Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_CFxoyeWCoS3Z3R1GGtG6yS5wZk.roa
File: _CFxoyeWCoS3Z3R1GGtG6yS5wZk.roa (raw, json)
Hash identifier: 88+LE04259MlC31koiSuCEg0JoczfSLOXMe2h6Hyg6M=
Subject key identifier: FC:21:71:A3:27:96:0A:84:B7:67:74:75:18:6B:46:EB:24:B9:C1:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4273
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_CFxoyeWCoS3Z3R1GGtG6yS5wZk.roa
Signing time: Wed 17 Apr 2024 04:22:58 +0000
ROA not before: Wed 17 Apr 2024 04:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17011 (0x4273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 04:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC2171A327960A84B7677475186B46EB24B9C199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:d6:42:c6:06:1a:80:f6:f7:a4:a9:df:c4:
00:31:7c:1b:73:ee:d3:10:6f:a0:9d:8f:22:ca:f1:
0c:d2:c2:1c:c4:0d:50:b1:c0:b8:3b:f7:0c:5d:97:
55:dd:e7:aa:24:a2:61:64:ac:6d:06:16:4f:2d:67:
73:41:b0:e2:d8:c0:76:24:b4:1b:0f:e7:b2:2f:b5:
4f:2e:c6:0f:e1:b0:45:00:ef:21:75:f6:cd:11:04:
d1:3b:79:66:8e:5b:0e:cf:4f:da:48:05:2f:c6:85:
63:99:c1:d2:46:1c:32:ae:37:ca:2b:8b:e7:a0:1d:
2f:69:78:bc:47:b8:da:58:b1:b3:db:33:9b:19:a1:
2b:1a:a8:98:c9:cb:0f:5a:40:5e:6c:ce:a2:58:cd:
a6:77:8e:e2:26:d3:29:2c:8c:38:af:b2:0d:14:ae:
f1:7e:5e:6b:78:e5:3b:92:b6:67:6d:a6:ce:13:6d:
81:45:59:33:01:22:41:10:26:25:c4:04:dc:83:51:
92:e4:37:82:ca:e0:ee:f5:fa:68:44:a2:f0:fb:7a:
8c:de:3f:85:32:f9:fb:7e:2c:cf:a6:08:93:e3:71:
d9:fc:38:fe:89:b5:5b:67:17:28:1b:2d:eb:e4:71:
4a:f6:06:c7:41:aa:09:b9:fe:7c:c5:bd:e8:86:02:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:71:A3:27:96:0A:84:B7:67:74:75:18:6B:46:EB:24:B9:C1:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_CFxoyeWCoS3Z3R1GGtG6yS5wZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:e4:2e:2d:13:38:06:09:df:1c:d0:33:1b:9a:1f:3d:3e:3d:
8d:62:04:de:41:f5:f5:18:bb:22:c8:52:db:24:52:df:8c:c8:
22:97:1c:e9:35:c5:51:b4:21:e0:ee:34:55:97:a3:9e:21:0c:
cc:a4:d5:de:90:6b:33:30:56:6d:73:be:6f:08:17:38:f9:8d:
f3:b0:4d:2b:2d:05:08:2a:a8:b1:f9:9c:02:ad:f7:af:ab:0f:
fc:b9:c3:ae:2a:97:32:50:51:96:fa:96:a1:f4:3e:dd:32:0f:
02:10:e0:de:fc:bd:ab:c5:ca:93:ca:2b:63:99:c7:fe:af:af:
88:15:1e:2d:12:03:26:22:9c:62:de:06:98:a3:65:a1:e2:53:
ec:55:ca:a5:0a:59:43:24:c8:e1:18:6c:95:02:3d:5d:b3:60:
4e:80:7e:36:9c:01:e8:5b:98:c0:26:f9:15:a2:20:e3:38:35:
cd:8b:88:8a:74:1f:18:2e:43:dd:ea:f3:c9:13:ce:f4:0b:7a:
e7:18:76:81:37:0e:3a:a6:78:c7:29:8d:0c:3a:0c:62:75:e2:
6d:22:e2:73:bf:6a:07:f2:93:33:e4:7b:d4:a1:6c:40:9f:99:
b1:81:f5:33:33:8f:e2:f0:86:98:7c:62:3a:e7:fb:9b:33:7e:
be:6e:56:13
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw
NDIyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDMjE3MUEzMjc5NjBB
ODRCNzY3NzQ3NTE4NkI0NkVCMjRCOUMxOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJmtZCxgYagPb3pKnfxAAxfBtz7tMQb6CdjyLK8QzSwhzEDVCx
wLg79wxdl1Xd56okomFkrG0GFk8tZ3NBsOLYwHYktBsP57IvtU8uxg/hsEUA7yF1
9s0RBNE7eWaOWw7PT9pIBS/GhWOZwdJGHDKuN8ori+egHS9peLxHuNpYsbPbM5sZ
oSsaqJjJyw9aQF5szqJYzaZ3juIm0yksjDivsg0UrvF+Xmt45TuStmdtps4TbYFF
WTMBIkEQJiXEBNyDUZLkN4LK4O71+mhEovD7eozeP4Uy+ft+LM+mCJPjcdn8OP6J
tVtnFygbLevkcUr2BsdBqgm5/nzFveiGAs49AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU/CFxoyeWCoS3Z3R1GGtG6yS5wZkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19DRnhveWVXQ29TM1oz
UjFHR3RHNnlTNXdaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAG7kLi0TOAYJ3xzQMxuaHz0+PY1iBN5B
9fUYuyLIUtskUt+MyCKXHOk1xVG0IeDuNFWXo54hDMyk1d6QazMwVm1zvm8IFzj5
jfOwTSstBQgqqLH5nAKt96+rD/y5w64qlzJQUZb6lqH0Pt0yDwIQ4N78vavFypPK
K2OZx/6vr4gVHi0SAyYinGLeBpijZaHiU+xVyqUKWUMkyOEYbJUCPV2zYE6Afjac
AehbmMAm+RWiIOM4Nc2LiIp0HxguQ93q88kTzvQLeucYdoE3DjqmeMcpjQw6DGJ1
4m0i4nO/agfykzPke9ShbECfmbGB9TMzj+Lwhph8Yjrn+5szfr5uVhM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org