Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jMW9-jorPs8O04hqnrGKLOW9TBo.roa
File: jMW9-jorPs8O04hqnrGKLOW9TBo.roa (raw, json)
Hash identifier: hvErfWZ4g4YHIkfGs/7DDtkx/+q+2NNZ2OljyXHLaGQ=
Subject key identifier: 8C:C5:BD:FA:3A:2B:3E:CF:0E:D3:88:6A:9E:B1:8A:2C:E5:BD:4C:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 481F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jMW9-jorPs8O04hqnrGKLOW9TBo.roa
Signing time: Wed 24 Apr 2024 17:53:15 +0000
ROA not before: Wed 24 Apr 2024 17:53:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18463 (0x481f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 17:53:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8CC5BDFA3A2B3ECF0ED3886A9EB18A2CE5BD4C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:2d:11:27:72:ea:d9:20:75:55:61:8e:8f:
77:18:40:bd:be:40:2f:6b:57:a2:f2:96:84:65:cc:
36:52:52:4a:47:5b:de:1b:ca:90:25:64:ff:70:9e:
97:ae:a1:f3:1a:2d:93:6d:c1:f3:5c:f8:c3:52:24:
ac:ba:56:d2:b9:da:8c:65:90:5d:ce:be:93:93:de:
6e:4b:f8:ff:c7:eb:83:f6:7c:4f:7c:8c:82:f7:dd:
b3:1d:f0:12:d4:37:dc:c9:58:1b:bf:ad:86:b4:ee:
dd:4e:70:f6:2c:da:36:26:2a:e5:a4:1e:7e:d5:37:
7c:09:89:23:74:80:4e:6f:db:47:46:c4:0c:bf:5f:
76:96:12:4e:f0:3b:b4:48:08:36:21:c3:29:19:5e:
eb:ab:69:2c:57:e5:48:79:3d:37:41:82:b0:97:48:
7b:81:15:4e:e2:a8:31:f0:b7:5c:28:14:81:c6:f5:
8f:e6:d8:e3:45:64:bf:11:dc:94:0a:ac:ba:d3:0d:
34:5b:8b:5c:de:90:dd:65:4d:c2:b2:8f:63:69:c0:
b1:aa:4d:6c:16:95:44:02:49:5e:f1:3a:93:d8:32:
3d:31:2c:51:fd:e2:f5:42:0f:eb:96:49:52:5d:f9:
a4:57:1a:d1:ac:75:d4:d2:9a:b6:c8:ca:f4:12:c6:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:BD:FA:3A:2B:3E:CF:0E:D3:88:6A:9E:B1:8A:2C:E5:BD:4C:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jMW9-jorPs8O04hqnrGKLOW9TBo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:05:9e:c7:1d:29:2e:33:30:21:d1:53:d3:16:57:34:7c:8b:
91:bc:7b:10:ab:d5:93:38:9a:06:f3:b7:49:0a:c0:f8:49:b9:
ea:e3:b8:f8:6d:23:69:45:72:d4:84:06:dc:ee:44:6d:6e:37:
10:fe:7c:6d:d9:c1:60:00:e5:31:87:92:34:80:82:2e:10:b6:
60:3a:9d:c5:4d:30:f1:dc:90:a9:ef:4f:5a:26:44:9e:21:f4:
5f:96:d5:f0:9a:f5:b3:86:da:6b:a5:52:92:ff:7d:e3:61:30:
35:9b:7a:1b:cb:ea:79:24:ba:e8:69:ad:70:e8:dc:eb:3a:b1:
3d:48:b1:36:83:66:50:52:e8:41:99:68:ab:48:74:2f:a2:c8:
ff:37:55:70:6e:24:65:58:80:78:b3:1d:ee:d1:53:29:3a:e1:
fc:d1:a4:12:d4:e1:c4:c3:a3:b2:2f:d6:7f:92:ae:b1:37:d9:
ee:c6:0f:e7:b6:fa:c7:cd:96:85:4d:83:f9:1d:2d:eb:4d:f9:
2a:d0:ab:99:71:70:d6:53:15:9a:04:c7:38:d8:89:95:ae:ae:
77:c1:3c:5d:bc:cc:c5:1c:32:0a:1e:56:16:de:c6:41:bb:ee:
13:8c:79:2d:02:65:c8:79:b6:2a:97:5e:55:f3:63:8d:86:77:
9b:69:62:71
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICSB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQx
NzUzMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhDQzVCREZBM0EyQjNF
Q0YwRUQzODg2QTlFQjE4QTJDRTVCRDRDMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwzy0RJ3Lq2SB1VWGOj3cYQL2+QC9rV6LyloRlzDZSUkpHW94b
ypAlZP9wnpeuofMaLZNtwfNc+MNSJKy6VtK52oxlkF3OvpOT3m5L+P/H64P2fE98
jIL33bMd8BLUN9zJWBu/rYa07t1OcPYs2jYmKuWkHn7VN3wJiSN0gE5v20dGxAy/
X3aWEk7wO7RICDYhwykZXuuraSxX5Uh5PTdBgrCXSHuBFU7iqDHwt1woFIHG9Y/m
2ONFZL8R3JQKrLrTDTRbi1zekN1lTcKyj2NpwLGqTWwWlUQCSV7xOpPYMj0xLFH9
4vVCD+uWSVJd+aRXGtGsddTSmrbIyvQSxivdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUjMW9+jorPs8O04hqnrGKLOW9TBowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2pNVzktam9yUHM4TzA0
aHFuckdLTE9XOVRCby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAC8FnscdKS4zMCHRU9MWVzR8i5G8exCr
1ZM4mgbzt0kKwPhJuerjuPhtI2lFctSEBtzuRG1uNxD+fG3ZwWAA5TGHkjSAgi4Q
tmA6ncVNMPHckKnvT1omRJ4h9F+W1fCa9bOG2mulUpL/feNhMDWbehvL6nkkuuhp
rXDo3Os6sT1IsTaDZlBS6EGZaKtIdC+iyP83VXBuJGVYgHizHe7RUyk64fzRpBLU
4cTDo7Iv1n+SrrE32e7GD+e2+sfNloVNg/kdLetN+SrQq5lxcNZTFZoExzjYiZWu
rnfBPF28zMUcMgoeVhbexkG77hOMeS0CZch5tiqXXlXzY42Gd5tpYnE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org