Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/i9v6k6Ikoq4uQ22DfYCXJRSmLKU.roa
File: i9v6k6Ikoq4uQ22DfYCXJRSmLKU.roa (raw, json)
Hash identifier: LdvKXdXGn7TkoWbSxJsyiIKAXL4xxJusAar4BEXtOO0=
Subject key identifier: 8B:DB:FA:93:A2:24:A2:AE:2E:43:6D:83:7D:80:97:25:14:A6:2C:A5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 434F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i9v6k6Ikoq4uQ22DfYCXJRSmLKU.roa
Signing time: Thu 18 Apr 2024 07:53:25 +0000
ROA not before: Thu 18 Apr 2024 07:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17231 (0x434f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 07:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8BDBFA93A224A2AE2E436D837D80972514A62CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:fe:0d:d4:a0:33:d7:e9:b2:b3:5b:0b:50:
5f:de:3c:a9:7c:20:57:b6:9e:18:1c:7f:6c:ba:3c:
75:4f:f9:d7:2f:f8:f4:54:25:1e:1d:e2:98:47:2b:
6a:76:fe:ef:d8:ae:cf:78:28:34:9b:3c:69:9f:ed:
27:8a:9d:4d:5f:a7:1d:a8:da:f8:29:20:92:9c:48:
0a:d8:83:f4:d9:23:33:bf:60:d9:39:4b:7e:6f:06:
65:13:bc:79:b6:7f:28:d3:b1:7d:2f:ea:a1:7d:29:
e0:45:cc:1b:63:1e:f0:ac:59:27:86:21:3f:03:34:
00:91:f7:89:17:c3:d8:e0:b2:02:db:2c:28:90:81:
d4:af:06:1f:79:85:5d:24:c6:c9:4a:5b:c2:81:32:
41:57:fb:70:49:f3:3e:5d:aa:9c:ca:7a:56:a3:bf:
38:5b:51:50:42:40:de:b6:a5:79:9f:7d:ae:28:45:
96:4c:af:56:9e:50:5a:3b:d1:46:5b:c3:5e:53:47:
06:fc:9d:69:95:55:63:34:14:76:7c:ed:4d:0f:99:
27:ce:77:d0:98:fb:62:0c:b5:c1:e8:16:77:bf:17:
39:9d:63:de:39:91:9b:42:b6:d8:33:d9:71:f8:a4:
a1:40:dd:71:80:cf:3c:15:d1:6f:15:6d:b8:1c:26:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:FA:93:A2:24:A2:AE:2E:43:6D:83:7D:80:97:25:14:A6:2C:A5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i9v6k6Ikoq4uQ22DfYCXJRSmLKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:64:57:cc:02:82:e9:82:32:93:3f:6d:36:c6:cf:bc:2f:eb:
34:36:e9:a9:d9:85:bd:ed:1b:3a:5f:a6:e7:b1:20:5b:f0:57:
7f:1f:89:dd:41:59:c2:60:59:eb:bf:3f:68:33:42:5b:ff:34:
3b:94:8f:6b:15:82:9f:fd:b4:a2:b5:df:7b:8c:d1:20:92:c2:
66:49:bf:1e:63:d9:2e:3e:de:2a:78:d2:64:83:4e:7e:49:6d:
6d:b7:9b:de:8c:fe:da:5b:1f:1e:8a:d2:62:02:40:11:b7:a2:
62:b1:f9:ac:40:89:5a:87:0b:64:5d:65:5e:b8:44:22:9d:4c:
c4:b3:de:9b:11:f8:d1:3f:23:48:0f:91:66:1c:41:d0:92:69:
73:6c:82:0f:71:61:99:ed:44:66:cc:4b:de:28:7a:b0:6c:70:
47:5c:f0:cb:b7:0f:5c:7b:19:bc:6f:6d:28:82:da:5e:b5:be:
1d:df:22:cd:02:a0:19:19:8f:89:02:c1:ad:f3:c9:1d:1e:de:
98:7f:d1:47:b9:97:1b:ac:4e:14:c3:98:b8:80:d7:cc:4b:c3:
c1:77:b7:12:d4:fd:42:85:12:1a:da:76:1b:76:d4:c0:4b:91:
6a:2c:58:7d:ff:2e:3f:b8:16:09:c9:48:79:78:da:ca:2d:4e:
51:d6:df:e1
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQ08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw
NzUzMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhCREJGQTkzQTIyNEEy
QUUyRTQzNkQ4MzdEODA5NzI1MTRBNjJDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFWf4N1KAz1+mys1sLUF/ePKl8IFe2nhgcf2y6PHVP+dcv+PRU
JR4d4phHK2p2/u/Yrs94KDSbPGmf7SeKnU1fpx2o2vgpIJKcSArYg/TZIzO/YNk5
S35vBmUTvHm2fyjTsX0v6qF9KeBFzBtjHvCsWSeGIT8DNACR94kXw9jgsgLbLCiQ
gdSvBh95hV0kxslKW8KBMkFX+3BJ8z5dqpzKelajvzhbUVBCQN62pXmffa4oRZZM
r1aeUFo70UZbw15TRwb8nWmVVWM0FHZ87U0PmSfOd9CY+2IMtcHoFne/FzmdY945
kZtCttgz2XH4pKFA3XGAzzwV0W8VbbgcJiBbAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUi9v6k6Ikoq4uQ22DfYCXJRSmLKUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2k5djZrNklrb3E0dVEy
MkRmWUNYSlJTbUxLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABtkV8wCgumCMpM/bTbGz7wv6zQ26anZ
hb3tGzpfpuexIFvwV38fid1BWcJgWeu/P2gzQlv/NDuUj2sVgp/9tKK133uM0SCS
wmZJvx5j2S4+3ip40mSDTn5JbW23m96M/tpbHx6K0mICQBG3omKx+axAiVqHC2Rd
ZV64RCKdTMSz3psR+NE/I0gPkWYcQdCSaXNsgg9xYZntRGbMS94oerBscEdc8Mu3
D1x7GbxvbSiC2l61vh3fIs0CoBkZj4kCwa3zyR0e3ph/0Ue5lxusThTDmLiA18xL
w8F3txLU/UKFEhradht21MBLkWosWH3/Lj+4FgnJSHl42sotTlHW3+E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org