Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZLGLN6K3zADgUsfPBcV0u0lv4qQ.roa
File: ZLGLN6K3zADgUsfPBcV0u0lv4qQ.roa (raw, json)
Hash identifier: LeC0AMD+1/lhiKUsjUiBB/i4uuyxMIJJSmMzVoeSSFM=
Subject key identifier: 64:B1:8B:37:A2:B7:CC:00:E0:52:C7:CF:05:C5:74:BB:49:6F:E2:A4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZLGLN6K3zADgUsfPBcV0u0lv4qQ.roa
Signing time: Sat 20 Apr 2024 11:23:04 +0000
ROA not before: Sat 20 Apr 2024 11:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17643 (0x44eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 11:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=64B18B37A2B7CC00E052C7CF05C574BB496FE2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:34:ad:ac:20:2d:b0:d5:a8:bf:4a:16:59:
d0:ab:88:c0:f4:42:83:95:66:3e:b5:51:ad:3b:10:
11:53:96:3d:89:fe:e7:f1:52:cf:24:17:54:3f:91:
be:99:43:59:d3:e6:ec:7f:ba:b1:53:00:49:ff:fa:
91:2a:e2:0e:75:2c:e3:fb:20:2b:df:ae:3b:7e:4e:
55:9f:28:7b:82:6a:f4:95:f4:09:4d:a4:69:ed:a3:
49:3a:9e:18:39:ef:cc:12:51:78:0a:77:5a:b5:37:
6e:ad:34:c5:31:fc:a8:0b:87:8e:34:e4:92:1c:40:
5e:e2:1f:5f:d5:3f:b8:80:3e:2d:08:4f:e0:6e:68:
55:30:1c:fd:ce:9b:23:52:ab:c8:0b:94:13:ff:4a:
bf:1e:11:04:9b:2e:37:6f:10:cc:de:e3:00:13:49:
02:4d:b6:4b:e3:2c:5c:70:f2:4a:48:58:56:98:f9:
ef:61:08:76:8d:6f:41:2f:46:a3:21:36:0e:43:74:
d4:f0:e6:18:97:46:01:47:f1:93:27:1e:73:f2:5f:
fe:e2:91:8a:19:cd:dc:4d:e0:9a:73:ef:ea:e4:65:
45:dd:0b:1c:a3:22:6e:22:0c:67:cf:90:95:46:45:
e5:db:7b:2f:31:be:27:e2:09:0d:c5:d8:f3:90:18:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:8B:37:A2:B7:CC:00:E0:52:C7:CF:05:C5:74:BB:49:6F:E2:A4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZLGLN6K3zADgUsfPBcV0u0lv4qQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:3e:7a:db:16:60:f7:08:be:f9:c4:1e:34:6d:c2:60:73:7e:
42:f5:0a:80:14:81:7f:8a:4b:1c:49:f1:84:0d:7a:31:35:7a:
33:36:2d:ea:bd:46:f4:bc:02:fd:00:e7:93:47:ce:4f:08:cf:
bf:b2:4e:0e:23:3a:c9:00:cf:95:3f:d9:79:9c:f5:9c:44:b3:
d2:c3:4e:00:52:1a:59:eb:f7:ce:76:60:8e:31:0f:7a:94:2a:
92:de:44:5a:a1:1b:47:96:9c:ef:7e:62:cb:77:19:57:ea:02:
fb:c6:4c:fc:3b:c3:62:7b:0e:cf:11:51:04:e2:cb:be:0d:99:
97:d2:5d:4b:54:a0:e3:94:90:c9:4b:db:7f:15:25:c8:7f:0d:
89:85:67:cd:39:58:c6:b5:a4:51:53:3c:6a:04:6d:df:f5:fb:
7b:77:62:a6:9d:6f:e6:e0:fd:23:df:b9:7f:c9:78:80:a7:41:
69:48:1c:7e:d4:02:1f:82:51:72:a1:d0:36:eb:06:b2:71:8a:
b0:e8:18:f1:13:9c:88:28:36:8e:29:01:b9:77:f4:5a:a4:5b:
59:9c:0a:39:40:10:b6:19:a4:97:45:6e:06:af:b6:16:83:ce:
41:2c:53:1d:4b:2f:97:06:e5:9e:d7:8c:06:15:8c:ea:3d:8a:
96:b7:14:7b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICROswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
MTIzMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY0QjE4QjM3QTJCN0ND
MDBFMDUyQzdDRjA1QzU3NEJCNDk2RkUyQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLDTStrCAtsNWov0oWWdCriMD0QoOVZj61Ua07EBFTlj2J/ufx
Us8kF1Q/kb6ZQ1nT5ux/urFTAEn/+pEq4g51LOP7ICvfrjt+TlWfKHuCavSV9AlN
pGnto0k6nhg578wSUXgKd1q1N26tNMUx/KgLh4405JIcQF7iH1/VP7iAPi0IT+Bu
aFUwHP3OmyNSq8gLlBP/Sr8eEQSbLjdvEMze4wATSQJNtkvjLFxw8kpIWFaY+e9h
CHaNb0EvRqMhNg5DdNTw5hiXRgFH8ZMnHnPyX/7ikYoZzdxN4Jpz7+rkZUXdCxyj
Im4iDGfPkJVGReXbey8xvifiCQ3F2POQGLdRAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZLGLN6K3zADgUsfPBcV0u0lv4qQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1pMR0xONkszekFEZ1Vz
ZlBCY1YwdTBsdjRxUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFc+etsWYPcIvvnEHjRtwmBzfkL1CoAU
gX+KSxxJ8YQNejE1ejM2Leq9RvS8Av0A55NHzk8Iz7+yTg4jOskAz5U/2Xmc9ZxE
s9LDTgBSGlnr9852YI4xD3qUKpLeRFqhG0eWnO9+Yst3GVfqAvvGTPw7w2J7Ds8R
UQTiy74NmZfSXUtUoOOUkMlL238VJch/DYmFZ805WMa1pFFTPGoEbd/1+3t3Yqad
b+bg/SPfuX/JeICnQWlIHH7UAh+CUXKh0DbrBrJxirDoGPETnIgoNo4pAbl39Fqk
W1mcCjlAELYZpJdFbgavthaDzkEsUx1LL5cG5Z7XjAYVjOo9ipa3FHs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:51 2024 by rpki-client on console-ams.rpki-client.org