar 2024 17:52:03 +0000
ROA not before: Wed 27 Mar 2024 17:52:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13087 (0x331f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 17:52:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5F856D0FA01B652320FF53B5CD805FFC56F076FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:0c:a8:19:de:dd:ee:40:39:4b:f6:2f:19:
80:3d:de:5d:e8:c3:72:2f:57:ba:d6:0d:52:65:68:
29:37:6f:72:e9:78:4c:0a:ce:e0:68:fe:e9:59:86:
44:82:ec:61:6e:d2:21:28:92:09:23:4d:77:40:f5:
7c:fb:7b:11:1e:cc:2e:38:c5:6f:81:25:a3:87:b0:
ab:e4:82:91:61:29:e5:ea:d5:a8:8b:6d:a8:25:a8:
31:75:e7:db:5c:6e:0e:c1:b2:29:42:a5:9f:30:1b:
06:43:bc:d1:6f:72:ec:97:64:95:95:8c:34:75:35:
8d:7c:63:bc:cb:10:46:89:59:d7:d2:51:ce:44:fb:
04:27:ab:1d:41:95:18:d3:8f:9f:08:31:6c:22:72:
3b:42:22:77:20:33:ee:c5:7a:3b:2b:dd:ee:44:0a:
3a:51:2d:21:e5:36:99:aa:84:90:56:87:ed:e4:01:
0a:2d:9f:59:c1:67:22:aa:99:21:9f:50:cf:41:36:
3d:28:f4:09:37:57:7f:81:3f:30:dc:52:9c:d5:b7:
cc:78:aa:03:5c:e3:fe:c5:91:18:b6:a8:87:6f:0e:
5e:29:30:71:b5:8b:c6:4b:19:3b:ac:a6:fb:9c:4a:
e3:5f:cf:eb:b8:f7:bc:2b:d4:02:b9:f0:d5:8f:71:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:85:6D:0F:A0:1B:65:23:20:FF:53:B5:CD:80:5F:FC:56:F0:76:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X4VtD6AbZSMg_1O1zYBf_Fbwdv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
34:fd:d3:6f:43:68:3c:26:3a:b2:46:2a:bc:21:0d:f8:05:6b:
c7:38:7e:b0:5a:0d:60:63:a8:28:00:f9:ee:4e:1d:c7:41:a4:
05:27:ea:77:d1:de:a0:35:f8:07:21:42:a2:df:c3:fa:cf:86:
a3:2e:06:46:17:59:af:d3:14:0b:e2:76:0e:38:bc:05:46:c8:
8a:79:65:46:5a:12:6a:7c:5d:45:b0:9a:b9:eb:d6:9f:ef:3e:
ad:db:a4:bc:9b:90:34:1a:22:0a:da:58:14:e7:26:a5:ef:7f:
a8:32:27:37:9f:3e:de:80:0d:d0:27:90:7f:38:41:1c:e3:fc:
e3:d2:d1:b3:47:ef:57:ce:c2:8c:38:30:1f:53:bd:2d:97:8d:
fb:a1:a3:90:b9:44:6b:7c:48:85:24:bc:4c:08:38:75:d8:c2:
7e:d0:29:01:8b:94:85:0a:8e:67:df:8e:fc:d1:0d:53:f3:c3:
b7:cd:ca:70:43:68:3d:f9:56:25:b9:2b:ec:39:ee:7d:94:78:
f4:50:c6:d9:a5:dd:15:c8:2a:66:28:20:9b:5c:ed:3d:75:7a:
12:ce:82:f6:5f:6d:23:44:56:18:34:1d:25:fa:df:33:90:15:
a3:cf:a6:3f:e2:bb:ea:89:f7:10:03:d3:63:a6:6a:1d:e9:fe:
7c:8f:d0:b8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICMx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjcx
NzUyMDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVGODU2RDBGQTAxQjY1
MjMyMEZGNTNCNUNEODA1RkZDNTZGMDc2RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBJAyoGd7d7kA5S/YvGYA93l3ow3IvV7rWDVJlaCk3b3LpeEwK
zuBo/ulZhkSC7GFu0iEokgkjTXdA9Xz7exEezC44xW+BJaOHsKvkgpFhKeXq1aiL
baglqDF159tcbg7BsilCpZ8wGwZDvNFvcuyXZJWVjDR1NY18Y7zLEEaJWdfSUc5E
+wQnqx1BlRjTj58IMWwicjtCIncgM+7Fejsr3e5ECjpRLSHlNpmqhJBWh+3kAQot
n1nBZyKqmSGfUM9BNj0o9Ak3V3+BPzDcUpzVt8x4qgNc4/7FkRi2qIdvDl4pMHG1
i8ZLGTuspvucSuNfz+u497wr1AK58NWPcQcPAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUX4VtD6AbZSMg/1O1zYBf/Fbwdv8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1g0VnRENkFiWlNNZ18x
TzF6WUJmX0Zid2R2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADT9029DaDwmOrJGKrwhDfgFa8c4frBa
DWBjqCgA+e5OHcdBpAUn6nfR3qA1+AchQqLfw/rPhqMuBkYXWa/TFAvidg44vAVG
yIp5ZUZaEmp8XUWwmrnr1p/vPq3bpLybkDQaIgraWBTnJqXvf6gyJzefPt6ADdAn
kH84QRzj/OPS0bNH71fOwow4MB9TvS2Xjfuho5C5RGt8SIUkvEwIOHXYwn7QKQGL
lIUKjmffjvzRDVPzw7fNynBDaD35ViW5K+w57n2UePRQxtml3RXIKmYoIJtc7T11
ehLOgvZfbSNEVhg0HSX63zOQFaPPpj/iu+qJ9xAD02Omah3p/nyP0Lg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:39 2025 by rpki-client