Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gNK058h7gsaVqNF6eDXpWffA07A.roa
File: gNK058h7gsaVqNF6eDXpWffA07A.roa (raw, json)
Hash identifier: 3Vn2G8jtrWqRMXhES2ODQEWOqDJV+RxqC7SBu21T06w=
Subject key identifier: 80:D2:B4:E7:C8:7B:82:C6:95:A8:D1:7A:78:35:E9:59:F7:C0:D3:B0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CC3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNK058h7gsaVqNF6eDXpWffA07A.roa
Signing time: Tue 09 Apr 2024 14:23:04 +0000
ROA not before: Tue 09 Apr 2024 14:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15555 (0x3cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 14:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=80D2B4E7C87B82C695A8D17A7835E959F7C0D3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:3d:7e:17:fe:c8:a5:64:4a:6b:39:94:65:
fe:b5:5e:4f:b7:34:77:51:6b:e3:8f:63:11:05:b3:
63:da:da:11:b3:f8:07:6b:99:14:42:06:d7:72:74:
e4:30:47:c4:1d:d1:42:cf:5c:fc:5b:fa:dd:38:62:
73:3b:ef:68:27:27:d3:a2:54:4a:f5:00:3f:a2:04:
4e:80:f1:d6:5a:28:80:5c:0d:59:75:51:23:bc:d6:
87:cc:60:45:3b:e3:9e:f1:9f:4c:a0:ce:f4:f1:06:
b2:02:e3:8d:e0:07:99:ef:d8:53:5b:c0:32:25:2c:
95:23:e9:eb:62:9b:b5:98:1c:c0:b9:67:78:d1:2d:
47:70:08:38:fa:39:b6:21:44:c1:02:90:78:8a:72:
2a:4a:58:92:49:d8:44:f4:5e:36:e9:58:8d:20:2b:
1b:dc:bc:2f:40:11:ad:be:11:74:df:56:01:bc:a5:
52:8f:03:e6:ce:03:2a:4e:96:a4:bb:f0:10:6d:76:
9e:2f:63:85:7f:ae:56:6f:2a:a1:ee:7e:59:01:ee:
fd:a3:a2:3f:bd:f4:2e:d9:60:fa:b0:69:e2:4e:15:
ee:f1:9b:7c:08:eb:dd:c2:70:4d:c1:3a:75:ba:13:
10:fa:a4:26:97:7c:8a:e6:65:b5:3b:71:c6:18:6c:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:B4:E7:C8:7B:82:C6:95:A8:D1:7A:78:35:E9:59:F7:C0:D3:B0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNK058h7gsaVqNF6eDXpWffA07A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:d6:a5:b8:4c:dc:1e:a6:67:82:6f:b8:c6:08:9a:63:ab:6c:
ce:a9:3a:01:af:fb:90:d2:0c:3a:94:d9:cb:69:48:b1:bd:80:
52:f1:4d:52:ed:95:27:c9:92:14:7d:4d:bc:02:27:71:42:16:
54:14:19:ea:ac:b4:bb:bb:da:36:aa:55:53:42:66:cc:f4:05:
c9:6d:3a:1f:16:f9:9c:47:0a:fc:63:9a:c3:02:d5:8d:61:16:
8d:14:6b:5a:4e:8f:e8:86:1e:43:4b:35:d1:4f:a1:a5:41:92:
92:c4:27:81:80:94:7e:ab:ee:a8:1a:51:a8:92:25:86:06:29:
30:3d:db:06:4e:1d:8c:3d:b3:34:4c:39:59:e7:59:4b:1a:d6:
aa:1b:44:78:1c:75:73:a1:63:c8:54:1b:ba:dd:bd:ff:f1:5f:
dd:e9:73:b3:bd:fd:fc:83:f2:bb:6b:fd:7a:9f:70:45:2f:63:
0b:00:12:46:80:fb:20:e1:7a:91:d7:e2:d7:c6:64:14:ae:99:
07:7e:14:96:c9:ed:59:82:1d:29:f5:81:8a:6a:ef:d0:06:fc:
53:56:0f:a0:96:b4:2d:42:92:63:3d:cd:0d:0a:91:e3:70:7d:
06:f1:38:8b:ea:18:cd:e4:98:df:c0:16:c6:59:c4:7b:a7:3b:
41:bf:55:87
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkx
NDIzMDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgwRDJCNEU3Qzg3Qjgy
QzY5NUE4RDE3QTc4MzVFOTU5RjdDMEQzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9XD1+F/7IpWRKazmUZf61Xk+3NHdRa+OPYxEFs2Pa2hGz+Adr
mRRCBtdydOQwR8Qd0ULPXPxb+t04YnM772gnJ9OiVEr1AD+iBE6A8dZaKIBcDVl1
USO81ofMYEU7457xn0ygzvTxBrIC443gB5nv2FNbwDIlLJUj6etim7WYHMC5Z3jR
LUdwCDj6ObYhRMECkHiKcipKWJJJ2ET0XjbpWI0gKxvcvC9AEa2+EXTfVgG8pVKP
A+bOAypOlqS78BBtdp4vY4V/rlZvKqHuflkB7v2joj+99C7ZYPqwaeJOFe7xm3wI
693CcE3BOnW6ExD6pCaXfIrmZbU7ccYYbCqVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUgNK058h7gsaVqNF6eDXpWffA07AwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2dOSzA1OGg3Z3NhVnFO
RjZlRFhwV2ZmQTA3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAD3WpbhM3B6mZ4JvuMYImmOrbM6pOgGv
+5DSDDqU2ctpSLG9gFLxTVLtlSfJkhR9TbwCJ3FCFlQUGeqstLu72jaqVVNCZsz0
BcltOh8W+ZxHCvxjmsMC1Y1hFo0Ua1pOj+iGHkNLNdFPoaVBkpLEJ4GAlH6r7qga
UaiSJYYGKTA92wZOHYw9szRMOVnnWUsa1qobRHgcdXOhY8hUG7rdvf/xX93pc7O9
/fyD8rtr/XqfcEUvYwsAEkaA+yDhepHX4tfGZBSumQd+FJbJ7VmCHSn1gYpq79AG
/FNWD6CWtC1CkmM9zQ0KkeNwfQbxOIvqGM3kmN/AFsZZxHunO0G/VYc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org