Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fLnnmlK14wihBS1SWGiHiDMNvbw.roa
File: fLnnmlK14wihBS1SWGiHiDMNvbw.roa (raw, json)
Hash identifier: L87dp9pzV70WNy17IJlvv8ORy3kOfpz3PzaT9iV8BCg=
Subject key identifier: 7C:B9:E7:9A:52:B5:E3:08:A1:05:2D:52:58:68:87:88:33:0D:BD:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5477
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fLnnmlK14wihBS1SWGiHiDMNvbw.roa
Signing time: Sat 11 May 2024 04:54:01 +0000
ROA not before: Sat 11 May 2024 04:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21623 (0x5477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 04:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7CB9E79A52B5E308A1052D5258688788330DBDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:de:89:4e:5f:78:4b:10:b8:24:f9:39:9a:
6d:23:3d:db:9c:cf:31:60:3f:c5:a8:b2:d0:19:3d:
14:06:53:ee:68:68:af:76:ad:b0:13:19:46:d0:ab:
7e:46:58:83:7e:4f:00:4c:0f:0f:c3:4a:ed:4f:72:
24:69:0e:be:4b:6c:4e:64:77:6b:c5:bb:0b:a6:89:
c4:58:a5:9f:5e:18:1b:f4:b5:96:a5:43:d1:7c:07:
a3:b0:d2:ef:c5:c0:11:48:5d:e0:a9:c7:26:99:10:
ba:db:d1:8e:b3:8d:3f:99:aa:47:fc:c2:0a:0b:7c:
81:77:79:e9:19:41:15:ea:34:d2:5f:60:d2:ec:c2:
26:0a:56:77:66:3d:ee:e4:bf:63:67:9f:07:ec:46:
02:00:e1:45:86:03:41:24:72:74:13:36:f3:1f:55:
e8:59:73:5b:a7:47:89:3d:8c:b3:6b:b9:b3:47:42:
4b:43:4e:7a:c3:3b:12:20:ac:02:89:43:cd:9d:f8:
18:85:a8:d1:62:52:17:8b:0d:25:b7:d6:22:99:bc:
de:ce:37:d7:f5:ef:e7:c9:b8:03:18:62:3b:75:fa:
07:c3:b7:aa:92:89:0b:10:bd:61:4f:53:d1:1f:5d:
06:17:e1:d5:ef:03:b5:a6:61:48:c1:5e:98:7a:01:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:E7:9A:52:B5:E3:08:A1:05:2D:52:58:68:87:88:33:0D:BD:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fLnnmlK14wihBS1SWGiHiDMNvbw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:6c:d2:dd:fb:26:82:58:98:35:26:dd:fb:bf:6f:a0:09:6e:
48:d4:b7:b2:25:41:f9:20:e2:1f:db:1e:da:34:e2:19:e0:79:
bd:06:1b:3d:21:2e:cf:ff:47:81:97:fc:6f:fd:d2:d1:8d:5e:
72:11:0c:3a:0e:09:3a:c5:7c:a6:ca:85:76:5e:ea:dd:08:37:
e3:21:17:18:12:74:e2:87:5e:16:45:5d:ef:87:c4:78:85:98:
5b:e6:57:f2:4b:c4:21:2b:c3:db:bb:f6:d9:bc:3b:63:70:69:
e7:65:9b:3b:76:5f:0b:66:3b:9a:46:1d:35:c9:89:fa:8a:9f:
15:68:f8:6a:91:4f:9c:d8:04:0c:d1:63:48:ad:32:31:25:06:
72:36:44:85:64:ce:1b:15:f9:2c:ca:d9:13:43:9a:08:54:a9:
e1:c0:e0:a2:ab:91:e6:44:aa:6c:2d:90:de:14:70:43:70:77:
52:fa:60:22:d6:82:dc:4f:a9:94:25:94:83:6c:dd:f4:d9:6a:
f1:ee:eb:4d:b6:c9:2d:9f:74:e6:18:ce:33:c9:af:ba:8b:61:
f8:47:b9:25:5a:d0:15:f9:b2:b6:ec:e5:9c:07:b0:8f:9c:14:
e5:ec:c7:50:83:e4:91:6c:92:6f:5c:0d:4b:3c:b6:c7:86:4c:
73:47:ed:d7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTEw
NDU0MDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdDQjlFNzlBNTJCNUUz
MDhBMTA1MkQ1MjU4Njg4Nzg4MzMwREJEQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+n96JTl94SxC4JPk5mm0jPduczzFgP8WostAZPRQGU+5oaK92
rbATGUbQq35GWIN+TwBMDw/DSu1PciRpDr5LbE5kd2vFuwumicRYpZ9eGBv0tZal
Q9F8B6Ow0u/FwBFIXeCpxyaZELrb0Y6zjT+Zqkf8wgoLfIF3eekZQRXqNNJfYNLs
wiYKVndmPe7kv2NnnwfsRgIA4UWGA0EkcnQTNvMfVehZc1unR4k9jLNrubNHQktD
TnrDOxIgrAKJQ82d+BiFqNFiUheLDSW31iKZvN7ON9f17+fJuAMYYjt1+gfDt6qS
iQsQvWFPU9EfXQYX4dXvA7WmYUjBXph6AeUZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUfLnnmlK14wihBS1SWGiHiDMNvbwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2ZMbm5tbEsxNHdpaEJT
MVNXR2lIaURNTnZidy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAK5s0t37JoJYmDUm3fu/b6AJbkjUt7Il
Qfkg4h/bHto04hngeb0GGz0hLs//R4GX/G/90tGNXnIRDDoOCTrFfKbKhXZe6t0I
N+MhFxgSdOKHXhZFXe+HxHiFmFvmV/JLxCErw9u79tm8O2Nwaedlmzt2XwtmO5pG
HTXJifqKnxVo+GqRT5zYBAzRY0itMjElBnI2RIVkzhsV+SzK2RNDmghUqeHA4KKr
keZEqmwtkN4UcENwd1L6YCLWgtxPqZQllINs3fTZavHu6022yS2fdOYYzjPJr7qL
YfhHuSVa0BX5srbs5ZwHsI+cFOXsx1CD5JFskm9cDUs8tseGTHNH7dc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org