Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/acCPNE-G0USZInNtfpTCe6If5AA.roa
File: acCPNE-G0USZInNtfpTCe6If5AA.roa (raw, json)
Hash identifier: iQTjJUFdvc2UjKrj0Xrj5X7HParQuE6oZeumkj7bR4M=
Subject key identifier: 69:C0:8F:34:4F:86:D1:44:99:22:73:6D:7E:94:C2:7B:A2:1F:E4:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35B7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acCPNE-G0USZInNtfpTCe6If5AA.roa
Signing time: Sun 31 Mar 2024 04:52:10 +0000
ROA not before: Sun 31 Mar 2024 04:52:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13751 (0x35b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 04:52:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69C08F344F86D1449922736D7E94C27BA21FE400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:23:f2:bc:75:04:86:e2:e6:09:d9:35:fc:
19:02:6c:bb:35:7c:9d:1e:c0:77:9a:6a:9b:ee:58:
32:b6:d0:0c:aa:e9:5b:6c:df:2e:45:c1:5a:3a:fe:
1b:c9:df:ea:fe:38:b2:05:55:d5:6d:c5:ff:18:5d:
9e:88:f3:7e:d8:1d:3c:42:36:40:08:96:53:e2:ce:
ba:21:d9:03:0c:56:3a:9e:ce:dc:4a:32:9b:cd:67:
76:94:ac:30:ab:60:5e:ec:00:99:82:ba:d3:ec:8b:
80:95:ed:38:7e:23:ff:e7:cc:6f:9c:28:a2:5f:99:
72:c8:15:51:bf:67:23:b1:db:95:99:69:95:09:e2:
ac:4c:11:a9:4f:f7:a0:f3:96:e4:a5:a2:35:6a:1b:
e5:85:41:36:ce:0a:b7:ca:07:54:c0:ea:a2:1d:bf:
e1:02:b7:66:1e:79:dd:25:c2:e8:70:17:83:a2:a6:
cd:ea:4c:e6:27:e1:ec:e2:4a:b9:34:85:c6:ed:c5:
5c:6c:18:ef:81:a7:35:70:50:08:bf:c2:42:59:3e:
83:82:b2:ae:41:c9:8b:c4:36:9c:76:c1:8f:a0:08:
95:7f:e7:ea:f4:dc:67:a3:ea:6f:88:a9:ac:57:75:
26:db:10:72:3e:0f:15:28:83:0d:6a:9d:40:a5:c8:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:8F:34:4F:86:D1:44:99:22:73:6D:7E:94:C2:7B:A2:1F:E4:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acCPNE-G0USZInNtfpTCe6If5AA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
79:b7:c0:19:3b:ea:b3:5d:28:0f:fd:80:fd:fc:25:2d:10:49:
36:0f:28:57:2f:80:cf:2e:23:b2:df:a9:9e:ce:f1:0e:ed:54:
98:be:d2:ee:15:de:4d:c8:55:f1:69:65:53:15:e8:37:ee:b0:
72:89:3b:ce:85:6a:53:d5:fe:d0:f0:20:cb:66:ad:8e:3f:18:
59:94:81:e4:97:e2:59:2d:70:a1:87:2d:d0:7e:65:42:3b:ef:
de:69:fa:70:f8:37:30:9d:45:b4:2a:6c:17:5a:b3:97:2d:9c:
b9:7a:71:a2:fd:84:35:88:7a:6f:78:d1:41:dd:08:82:4b:ad:
f4:d3:7c:c3:a2:18:01:9c:51:08:b9:77:45:84:f6:5c:ee:61:
ca:b2:6b:8e:6e:74:18:d8:c6:88:7d:84:96:6c:0a:d4:2b:12:
6f:e5:c3:fc:f9:bc:ec:fc:f7:ac:8f:c3:5b:e0:7b:d8:d9:0e:
68:40:4f:53:fe:f7:c4:97:40:65:b0:6c:f8:f8:7f:d3:09:fb:
46:d7:0c:b4:3c:c5:74:b9:fe:68:f3:59:63:48:a3:48:d3:eb:
f8:b2:e4:75:ba:97:ea:14:2f:a0:79:1b:4f:78:25:68:34:29:
af:e2:93:92:96:62:27:1d:6f:b7:05:1e:f1:28:d8:08:2b:67:
13:5e:85:e0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
NDUyMTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY5QzA4RjM0NEY4NkQx
NDQ5OTIyNzM2RDdFOTRDMjdCQTIxRkU0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwkCPyvHUEhuLmCdk1/BkCbLs1fJ0ewHeaapvuWDK20Ayq6Vts
3y5FwVo6/hvJ3+r+OLIFVdVtxf8YXZ6I837YHTxCNkAIllPizroh2QMMVjqeztxK
MpvNZ3aUrDCrYF7sAJmCutPsi4CV7Th+I//nzG+cKKJfmXLIFVG/ZyOx25WZaZUJ
4qxMEalP96DzluSlojVqG+WFQTbOCrfKB1TA6qIdv+ECt2Yeed0lwuhwF4Oips3q
TOYn4eziSrk0hcbtxVxsGO+BpzVwUAi/wkJZPoOCsq5ByYvENpx2wY+gCJV/5+r0
3Gej6m+IqaxXdSbbEHI+DxUogw1qnUClyNURAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUacCPNE+G0USZInNtfpTCe6If5AAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2FjQ1BORS1HMFVTWklu
TnRmcFRDZTZJZjVBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHm3wBk76rNdKA/9gP38JS0QSTYPKFcv
gM8uI7LfqZ7O8Q7tVJi+0u4V3k3IVfFpZVMV6DfusHKJO86FalPV/tDwIMtmrY4/
GFmUgeSX4lktcKGHLdB+ZUI7795p+nD4NzCdRbQqbBdas5ctnLl6caL9hDWIem94
0UHdCIJLrfTTfMOiGAGcUQi5d0WE9lzuYcqya45udBjYxoh9hJZsCtQrEm/lw/z5
vOz896yPw1vge9jZDmhAT1P+98SXQGWwbPj4f9MJ+0bXDLQ8xXS5/mjzWWNIo0jT
6/iy5HW6l+oUL6B5G094JWg0Ka/ik5KWYicdb7cFHvEo2AgrZxNeheA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:34 2024 by rpki-client on console-fra.rpki-client.org