Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iB-PRPyfuTJfwfOt9mqzorNSHf8.roa
File: iB-PRPyfuTJfwfOt9mqzorNSHf8.roa (raw, json)
Hash identifier: MC2+jL297h65Bc0CCK7/97ITBXov97rWURQLLLBnVbA=
Subject key identifier: 88:1F:8F:44:FC:9F:B9:32:5F:C1:F3:AD:F6:6A:B3:A2:B3:52:1D:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B1F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iB-PRPyfuTJfwfOt9mqzorNSHf8.roa
Signing time: Sun 07 Apr 2024 09:52:32 +0000
ROA not before: Sun 07 Apr 2024 09:52:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15135 (0x3b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 09:52:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=881F8F44FC9FB9325FC1F3ADF66AB3A2B3521DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:0b:87:55:57:3b:22:c4:f6:25:2e:c5:d8:
b0:21:b9:a9:f1:4c:17:3a:32:ae:59:50:f3:c8:36:
9d:e5:b3:c4:36:1d:70:75:40:8c:dc:47:bf:b9:e0:
46:6c:dd:a4:be:1d:ed:3e:ca:f4:9f:d8:a1:37:a6:
dc:e8:41:88:8a:07:1c:25:f2:f9:2d:77:a6:8c:02:
31:b5:0d:c6:9b:ae:db:42:54:d6:a8:90:f0:a4:cd:
d6:58:00:f1:ea:34:69:e3:01:93:08:c8:b2:a5:a4:
b4:95:68:a6:79:26:66:83:9f:e5:c0:d2:3e:60:3a:
d8:0b:39:01:2f:34:1d:80:08:25:0e:66:cd:b4:b5:
6d:6f:c9:da:55:dc:f9:ee:ad:d6:e3:d4:06:99:4e:
f4:42:f8:06:fd:b6:30:3d:3f:ed:73:02:3a:4e:81:
04:5e:d4:d4:05:6d:45:b9:40:e0:64:61:f0:31:11:
82:4e:75:d4:5d:3c:d3:70:96:01:86:09:6f:d6:39:
17:94:ff:24:b1:9f:27:12:7b:80:37:ff:fd:de:b1:
48:13:ee:a7:53:de:e6:57:da:53:a0:20:05:85:66:
78:4a:32:3e:c8:85:8e:56:68:1f:22:70:cd:dc:01:
e9:6a:81:6f:af:7d:51:20:ca:a6:b4:9d:af:86:c7:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:8F:44:FC:9F:B9:32:5F:C1:F3:AD:F6:6A:B3:A2:B3:52:1D:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iB-PRPyfuTJfwfOt9mqzorNSHf8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:9c:7d:fa:77:ec:7d:fc:bc:82:23:44:aa:8e:ee:aa:dd:21:
36:d4:2c:b1:05:32:1a:b0:3e:e2:1a:d0:54:a9:24:f9:73:ac:
48:10:de:5f:27:f6:5a:98:90:9c:54:18:3b:f8:0b:1b:82:3e:
6c:64:56:b1:0e:8b:00:04:e6:ea:6f:2a:25:25:89:7b:76:33:
7a:5e:3d:c4:a8:67:33:f1:db:b1:1a:31:4d:42:71:da:5e:2c:
ed:94:8f:00:3a:17:7e:35:9c:fd:f4:ef:22:79:42:2a:51:9e:
6b:df:25:a3:09:4c:fc:ef:cf:94:71:cd:09:38:72:c6:93:8b:
f4:2d:d5:9a:b7:0d:21:d5:e9:ac:d6:56:c6:de:44:68:80:31:
d6:18:2b:b2:73:fc:db:c8:fb:74:2d:a2:a6:7f:e7:4c:cc:ea:
38:a9:4a:76:b5:bb:89:63:fa:67:8c:fb:b4:bd:d7:42:a6:54:
d9:d0:c4:f2:cd:c3:83:27:67:37:e6:d1:7f:7e:f7:4d:3f:2c:
f5:b3:2c:f8:7b:26:47:77:e5:65:c5:73:7a:3a:c7:2c:2a:c2:
11:f4:de:2b:45:13:52:8e:9b:36:9d:d7:ec:a0:28:d1:c9:27:
e8:51:19:1e:dd:67:58:3a:02:f7:6a:f3:3b:34:03:54:e8:26:
23:bd:14:85
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcw
OTUyMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg4MUY4RjQ0RkM5RkI5
MzI1RkMxRjNBREY2NkFCM0EyQjM1MjFERkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmxQuHVVc7IsT2JS7F2LAhuanxTBc6Mq5ZUPPINp3ls8Q2HXB1
QIzcR7+54EZs3aS+He0+yvSf2KE3ptzoQYiKBxwl8vktd6aMAjG1DcabrttCVNao
kPCkzdZYAPHqNGnjAZMIyLKlpLSVaKZ5JmaDn+XA0j5gOtgLOQEvNB2ACCUOZs20
tW1vydpV3Pnurdbj1AaZTvRC+Ab9tjA9P+1zAjpOgQRe1NQFbUW5QOBkYfAxEYJO
ddRdPNNwlgGGCW/WOReU/ySxnycSe4A3//3esUgT7qdT3uZX2lOgIAWFZnhKMj7I
hY5WaB8icM3cAelqgW+vfVEgyqa0na+Gx5PdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUiB+PRPyfuTJfwfOt9mqzorNSHf8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2lCLVBSUHlmdVRKZndm
T3Q5bXF6b3JOU0hmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAIOcffp37H38vIIjRKqO7qrdITbULLEF
MhqwPuIa0FSpJPlzrEgQ3l8n9lqYkJxUGDv4CxuCPmxkVrEOiwAE5upvKiUliXt2
M3pePcSoZzPx27EaMU1CcdpeLO2UjwA6F341nP307yJ5QipRnmvfJaMJTPzvz5Rx
zQk4csaTi/Qt1Zq3DSHV6azWVsbeRGiAMdYYK7Jz/NvI+3QtoqZ/50zM6jipSna1
u4lj+meM+7S910KmVNnQxPLNw4MnZzfm0X9+900/LPWzLPh7Jkd35WXFc3o6xywq
whH03itFE1KOmzad1+ygKNHJJ+hRGR7dZ1g6Avdq8zs0A1ToJiO9FIU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org