Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/X8jR8ik0vD2G-98QLqm5lwPw550.roa
File: X8jR8ik0vD2G-98QLqm5lwPw550.roa (raw, json)
Hash identifier: X8cqCSOzO5+ZRksfjMVMdO/xgxaeL0LiXDjdjpuehl8=
Subject key identifier: 5F:C8:D1:F2:29:34:BC:3D:86:FB:DF:10:2E:A9:B9:97:03:F0:E7:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57C3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X8jR8ik0vD2G-98QLqm5lwPw550.roa
Signing time: Wed 15 May 2024 14:24:13 +0000
ROA not before: Wed 15 May 2024 14:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22467 (0x57c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 14:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5FC8D1F22934BC3D86FBDF102EA9B99703F0E79D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:af:76:b1:c5:06:39:ec:ef:15:f5:b6:1f:
94:f5:6c:eb:34:20:e0:eb:83:b8:99:62:f8:2f:db:
5b:6e:a0:52:c4:30:55:6b:55:d7:f5:10:b6:64:4f:
a9:1d:c2:ea:b2:2b:6c:5a:40:85:d9:d4:ff:d8:9d:
49:26:6a:f4:28:0a:6d:18:13:b6:b0:1f:69:52:73:
91:e1:61:e6:8b:1b:af:44:61:8c:92:23:0d:56:8c:
c7:15:09:b5:48:6a:77:5b:7c:a4:7c:39:81:f1:ed:
39:27:9b:cd:00:f5:b7:c0:a4:7c:34:c6:b0:15:c4:
4f:43:e2:02:3e:57:f4:fb:9b:6a:86:01:c5:ea:14:
2c:93:b9:2f:59:b0:39:19:89:be:03:a3:41:cf:3c:
ec:26:d5:5e:af:4e:9b:25:c9:03:d8:7d:49:ef:85:
7c:c6:d6:c3:90:7d:43:f8:5f:cc:86:e6:da:89:60:
55:51:77:ac:fd:00:e3:4e:79:83:7e:fb:1f:b4:a7:
a5:e0:f3:2d:79:8e:6a:99:f7:03:5c:ed:39:9a:d0:
a3:8d:c8:a3:e3:11:f8:ea:78:a1:e2:73:56:19:ae:
8b:9d:16:0a:e3:58:60:87:5e:91:c3:98:07:18:e2:
b5:35:ba:13:1f:73:c7:a2:5b:ff:6f:ab:f6:37:08:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:D1:F2:29:34:BC:3D:86:FB:DF:10:2E:A9:B9:97:03:F0:E7:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/X8jR8ik0vD2G-98QLqm5lwPw550.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:d4:37:db:c7:8e:48:87:38:05:a0:3b:f3:dd:8d:59:07:90:
4f:a6:c8:88:d0:2b:a9:5b:6c:e8:86:f7:35:07:69:13:aa:c2:
07:f1:11:74:50:5f:33:f1:59:05:33:27:b5:3c:bd:97:b6:ee:
c9:cd:8b:b9:3a:98:d8:8b:68:a4:a4:25:af:ba:b4:b1:df:57:
7c:17:05:37:13:73:52:62:42:dc:2d:6c:c7:13:de:59:e8:d1:
d4:ca:66:d3:0d:a9:48:3a:ba:4b:45:8e:a3:62:a5:45:01:8e:
0b:ff:31:b7:65:0c:a5:dd:b9:70:b6:f1:7b:4b:53:bb:5c:61:
72:5d:5e:3e:b5:41:c4:de:9f:02:78:11:b1:3e:bf:77:4d:38:
8a:d7:2a:0d:63:c8:92:3a:eb:33:19:23:63:b3:bd:ce:9a:8b:
06:6c:ac:77:6c:f0:52:5f:37:b9:6e:45:26:a0:70:1d:a5:ef:
77:5e:97:6f:5b:42:85:34:6f:99:38:0b:69:08:05:74:d5:31:
b6:23:85:ba:0e:9b:32:30:4b:a5:19:29:95:17:77:8c:4d:7a:
7c:21:c3:0d:95:9b:51:61:e7:ae:af:11:0b:56:3a:eb:93:a4:
59:06:4c:23:c2:10:3b:dd:96:f3:81:18:db:90:31:43:5c:a8:
d7:ef:84:aa
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICV8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUx
NDI0MTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVGQzhEMUYyMjkzNEJD
M0Q4NkZCREYxMDJFQTlCOTk3MDNGMEU3OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClrK92scUGOezvFfW2H5T1bOs0IODrg7iZYvgv21tuoFLEMFVr
Vdf1ELZkT6kdwuqyK2xaQIXZ1P/YnUkmavQoCm0YE7awH2lSc5HhYeaLG69EYYyS
Iw1WjMcVCbVIandbfKR8OYHx7Tknm80A9bfApHw0xrAVxE9D4gI+V/T7m2qGAcXq
FCyTuS9ZsDkZib4Do0HPPOwm1V6vTpslyQPYfUnvhXzG1sOQfUP4X8yG5tqJYFVR
d6z9AONOeYN++x+0p6Xg8y15jmqZ9wNc7Tma0KONyKPjEfjqeKHic1YZroudFgrj
WGCHXpHDmAcY4rU1uhMfc8eiW/9vq/Y3CFPxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUX8jR8ik0vD2G+98QLqm5lwPw550wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1g4alI4aWswdkQyRy05
OFFMcW01bHdQdzU1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAA3UN9vHjkiHOAWgO/PdjVkHkE+myIjQ
K6lbbOiG9zUHaROqwgfxEXRQXzPxWQUzJ7U8vZe27snNi7k6mNiLaKSkJa+6tLHf
V3wXBTcTc1JiQtwtbMcT3lno0dTKZtMNqUg6uktFjqNipUUBjgv/MbdlDKXduXC2
8XtLU7tcYXJdXj61QcTenwJ4EbE+v3dNOIrXKg1jyJI66zMZI2Ozvc6aiwZsrHds
8FJfN7luRSagcB2l73del29bQoU0b5k4C2kIBXTVMbYjhboOmzIwS6UZKZUXd4xN
enwhww2Vm1Fh566vEQtWOuuTpFkGTCPCEDvdlvOBGNuQMUNcqNfvhKo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org