Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZoU4oEeq6hZNeto77QaZ-igA5gU.roa
File: ZoU4oEeq6hZNeto77QaZ-igA5gU.roa (raw, json)
Hash identifier: EtimRUrd8iWztqrIzZx3XKAsA3jhGN1OM7wdNIeY7PE=
Subject key identifier: 66:85:38:A0:47:AA:EA:16:4D:7A:DA:3B:ED:06:99:FA:28:00:E6:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 338F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZoU4oEeq6hZNeto77QaZ-igA5gU.roa
Signing time: Thu 28 Mar 2024 07:52:07 +0000
ROA not before: Thu 28 Mar 2024 07:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13199 (0x338f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 07:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=668538A047AAEA164D7ADA3BED0699FA2800E605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:24:8f:6c:77:fa:de:79:3e:f0:fd:8e:4b:
39:ac:9b:b4:0c:c0:ce:49:d4:d1:27:40:5b:82:25:
a9:a7:e6:ca:f2:7f:1f:34:d8:50:95:26:59:55:8f:
eb:50:93:75:51:22:41:4a:ba:e5:a9:50:46:66:4c:
0e:9d:91:4e:15:aa:10:f0:b6:78:47:4d:a8:43:f2:
6a:74:97:4a:70:5d:55:d4:9f:5f:7e:4f:cb:f2:1b:
45:0b:43:41:0b:e4:da:52:fd:af:7a:38:83:82:a6:
51:24:84:09:ce:7f:6e:d0:0c:22:2c:8c:86:3f:da:
0e:f6:e5:fc:b8:11:ea:89:af:cf:e1:2b:91:c4:e5:
da:21:c0:83:f9:ec:d1:a9:49:e3:68:91:89:b7:d3:
69:41:d5:9f:c9:a6:97:6f:77:7c:f9:1d:e5:2c:47:
ca:b5:81:59:70:ed:14:7a:b9:d4:91:13:63:02:94:
60:05:1a:1d:1a:b8:6c:aa:5b:6c:a9:e3:f0:e3:43:
fc:5e:da:8b:2e:c2:5b:8b:62:39:5b:d1:40:0b:99:
00:0c:b9:18:65:8c:9d:49:60:64:70:e8:fa:91:58:
14:ba:2a:a3:45:8b:f1:09:ea:c7:fd:b5:53:6e:bc:
6f:18:40:2e:f9:7b:24:73:e2:bd:7e:ea:58:13:ce:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:85:38:A0:47:AA:EA:16:4D:7A:DA:3B:ED:06:99:FA:28:00:E6:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZoU4oEeq6hZNeto77QaZ-igA5gU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:5e:98:c3:6b:c7:ab:96:7c:59:f6:60:4f:0e:ef:96:d4:9c:
d4:4d:c1:57:bb:79:fc:32:59:47:f6:53:24:f0:5c:84:14:d4:
24:f2:f4:15:6a:41:64:c6:69:1b:77:4a:86:1f:87:5b:a9:48:
28:8f:52:51:7b:e8:d4:0c:e7:53:b8:0a:f7:aa:b4:5a:9c:78:
c9:37:98:af:b5:0f:0e:b3:02:5f:ef:dc:03:6f:5a:10:29:cf:
23:53:ef:12:3f:ec:bb:2b:eb:36:4a:c7:3d:c1:09:57:0f:a1:
1c:f1:6c:33:1c:17:82:3e:96:5b:dc:a3:0e:f4:6d:06:08:3e:
ac:f9:19:b4:e6:15:f2:f3:71:62:52:d2:42:ff:b5:bc:e3:1e:
72:20:d8:d3:a2:f9:48:cf:9a:63:3a:44:ea:56:79:38:74:fa:
ce:a4:82:6b:1c:a8:de:e5:26:9f:0b:32:10:93:47:95:e8:28:
f5:5b:62:c3:0e:79:5d:4f:8d:4e:55:fb:1f:f7:62:0f:b2:4f:
8c:14:c1:23:37:91:f7:4c:6d:ad:ad:ad:5c:8b:6c:09:38:b1:
f1:07:65:8e:87:58:f5:79:7b:52:60:e2:18:7f:53:15:cd:e8:
10:5e:28:8f:0f:77:5a:28:aa:0d:5a:0a:37:b3:8c:1b:4f:6c:
8a:67:c4:a0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICM48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw
NzUyMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY2ODUzOEEwNDdBQUVB
MTY0RDdBREEzQkVEMDY5OUZBMjgwMEU2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTwCSPbHf63nk+8P2OSzmsm7QMwM5J1NEnQFuCJamn5sryfx80
2FCVJllVj+tQk3VRIkFKuuWpUEZmTA6dkU4VqhDwtnhHTahD8mp0l0pwXVXUn19+
T8vyG0ULQ0EL5NpS/a96OIOCplEkhAnOf27QDCIsjIY/2g725fy4EeqJr8/hK5HE
5dohwIP57NGpSeNokYm302lB1Z/Jppdvd3z5HeUsR8q1gVlw7RR6udSRE2MClGAF
Gh0auGyqW2yp4/DjQ/xe2osuwluLYjlb0UALmQAMuRhljJ1JYGRw6PqRWBS6KqNF
i/EJ6sf9tVNuvG8YQC75eyRz4r1+6lgTzn+1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZoU4oEeq6hZNeto77QaZ+igA5gUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1pvVTRvRWVxNmhaTmV0
bzc3UWFaLWlnQTVnVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJxemMNrx6uWfFn2YE8O75bUnNRNwVe7
efwyWUf2UyTwXIQU1CTy9BVqQWTGaRt3SoYfh1upSCiPUlF76NQM51O4CveqtFqc
eMk3mK+1Dw6zAl/v3ANvWhApzyNT7xI/7Lsr6zZKxz3BCVcPoRzxbDMcF4I+llvc
ow70bQYIPqz5GbTmFfLzcWJS0kL/tbzjHnIg2NOi+UjPmmM6ROpWeTh0+s6kgmsc
qN7lJp8LMhCTR5XoKPVbYsMOeV1PjU5V+x/3Yg+yT4wUwSM3kfdMba2trVyLbAk4
sfEHZY6HWPV5e1Jg4hh/UxXN6BBeKI8Pd1ooqg1aCjezjBtPbIpnxKA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org