Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cwDqVWPIFV1j_ZmKsYcVdzmTgVg.roa
File: cwDqVWPIFV1j_ZmKsYcVdzmTgVg.roa (raw, json)
Hash identifier: EzOTmEkHquVtEM+/DOVnHZz0AAuk+wuhCcG/JvGdkKs=
Subject key identifier: 73:00:EA:55:63:C8:15:5D:63:FD:99:8A:B1:87:15:77:39:93:81:58
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 411B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cwDqVWPIFV1j_ZmKsYcVdzmTgVg.roa
Signing time: Mon 15 Apr 2024 09:22:54 +0000
ROA not before: Mon 15 Apr 2024 09:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16667 (0x411b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 09:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7300EA5563C8155D63FD998AB187157739938158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:5a:cc:69:aa:48:fd:2a:e5:56:c7:b4:eb:
80:16:9d:51:cb:0a:e6:97:1c:6f:40:a4:9b:fe:df:
ac:17:8c:fd:3e:0c:b0:6c:39:d0:6d:80:01:cc:e5:
95:e6:a3:ab:b3:fe:5e:7c:ed:d0:ea:37:31:60:c0:
81:90:36:ee:e2:62:4c:31:39:bf:a3:64:3b:be:4e:
6b:31:d8:87:3a:fe:8a:35:b3:e2:bc:47:db:de:a2:
63:27:6f:aa:cf:9d:f8:c7:3e:1f:cc:ac:2d:3a:42:
02:9e:53:b1:18:3c:68:7f:1f:1f:0c:58:e3:1e:cb:
df:c6:42:76:c4:91:0d:6b:cb:09:fc:54:7f:ec:38:
8f:c6:05:8d:1c:53:7f:09:5b:31:1c:a1:78:8d:c6:
72:1b:a5:3a:03:c8:49:1b:52:e5:2e:d1:35:ff:e3:
1f:3b:d6:9e:02:8a:6a:fd:3c:77:58:a2:e7:a4:b0:
40:52:fc:9e:0e:71:7e:ae:1b:06:4f:ad:38:e6:fb:
ea:a9:eb:90:04:54:1c:b5:36:0a:75:50:80:35:69:
6d:2c:ed:f8:98:98:44:b9:e6:78:eb:3b:99:ed:32:
03:e5:f5:4d:09:52:18:e1:dd:d6:aa:d6:0f:1b:d8:
6a:3a:db:3e:c3:8f:09:85:7f:b3:6c:60:9d:d0:b4:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:EA:55:63:C8:15:5D:63:FD:99:8A:B1:87:15:77:39:93:81:58
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cwDqVWPIFV1j_ZmKsYcVdzmTgVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:92:6e:41:6f:4e:23:41:ea:5c:af:4c:17:f0:ce:89:25:af:
12:72:f6:b5:6a:2e:f8:f5:e5:f3:69:dc:4a:63:6b:8e:d7:a8:
87:18:78:f0:fe:d4:10:7d:d1:b7:6f:7a:4c:e1:ca:da:cd:0f:
6a:c7:f1:e6:9d:3e:09:16:cd:90:a6:cf:99:28:3c:b2:b3:b5:
72:45:3e:e7:89:50:d4:bd:8f:e2:0c:d0:8a:48:c7:fc:a6:37:
a1:f5:e8:0e:f0:02:5b:97:c2:ff:c2:5f:a8:de:5f:c2:9f:3c:
74:ac:e8:36:7c:d8:3b:b2:0f:ed:22:39:11:6e:34:05:1d:27:
10:35:a3:1c:6f:df:98:ff:56:c4:66:0b:ec:da:b6:1a:d9:0c:
e8:c2:5c:7c:d3:bb:fc:78:00:c6:d0:fb:e8:7b:84:89:67:0c:
79:8e:a5:bc:a0:02:d7:20:70:a0:05:b0:39:78:02:ab:42:90:
20:5d:09:0b:bb:51:4a:94:d3:da:a8:ae:1d:9f:ec:56:a5:80:
66:d3:84:8c:3d:09:2b:0e:7f:dc:03:12:49:90:b5:4c:bf:f1:
5b:39:1a:72:35:c3:66:21:55:a0:95:a2:29:ca:4e:62:d9:f7:
23:72:6f:02:ef:b2:4c:29:d8:f6:6c:01:07:74:f6:5c:a0:f2:
9d:3a:28:f1
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUw
OTIyNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDczMDBFQTU1NjNDODE1
NUQ2M0ZEOTk4QUIxODcxNTc3Mzk5MzgxNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC41rMaapI/SrlVse064AWnVHLCuaXHG9ApJv+36wXjP0+DLBs
OdBtgAHM5ZXmo6uz/l587dDqNzFgwIGQNu7iYkwxOb+jZDu+Tmsx2Ic6/oo1s+K8
R9veomMnb6rPnfjHPh/MrC06QgKeU7EYPGh/Hx8MWOMey9/GQnbEkQ1rywn8VH/s
OI/GBY0cU38JWzEcoXiNxnIbpToDyEkbUuUu0TX/4x871p4Cimr9PHdYoueksEBS
/J4OcX6uGwZPrTjm++qp65AEVBy1Ngp1UIA1aW0s7fiYmES55njrO5ntMgPl9U0J
Uhjh3daq1g8b2Go62z7DjwmFf7NsYJ3QtKkJAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUcwDqVWPIFV1j/ZmKsYcVdzmTgVgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2N3RHFWV1BJRlYxal9a
bUtzWWNWZHptVGdWZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALWSbkFvTiNB6lyvTBfwzoklrxJy9rVq
Lvj15fNp3Epja47XqIcYePD+1BB90bdvekzhytrND2rH8eadPgkWzZCmz5koPLKz
tXJFPueJUNS9j+IM0IpIx/ymN6H16A7wAluXwv/CX6jeX8KfPHSs6DZ82DuyD+0i
ORFuNAUdJxA1oxxv35j/VsRmC+zathrZDOjCXHzTu/x4AMbQ++h7hIlnDHmOpbyg
AtcgcKAFsDl4AqtCkCBdCQu7UUqU09qorh2f7FalgGbThIw9CSsOf9wDEkmQtUy/
8Vs5GnI1w2YhVaCVoinKTmLZ9yNybwLvskwp2PZsAQd09lyg8p06KPE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org