Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/afIPbTY015eBKutq_96HpZo0WAI.roa
File: afIPbTY015eBKutq_96HpZo0WAI.roa (raw, json)
Hash identifier: ZeImojvMN8HiMy9Hc+KIZLCT7urGZNr8xemtXdQnl2M=
Subject key identifier: 69:F2:0F:6D:36:34:D7:97:81:2A:EB:6A:FF:DE:87:A5:9A:34:58:02
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/afIPbTY015eBKutq_96HpZo0WAI.roa
Signing time: Tue 07 May 2024 20:54:11 +0000
ROA not before: Tue 07 May 2024 20:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20983 (0x51f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 20:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69F20F6D3634D797812AEB6AFFDE87A59A345802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:c0:ab:98:05:48:0f:34:ca:e4:7d:87:ad:
5d:14:97:31:ff:b3:cd:80:14:7c:57:3f:6b:cd:8f:
59:67:e7:81:5f:4c:0f:1c:b3:1d:9b:56:5e:36:47:
e4:80:71:dd:34:0e:c7:77:35:54:2b:d2:e8:12:96:
35:7c:b5:57:0f:40:a8:4b:31:71:08:09:5f:a1:12:
5f:13:af:2a:1a:59:64:19:fc:33:bc:3c:21:f8:c1:
98:d3:4b:89:9d:ee:c6:3a:c6:38:71:20:01:b7:23:
9f:25:ad:ee:9e:8f:5f:32:37:0b:24:91:cf:ec:75:
e7:19:e5:67:b8:fc:cc:60:9a:39:b4:a1:59:63:5d:
d0:70:13:3a:72:a1:9d:f7:c5:9c:e2:44:af:67:ea:
fc:94:31:05:d2:c0:1b:a5:c9:fc:f1:a9:10:7b:2f:
e9:42:42:8b:68:58:f8:ae:ae:f5:d8:e6:9c:d1:d6:
0c:c0:97:c3:2b:1c:ac:a2:cd:53:7e:88:df:7f:bd:
c4:7d:20:df:5f:c6:00:40:a5:1b:a3:1d:3d:02:95:
9d:04:d2:01:cc:b4:8e:04:95:6f:bf:6c:68:9f:7a:
f6:c7:ec:d8:02:ca:8a:8d:51:07:e3:5a:7c:dc:e9:
85:5e:31:6b:fc:51:f2:fc:15:f9:50:6b:d1:49:a7:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:0F:6D:36:34:D7:97:81:2A:EB:6A:FF:DE:87:A5:9A:34:58:02
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/afIPbTY015eBKutq_96HpZo0WAI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:e1:1a:e5:5f:98:d6:ff:73:d5:74:95:18:bb:f4:a1:95:9e:
7b:1b:f4:ba:0b:36:21:d6:fe:16:8c:c4:4c:c9:26:b2:1f:13:
36:c1:77:a0:0c:d3:bf:bf:0d:81:42:d1:65:d3:dd:60:07:7f:
fe:3d:91:48:d4:3a:a6:55:f2:83:c3:f2:a3:27:df:05:e2:88:
c5:0d:aa:3b:32:15:ec:5b:f2:22:3f:48:46:ec:11:b9:92:0f:
73:e9:43:05:41:85:89:e5:b5:e1:bd:03:b2:4e:ad:57:b6:5b:
f8:f6:f7:7d:d2:42:0a:e8:11:00:32:b9:89:c1:a0:89:c7:c7:
7c:34:e3:fd:df:a7:d5:fd:1e:32:aa:e9:c5:ea:6e:94:bb:b8:
7e:a8:90:be:eb:91:e1:c6:0b:b3:9d:90:af:9a:47:3c:20:3d:
67:fc:ba:fa:fa:57:64:44:3a:1d:94:3d:dd:e5:27:af:cf:e9:
f0:cb:d8:c2:2d:65:79:7f:96:4c:33:4c:b8:28:63:f0:68:15:
94:19:c0:fe:04:f8:fc:0e:1a:34:bc:6a:5d:37:2e:00:db:2e:
b0:08:b1:c9:1b:f0:5e:39:a4:ce:7f:59:9c:bd:38:6f:bf:a1:
3e:b4:f5:a6:a1:11:09:5a:e1:26:03:60:0d:ca:e6:cf:14:c2:
5a:fc:1a:79
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICUfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDcy
MDU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY5RjIwRjZEMzYzNEQ3
OTc4MTJBRUI2QUZGREU4N0E1OUEzNDU4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOPcCrmAVIDzTK5H2HrV0UlzH/s82AFHxXP2vNj1ln54FfTA8c
sx2bVl42R+SAcd00Dsd3NVQr0ugSljV8tVcPQKhLMXEICV+hEl8TryoaWWQZ/DO8
PCH4wZjTS4md7sY6xjhxIAG3I58lre6ej18yNwskkc/sdecZ5We4/Mxgmjm0oVlj
XdBwEzpyoZ33xZziRK9n6vyUMQXSwBulyfzxqRB7L+lCQotoWPiurvXY5pzR1gzA
l8MrHKyizVN+iN9/vcR9IN9fxgBApRujHT0ClZ0E0gHMtI4ElW+/bGifevbH7NgC
yoqNUQfjWnzc6YVeMWv8UfL8FflQa9FJp4jxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUafIPbTY015eBKutq/96HpZo0WAIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2FmSVBiVFkwMTVlQkt1
dHFfOTZIcFpvMFdBSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHPhGuVfmNb/c9V0lRi79KGVnnsb9LoL
NiHW/haMxEzJJrIfEzbBd6AM07+/DYFC0WXT3WAHf/49kUjUOqZV8oPD8qMn3wXi
iMUNqjsyFexb8iI/SEbsEbmSD3PpQwVBhYnlteG9A7JOrVe2W/j2933SQgroEQAy
uYnBoInHx3w04/3fp9X9HjKq6cXqbpS7uH6okL7rkeHGC7OdkK+aRzwgPWf8uvr6
V2REOh2UPd3lJ6/P6fDL2MItZXl/lkwzTLgoY/BoFZQZwP4E+PwOGjS8al03LgDb
LrAIsckb8F45pM5/WZy9OG+/oT609aahEQla4SYDYA3K5s8Uwlr8Gnk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:06 2025 by rpki-client