Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ibu-wZB3RYNL_z4l2zGeiwY9P7c.roa
File: ibu-wZB3RYNL_z4l2zGeiwY9P7c.roa (raw, json)
Hash identifier: vrLDineAxho1DXbGDkgfeAqi1b/lEa/Y0e5Xv5Bd41s=
Subject key identifier: 89:BB:BE:C1:90:77:45:83:4B:FF:3E:25:DB:31:9E:8B:06:3D:3F:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CCF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ibu-wZB3RYNL_z4l2zGeiwY9P7c.roa
Signing time: Tue 30 Apr 2024 23:53:35 +0000
ROA not before: Tue 30 Apr 2024 23:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19663 (0x4ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 23:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=89BBBEC1907745834BFF3E25DB319E8B063D3FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:e8:df:93:4d:dd:15:9d:c9:7c:83:d0:e2:
f9:3a:31:97:48:70:90:fa:9e:4d:4f:f8:50:65:46:
a9:a5:0c:ab:bc:99:ed:e1:26:65:89:a8:07:69:cc:
df:92:87:2f:d6:98:3c:0b:e8:3c:70:2a:25:a7:07:
5c:bb:d5:0c:64:4c:c8:40:a4:ff:ec:33:97:c8:da:
e1:fe:bf:ba:9f:04:55:da:c7:e7:17:32:88:e4:81:
7b:96:3e:c3:eb:65:8d:d5:16:31:a9:d8:cf:3e:41:
9d:cf:68:8f:51:c4:73:94:dd:78:91:35:0c:e2:bb:
cd:21:09:06:2f:3d:07:84:60:65:34:be:79:70:75:
c9:76:cd:95:d2:c7:b6:fa:4e:95:8f:c5:a1:e4:ae:
0f:e8:7b:05:c5:0d:48:eb:d7:8b:6c:8a:dc:56:fc:
76:00:55:2e:41:e3:3c:3d:e7:f8:ce:96:56:24:c9:
40:79:c3:c6:54:90:0e:fc:1e:cf:2a:42:db:41:f0:
bd:ac:7f:b5:a1:da:78:1d:0b:f6:62:53:ce:45:d9:
e8:8b:60:4d:e2:d8:57:3b:36:ac:bd:6e:ff:ba:07:
cc:76:8e:af:46:b9:03:40:41:ae:eb:84:87:1a:f9:
69:cb:75:1c:df:90:4e:d1:6f:16:c3:2f:c4:04:cb:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:BE:C1:90:77:45:83:4B:FF:3E:25:DB:31:9E:8B:06:3D:3F:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ibu-wZB3RYNL_z4l2zGeiwY9P7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:95:1d:8a:4c:12:02:91:07:ff:b1:7c:cd:f2:5c:5c:98:11:
e6:32:f7:7f:61:51:91:3d:03:d0:c0:90:8e:49:c7:bc:a2:bf:
35:da:f0:93:5e:eb:72:9e:95:bf:0a:f8:03:38:21:72:a9:94:
df:7e:2d:a8:2e:e9:e3:70:74:b9:ae:7a:c8:5c:0d:3a:d1:47:
8a:96:4a:68:7b:4f:a5:a0:23:93:12:39:b3:94:cf:af:90:ba:
4c:03:95:40:c3:dc:0e:f2:f7:7b:c8:24:17:82:ea:df:bb:d8:
17:f5:e0:d8:2a:94:ce:36:18:bb:d5:5b:82:e1:a2:ee:aa:d3:
de:89:0c:77:63:a6:ec:11:82:04:44:4b:26:a2:ef:78:7a:68:
1b:28:b8:71:2f:65:73:12:4f:e3:34:d7:fe:a4:e5:59:40:a8:
5e:cd:39:8f:ce:0c:37:dc:75:d0:72:11:60:c6:f4:7f:15:99:
59:9f:48:64:12:d0:11:3d:25:8d:fe:49:2a:31:c9:63:fa:9a:
12:bb:2b:6c:1e:b2:e6:b2:b0:d8:27:a1:6c:e2:e2:96:d9:f9:
73:86:e3:32:81:a9:ce:15:76:33:d3:66:db:70:8d:f6:10:3b:
b2:fa:42:bc:77:67:69:c9:33:18:ba:ef:49:07:75:f8:46:01:
e3:83:1a:23
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MzAy
MzUzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg5QkJCRUMxOTA3NzQ1
ODM0QkZGM0UyNURCMzE5RThCMDYzRDNGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD7Ojfk03dFZ3JfIPQ4vk6MZdIcJD6nk1P+FBlRqmlDKu8me3h
JmWJqAdpzN+Shy/WmDwL6DxwKiWnB1y71QxkTMhApP/sM5fI2uH+v7qfBFXax+cX
MojkgXuWPsPrZY3VFjGp2M8+QZ3PaI9RxHOU3XiRNQziu80hCQYvPQeEYGU0vnlw
dcl2zZXSx7b6TpWPxaHkrg/oewXFDUjr14tsitxW/HYAVS5B4zw95/jOllYkyUB5
w8ZUkA78Hs8qQttB8L2sf7Wh2ngdC/ZiU85F2eiLYE3i2Fc7Nqy9bv+6B8x2jq9G
uQNAQa7rhIca+WnLdRzfkE7RbxbDL8QEyxHHAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUibu+wZB3RYNL/z4l2zGeiwY9P7cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2lidS13WkIzUllOTF96
NGwyekdlaXdZOVA3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFaVHYpMEgKRB/+xfM3yXFyYEeYy939h
UZE9A9DAkI5Jx7yivzXa8JNe63Kelb8K+AM4IXKplN9+Lagu6eNwdLmueshcDTrR
R4qWSmh7T6WgI5MSObOUz6+QukwDlUDD3A7y93vIJBeC6t+72Bf14NgqlM42GLvV
W4Lhou6q096JDHdjpuwRggRESyai73h6aBsouHEvZXMST+M01/6k5VlAqF7NOY/O
DDfcddByEWDG9H8VmVmfSGQS0BE9JY3+SSoxyWP6mhK7K2wesuaysNgnoWzi4pbZ
+XOG4zKBqc4VdjPTZttwjfYQO7L6Qrx3Z2nJMxi670kHdfhGAeODGiM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org