Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Z03UYl7AefhYJ9Wbt8Ay7jKpXlk.roa
File: Z03UYl7AefhYJ9Wbt8Ay7jKpXlk.roa (raw, json)
Hash identifier: WSclaacFVJ5PrYp2KrCv7Obma1FK3NLQovxRH5itP4M=
Subject key identifier: 67:4D:D4:62:5E:C0:79:F8:58:27:D5:9B:B7:C0:32:EE:32:A9:5E:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F33
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z03UYl7AefhYJ9Wbt8Ay7jKpXlk.roa
Signing time: Fri 12 Apr 2024 20:22:52 +0000
ROA not before: Fri 12 Apr 2024 20:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16179 (0x3f33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 20:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=674DD4625EC079F85827D59BB7C032EE32A95E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:89:7f:df:4a:27:a3:1c:63:61:90:d2:33:
0f:e9:c2:d9:76:2f:13:1c:ba:8a:9c:07:e0:4a:74:
aa:2c:85:b3:15:99:b4:20:50:7e:63:0c:96:2f:4f:
6b:8a:66:44:c1:66:bf:ed:53:d5:21:79:4f:1a:e7:
b1:37:5b:a4:19:21:be:2c:a3:2f:7e:19:4a:16:c4:
2c:53:8b:ad:ae:60:dd:b9:42:64:f7:46:84:18:a9:
a0:45:2c:e0:c0:57:bc:4b:a4:26:07:f5:3e:2a:cc:
92:ac:d3:0c:71:ad:e3:20:e2:c0:cc:38:18:1d:5f:
0d:5e:28:83:10:f6:98:cd:81:e7:7b:ad:87:86:02:
dc:3c:14:e3:8a:f6:d1:c9:8a:55:eb:76:14:dd:46:
1c:96:30:06:b8:75:7d:f0:35:95:f1:90:5c:62:02:
e3:42:37:22:d9:63:f4:aa:68:03:55:f3:3f:fb:48:
af:9f:a8:59:a8:eb:52:1a:bc:b7:ec:25:bb:9a:c5:
2b:eb:50:9e:1f:98:eb:32:9b:b5:c9:f8:15:06:ff:
d5:f3:4e:d3:70:5b:6f:7e:94:6f:bc:23:8e:41:d9:
72:bf:8e:55:94:86:51:1f:1d:14:be:32:ef:52:65:
a2:32:38:41:f8:fb:d9:15:53:f3:31:4c:c0:0a:a7:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:D4:62:5E:C0:79:F8:58:27:D5:9B:B7:C0:32:EE:32:A9:5E:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z03UYl7AefhYJ9Wbt8Ay7jKpXlk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
75:1c:ad:8d:af:a6:f5:66:33:f0:67:78:95:af:01:af:bf:91:
77:15:e9:43:51:42:0a:cc:17:c3:95:ae:16:b0:8f:d5:d4:ae:
97:7e:5e:2a:ff:57:5b:8f:da:08:6f:d0:a5:76:9e:ba:7b:49:
22:9f:97:c3:3f:a7:08:67:1f:d8:97:45:3d:df:fa:c6:f0:44:
d2:ca:40:8b:44:d7:16:8e:4c:aa:54:83:27:56:58:37:5d:e2:
21:9f:ff:99:c8:54:c6:0d:18:df:1a:71:18:16:57:73:72:46:
22:6e:fd:ec:08:99:f7:6b:aa:43:c0:8f:13:64:00:ce:c1:24:
96:a9:6b:44:4b:c1:06:0d:a3:b6:64:65:ec:d9:38:01:5a:96:
d9:e5:1f:1a:ad:63:2a:50:d6:0e:35:54:f2:fa:01:fb:8d:0e:
f5:5e:44:15:bf:32:20:15:30:e3:fd:6e:bb:8e:86:af:43:bd:
08:eb:8f:d9:08:e2:67:eb:e1:a2:e9:fc:72:37:9d:d8:ab:dd:
d1:d7:9c:d1:70:d8:58:1a:50:e5:7d:c2:ff:35:87:15:95:4e:
69:cc:ac:35:d1:bb:40:7a:5b:6c:60:9f:ce:86:1a:d2:cc:c1:
f2:8f:b1:07:f3:c0:60:d8:06:31:04:70:b8:af:da:e9:6d:a3:
74:12:f4:40
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTIy
MDIyNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY3NERENDYyNUVDMDc5
Rjg1ODI3RDU5QkI3QzAzMkVFMzJBOTVFNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU9Il/30onoxxjYZDSMw/pwtl2LxMcuoqcB+BKdKoshbMVmbQg
UH5jDJYvT2uKZkTBZr/tU9UheU8a57E3W6QZIb4soy9+GUoWxCxTi62uYN25QmT3
RoQYqaBFLODAV7xLpCYH9T4qzJKs0wxxreMg4sDMOBgdXw1eKIMQ9pjNged7rYeG
Atw8FOOK9tHJilXrdhTdRhyWMAa4dX3wNZXxkFxiAuNCNyLZY/SqaANV8z/7SK+f
qFmo61IavLfsJbuaxSvrUJ4fmOsym7XJ+BUG/9XzTtNwW29+lG+8I45B2XK/jlWU
hlEfHRS+Mu9SZaIyOEH4+9kVU/MxTMAKpyuXAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZ03UYl7AefhYJ9Wbt8Ay7jKpXlkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1owM1VZbDdBZWZoWUo5
V2J0OEF5N2pLcFhsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHUcrY2vpvVmM/BneJWvAa+/kXcV6UNR
QgrMF8OVrhawj9XUrpd+Xir/V1uP2ghv0KV2nrp7SSKfl8M/pwhnH9iXRT3f+sbw
RNLKQItE1xaOTKpUgydWWDdd4iGf/5nIVMYNGN8acRgWV3NyRiJu/ewImfdrqkPA
jxNkAM7BJJapa0RLwQYNo7ZkZezZOAFaltnlHxqtYypQ1g41VPL6AfuNDvVeRBW/
MiAVMOP9bruOhq9DvQjrj9kI4mfr4aLp/HI3ndir3dHXnNFw2FgaUOV9wv81hxWV
TmnMrDXRu0B6W2xgn86GGtLMwfKPsQfzwGDYBjEEcLiv2ulto3QS9EA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org