Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cbjNtXq78foTo4_Hz9q_wgg-0VA.roa
File: cbjNtXq78foTo4_Hz9q_wgg-0VA.roa (raw, json)
Hash identifier: R/iqX0cCoT0KGgRF/sFQzykrHkH82sQ5gbWHzn6WwU8=
Subject key identifier: 71:B8:CD:B5:7A:BB:F1:FA:13:A3:8F:C7:CF:DA:BF:C2:08:3E:D1:50
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DDB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cbjNtXq78foTo4_Hz9q_wgg-0VA.roa
Signing time: Thu 11 Apr 2024 01:22:44 +0000
ROA not before: Thu 11 Apr 2024 01:22:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15835 (0x3ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 01:22:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=71B8CDB57ABBF1FA13A38FC7CFDABFC2083ED150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:65:be:cd:94:7f:45:a4:60:98:92:4a:60:
e3:23:ae:46:d3:a2:e9:60:f6:ef:d5:c3:08:89:90:
76:38:21:b2:5d:e1:17:05:3e:20:51:0d:85:97:43:
ec:ea:53:18:80:28:30:2b:09:db:06:47:45:a5:22:
c0:ec:4a:91:cc:27:53:e1:7a:19:67:9c:b1:33:32:
6a:e3:34:7d:91:73:81:e7:b4:3f:c2:05:ff:3f:d0:
83:14:3c:5f:f6:6e:e9:59:2e:a3:42:d8:8b:af:10:
fe:b7:96:80:e6:00:13:1c:61:0e:cb:ae:b0:c8:fd:
d7:c1:c1:e6:dc:fd:e3:45:37:27:1c:53:f0:0a:2d:
65:94:15:f5:b0:30:f7:f1:97:60:c2:9c:85:f1:dd:
73:b2:45:ef:1d:1e:c5:f1:1a:dd:54:cf:b6:77:08:
dd:c4:29:62:a9:36:27:84:1b:e6:90:31:7d:fa:de:
98:90:fb:f2:58:2d:84:ae:57:67:f0:b8:28:53:89:
8e:bd:c9:56:f4:5b:60:5a:a2:58:e2:3f:ff:01:ff:
d8:92:e8:21:3f:19:82:f6:e2:a3:c7:ff:f5:6a:19:
5f:7e:5f:be:1c:a9:31:00:23:1b:4d:6b:36:77:49:
dd:cb:2b:22:a2:80:a5:95:5d:8a:da:2c:14:a2:64:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:CD:B5:7A:BB:F1:FA:13:A3:8F:C7:CF:DA:BF:C2:08:3E:D1:50
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cbjNtXq78foTo4_Hz9q_wgg-0VA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:b8:71:a7:20:99:26:c7:dc:13:a7:bc:c2:20:ae:ee:1d:bf:
2d:1f:6e:0d:06:da:84:e6:03:79:0b:8d:a1:31:9f:bb:07:8d:
8b:81:d3:65:0c:39:70:44:ab:7e:1a:ec:c8:ab:d3:81:fe:be:
e8:df:1c:c3:d9:66:72:76:46:3b:66:d3:ef:d3:a5:72:42:1f:
06:8e:92:e9:6a:80:31:d1:db:e1:c8:f3:b4:1b:21:f3:d5:ef:
1b:c0:6e:0d:4b:d2:13:e9:a8:f3:0d:36:17:f5:52:72:44:0c:
00:5e:61:8b:0d:51:96:9b:88:fa:6b:c9:8f:a6:c3:cd:96:99:
81:f9:2b:46:6b:2c:37:3d:be:11:44:73:7b:ed:89:f5:b3:f7:
9b:c0:a8:1f:b9:74:8f:6b:99:91:20:16:f3:5d:3b:d1:4f:50:
69:ed:43:2e:7b:d9:59:3a:ad:11:2a:32:da:d2:1b:6b:74:f9:
e5:7b:5c:dd:56:ff:80:2b:28:b3:bf:e6:95:67:ca:96:8e:9d:
3e:f9:88:90:e5:55:7a:68:ec:7c:42:1c:95:91:ec:ea:5c:f9:
44:b2:95:13:33:03:15:c7:d1:87:58:cc:45:de:fd:ff:76:e6:
57:2a:71:b7:b1:54:c7:fe:97:49:d1:d2:80:ea:cf:4a:82:54:
3b:1c:59:4d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEw
MTIyNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDcxQjhDREI1N0FCQkYx
RkExM0EzOEZDN0NGREFCRkMyMDgzRUQxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVnGW+zZR/RaRgmJJKYOMjrkbToulg9u/VwwiJkHY4IbJd4RcF
PiBRDYWXQ+zqUxiAKDArCdsGR0WlIsDsSpHMJ1PhehlnnLEzMmrjNH2Rc4HntD/C
Bf8/0IMUPF/2bulZLqNC2IuvEP63loDmABMcYQ7LrrDI/dfBwebc/eNFNyccU/AK
LWWUFfWwMPfxl2DCnIXx3XOyRe8dHsXxGt1Uz7Z3CN3EKWKpNieEG+aQMX363piQ
+/JYLYSuV2fwuChTiY69yVb0W2BaoljiP/8B/9iS6CE/GYL24qPH//VqGV9+X74c
qTEAIxtNazZ3Sd3LKyKigKWVXYraLBSiZFNLAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUcbjNtXq78foTo4/Hz9q/wgg+0VAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2Niak50WHE3OGZvVG80
X0h6OXFfd2dnLTBWQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJ+4cacgmSbH3BOnvMIgru4dvy0fbg0G
2oTmA3kLjaExn7sHjYuB02UMOXBEq34a7Mir04H+vujfHMPZZnJ2Rjtm0+/TpXJC
HwaOkulqgDHR2+HI87QbIfPV7xvAbg1L0hPpqPMNNhf1UnJEDABeYYsNUZabiPpr
yY+mw82WmYH5K0ZrLDc9vhFEc3vtifWz95vAqB+5dI9rmZEgFvNdO9FPUGntQy57
2Vk6rREqMtrSG2t0+eV7XN1W/4ArKLO/5pVnypaOnT75iJDlVXpo7HxCHJWR7Opc
+USylRMzAxXH0YdYzEXe/f925lcqcbexVMf+l0nR0oDqz0qCVDscWU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org