Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dvCSHbWhgEBvaldkgCjzpa_YRMk.roa
File: dvCSHbWhgEBvaldkgCjzpa_YRMk.roa (raw, json)
Hash identifier: SFxde+N9a7fRkYY0ChUULTGwNMU4hLZjyvvVhp+7rXQ=
Subject key identifier: 76:F0:92:1D:B5:A1:80:40:6F:6A:57:64:80:28:F3:A5:AF:D8:44:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dvCSHbWhgEBvaldkgCjzpa_YRMk.roa
Signing time: Thu 04 Apr 2024 11:52:21 +0000
ROA not before: Thu 04 Apr 2024 11:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14575 (0x38ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 11:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76F0921DB5A180406F6A57648028F3A5AFD844C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:e3:7b:bc:a2:e0:40:e4:c6:d4:b1:a9:be:
75:e9:ad:f7:2b:df:f3:1e:c8:dc:71:9c:a4:c9:f8:
8e:9d:00:6d:91:b3:94:1e:3a:bc:14:a9:ab:b9:f2:
29:a5:0f:f5:60:d3:e6:89:9d:2d:59:73:6a:bf:39:
ca:11:b6:05:19:73:04:c0:f1:11:90:57:19:3b:03:
9e:84:3f:49:fc:ea:f9:f8:cc:c4:f3:90:cb:24:9d:
0f:36:d9:e8:db:08:29:b5:cb:25:91:43:7a:0e:0d:
2c:81:28:23:4f:ad:83:07:42:b8:17:92:49:b5:e5:
9f:41:eb:fd:92:91:01:93:0d:33:c6:18:d8:52:49:
14:89:ca:98:f5:34:ad:1f:3f:ef:6a:86:cf:b2:9f:
df:e6:f2:a5:3e:3d:d2:83:4b:35:46:ea:e2:47:37:
cb:5c:0c:3a:3f:3f:e8:61:0d:51:67:14:f3:32:78:
ad:ec:7d:f7:51:08:d0:3f:84:1f:c9:f6:bb:47:82:
ca:1e:11:58:a2:4f:43:61:03:7d:47:0c:b9:e4:53:
96:91:17:5d:cb:87:04:dd:a0:6c:88:dd:e9:8f:76:
77:95:a1:26:79:f3:1e:fd:69:d5:ad:5a:65:ce:fa:
ca:81:b8:ac:a8:0b:e3:ca:d0:67:87:9f:83:dc:d3:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:92:1D:B5:A1:80:40:6F:6A:57:64:80:28:F3:A5:AF:D8:44:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dvCSHbWhgEBvaldkgCjzpa_YRMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:68:26:16:87:c0:9d:d9:01:d5:37:0a:ab:5f:0a:d9:57:4a:
69:6a:1e:df:0b:b0:7e:1d:c6:ed:52:a8:c8:27:44:8f:d7:ef:
32:a2:84:e6:dc:c4:27:9b:70:e7:53:ff:43:6e:8d:22:2f:4f:
8c:19:a8:24:d7:d9:28:33:b3:4d:0a:f4:82:d6:47:cf:5b:90:
91:5b:fa:2b:3d:39:d2:aa:3b:8e:f8:6f:d8:ac:f1:55:36:fc:
4a:72:97:3a:72:b7:7e:c8:c9:f0:7e:13:26:94:cb:0c:33:57:
8d:f9:fb:d4:42:24:42:22:09:d5:a5:1a:90:6c:63:a0:ec:0c:
0f:d9:e5:f5:d6:93:13:95:98:92:e3:22:e5:a3:56:5b:f2:26:
f3:46:c0:d9:6a:01:ab:81:62:dd:a3:09:33:92:d4:6c:cb:5b:
86:5e:44:22:5d:00:bf:76:18:4c:c4:a2:06:7d:35:b8:90:69:
f3:48:fb:84:7d:61:2e:61:c2:1c:11:ae:2b:af:ac:c8:3d:af:
21:a6:84:57:f3:13:1e:bc:94:07:ec:87:44:34:f0:ff:d9:a0:
f5:a6:e2:71:b8:48:d8:c3:21:54:02:0d:50:f6:c9:01:71:da:
d2:00:ab:ab:8f:bb:cc:fb:e1:45:5d:f6:33:1b:05:a1:4b:9a:
b3:bc:09:c8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQx
MTUyMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc2RjA5MjFEQjVBMTgw
NDA2RjZBNTc2NDgwMjhGM0E1QUZEODQ0QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPJON7vKLgQOTG1LGpvnXprfcr3/MeyNxxnKTJ+I6dAG2Rs5Qe
OrwUqau58imlD/Vg0+aJnS1Zc2q/OcoRtgUZcwTA8RGQVxk7A56EP0n86vn4zMTz
kMsknQ822ejbCCm1yyWRQ3oODSyBKCNPrYMHQrgXkkm15Z9B6/2SkQGTDTPGGNhS
SRSJypj1NK0fP+9qhs+yn9/m8qU+PdKDSzVG6uJHN8tcDDo/P+hhDVFnFPMyeK3s
ffdRCNA/hB/J9rtHgsoeEViiT0NhA31HDLnkU5aRF13LhwTdoGyI3emPdneVoSZ5
8x79adWtWmXO+sqBuKyoC+PK0GeHn4Pc0wVVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUdvCSHbWhgEBvaldkgCjzpa/YRMkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2R2Q1NIYldoZ0VCdmFs
ZGtnQ2p6cGFfWVJNay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAC9oJhaHwJ3ZAdU3CqtfCtlXSmlqHt8L
sH4dxu1SqMgnRI/X7zKihObcxCebcOdT/0NujSIvT4wZqCTX2Sgzs00K9ILWR89b
kJFb+is9OdKqO474b9is8VU2/Epylzpyt37IyfB+EyaUywwzV435+9RCJEIiCdWl
GpBsY6DsDA/Z5fXWkxOVmJLjIuWjVlvyJvNGwNlqAauBYt2jCTOS1GzLW4ZeRCJd
AL92GEzEogZ9NbiQafNI+4R9YS5hwhwRriuvrMg9ryGmhFfzEx68lAfsh0Q08P/Z
oPWm4nG4SNjDIVQCDVD2yQFx2tIAq6uPu8z74UVd9jMbBaFLmrO8Ccg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:57 2024 by rpki-client on console-ams.rpki-client.org