Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fi_Q2STpgxM2xxj9-zLlL1FhAbA.roa
File: fi_Q2STpgxM2xxj9-zLlL1FhAbA.roa (raw, json)
Hash identifier: rhwUJvDGx3JXka2YxWeApqlAZJKvVAA7lPsRvvQs2QQ=
Subject key identifier: 7E:2F:D0:D9:24:E9:83:13:36:C7:18:FD:FB:32:E5:2F:51:61:01:B0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fi_Q2STpgxM2xxj9-zLlL1FhAbA.roa
Signing time: Mon 01 Apr 2024 21:52:15 +0000
ROA not before: Mon 01 Apr 2024 21:52:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14079 (0x36ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 21:52:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7E2FD0D924E9831336C718FDFB32E52F516101B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:b1:bd:34:95:6d:66:d2:cb:c5:9c:97:e1:
dd:77:bc:e6:09:81:3a:66:12:f7:13:19:58:f0:8c:
24:f8:7b:a7:af:fb:84:78:39:9a:fd:3e:45:bb:ea:
33:f7:dc:0e:f1:6c:33:eb:2d:18:70:94:69:ad:98:
47:e3:dd:d0:e3:49:30:ac:49:9d:46:dd:aa:8f:5d:
92:bf:07:6f:d3:ef:1d:67:1f:d4:15:f7:c4:c2:38:
c2:a5:a1:28:05:0f:4b:92:26:92:c4:55:1a:b6:a7:
74:c4:a9:c5:13:e4:84:6d:79:9b:15:35:bc:a0:58:
75:54:1c:d1:f6:ef:d6:df:a5:21:72:41:66:c9:53:
87:11:27:3a:f7:7c:0a:8c:9c:69:17:de:de:05:a6:
c5:f2:11:df:be:d7:6d:ee:b3:2e:8f:2d:79:e2:97:
8a:58:5e:f3:fe:04:52:cb:d9:74:76:b8:69:52:1b:
3a:5e:1d:03:7f:66:20:f9:81:29:42:dd:a8:01:3a:
08:af:3c:c4:b0:ce:8c:8d:ce:76:8b:79:45:fa:c8:
03:fb:bf:09:16:b6:45:a0:7e:9d:ab:89:c2:fa:dd:
aa:56:10:38:32:47:05:86:c4:8a:4d:e2:50:e6:88:
3f:f3:bb:50:cc:e0:a9:a7:85:d6:a8:71:e5:53:4d:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:D0:D9:24:E9:83:13:36:C7:18:FD:FB:32:E5:2F:51:61:01:B0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fi_Q2STpgxM2xxj9-zLlL1FhAbA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:7b:e5:79:06:33:a5:66:17:ff:af:de:e2:65:31:2f:f4:5b:
a8:9d:a0:5f:95:25:e4:25:0a:f0:53:e0:10:42:d1:ef:6c:20:
aa:14:6a:23:c6:b3:83:3d:fe:c4:0a:fb:5d:a4:f4:8d:8f:28:
ec:e5:6f:99:18:18:9c:4d:73:30:f2:c6:42:9c:df:35:e0:88:
73:e2:57:82:a1:04:33:29:a5:38:2d:2a:14:3e:c8:70:75:7d:
5c:36:0d:52:2f:12:82:25:78:74:df:0d:42:c9:79:d0:f9:14:
4e:32:ff:3e:8e:31:46:64:6f:7a:8a:ed:ff:a3:01:8a:92:37:
cf:4d:d0:65:58:ba:4e:1a:4d:06:2e:49:04:0b:64:09:a3:f4:
7b:9a:80:80:88:eb:67:be:24:5b:0d:f7:10:c5:bc:8f:78:6c:
12:c5:9a:87:4c:0d:87:84:f8:f8:19:a9:f4:47:a3:3f:17:59:
82:93:d6:27:7c:ed:8d:5e:86:60:10:af:b3:b7:22:41:13:b4:
16:b2:a5:a4:93:b9:7e:e0:8e:d0:86:43:6b:ef:d5:c5:40:82:
8a:e9:d5:47:00:b4:eb:3d:a8:bc:ec:bd:5e:e8:54:9a:c9:b0:
65:6c:ba:78:11:92:66:30:c6:80:18:85:12:5b:fa:84:8a:17:
4f:8e:53:8d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEy
MTUyMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdFMkZEMEQ5MjRFOTgz
MTMzNkM3MThGREZCMzJFNTJGNTE2MTAxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuuLG9NJVtZtLLxZyX4d13vOYJgTpmEvcTGVjwjCT4e6ev+4R4
OZr9PkW76jP33A7xbDPrLRhwlGmtmEfj3dDjSTCsSZ1G3aqPXZK/B2/T7x1nH9QV
98TCOMKloSgFD0uSJpLEVRq2p3TEqcUT5IRteZsVNbygWHVUHNH279bfpSFyQWbJ
U4cRJzr3fAqMnGkX3t4FpsXyEd++123usy6PLXnil4pYXvP+BFLL2XR2uGlSGzpe
HQN/ZiD5gSlC3agBOgivPMSwzoyNznaLeUX6yAP7vwkWtkWgfp2ricL63apWEDgy
RwWGxIpN4lDmiD/zu1DM4KmnhdaoceVTTTCpAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUfi/Q2STpgxM2xxj9+zLlL1FhAbAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2ZpX1EyU1RwZ3hNMnh4
ajktekxsTDFGaEFiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAh75XkGM6VmF/+v3uJlMS/0W6idoF+V
JeQlCvBT4BBC0e9sIKoUaiPGs4M9/sQK+12k9I2PKOzlb5kYGJxNczDyxkKc3zXg
iHPiV4KhBDMppTgtKhQ+yHB1fVw2DVIvEoIleHTfDULJedD5FE4y/z6OMUZkb3qK
7f+jAYqSN89N0GVYuk4aTQYuSQQLZAmj9HuagICI62e+JFsN9xDFvI94bBLFmodM
DYeE+PgZqfRHoz8XWYKT1id87Y1ehmAQr7O3IkETtBaypaSTuX7gjtCGQ2vv1cVA
gorp1UcAtOs9qLzsvV7oVJrJsGVsungRkmYwxoAYhRJb+oSKF0+OU40=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:00 2024 by rpki-client on console-ams.rpki-client.org