Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lOyXvvZZbVuqaAwqnADKWEKX1YM.roa
File: lOyXvvZZbVuqaAwqnADKWEKX1YM.roa (raw, json)
Hash identifier: 0hdimxr3zIvLqKGSUHPl/V/muL4cpuyAuF40aKCYqcQ=
Subject key identifier: 94:EC:97:BE:F6:59:6D:5B:AA:68:0C:2A:9C:00:CA:58:42:97:D5:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55F3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lOyXvvZZbVuqaAwqnADKWEKX1YM.roa
Signing time: Mon 13 May 2024 04:24:07 +0000
ROA not before: Mon 13 May 2024 04:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22003 (0x55f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 04:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=94EC97BEF6596D5BAA680C2A9C00CA584297D583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:86:90:9e:35:db:bc:13:a2:26:a6:a6:94:
15:a4:32:b2:77:e7:3e:5c:1c:7c:1c:a3:dc:11:c6:
71:0d:5a:e5:a4:d8:5e:df:49:26:da:3e:63:57:83:
7e:7a:62:29:00:e1:83:4a:14:a1:39:8b:d3:72:16:
e2:15:73:82:d6:98:29:d8:5f:30:a6:13:19:8b:22:
44:c8:9a:c3:36:23:74:e2:59:38:53:54:70:4d:31:
e9:31:f5:27:b8:1e:bb:50:eb:85:e0:f8:02:34:b2:
b5:96:25:2b:fc:f8:80:21:09:9f:78:66:03:1b:7d:
97:b1:55:74:e5:a6:f1:84:2a:48:a2:69:32:97:63:
79:9c:c6:6a:63:e3:dc:4d:27:36:be:af:a0:cf:fb:
70:1e:bb:32:0c:53:1a:8a:f2:9b:d8:37:a9:0c:5f:
94:76:fd:a6:58:63:5b:73:fe:d1:c4:4f:95:13:e9:
82:34:65:a7:25:02:fa:ab:4e:2a:9f:2a:78:89:12:
9f:76:4c:e0:85:8c:4a:f0:89:36:f2:a6:10:50:02:
74:c2:7a:ba:74:97:6e:45:d3:75:97:ae:b0:e2:cc:
b2:2c:35:0f:6e:d0:76:2d:fe:c1:b3:08:7a:d6:ea:
07:7d:ca:55:cf:62:5d:e8:06:6b:b9:27:55:63:c9:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:97:BE:F6:59:6D:5B:AA:68:0C:2A:9C:00:CA:58:42:97:D5:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lOyXvvZZbVuqaAwqnADKWEKX1YM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:b8:6d:12:b0:9a:87:35:6b:06:6c:32:15:6d:8d:01:64:63:
14:25:4c:c2:9f:33:04:d9:f5:d6:1c:ec:2b:96:a4:c5:8a:46:
1b:74:8c:da:c5:d2:40:23:b1:d5:16:5a:29:a5:b8:d8:69:15:
9a:2f:82:56:ab:13:6f:71:6f:82:a9:72:27:5d:74:b6:eb:17:
04:60:5e:e9:37:27:19:89:58:6a:a5:f8:0d:6d:97:65:4d:16:
a3:eb:b1:91:22:8c:47:fb:89:fb:f5:45:cb:3c:ac:e6:27:6e:
6b:2e:d1:ff:dd:d4:63:89:47:dc:37:42:e2:5a:08:00:dc:be:
e1:90:ae:74:a7:82:14:00:84:38:d8:89:5e:ca:99:2e:a9:f8:
f9:47:b3:dd:f4:2a:42:a6:24:b7:57:f8:b2:d6:05:73:54:f7:
87:fd:ca:1b:b3:8e:9a:db:bf:c5:e2:e1:23:cb:ad:7c:75:e5:
32:fc:a3:4d:08:24:1b:95:21:1a:99:ea:41:28:0b:a5:a3:50:
f0:4d:84:0b:88:f6:01:ed:92:92:18:fc:23:8b:61:dc:f6:02:
61:5d:a4:62:83:a0:48:87:98:3c:1d:3f:b2:0d:91:2a:a6:33:
dc:cf:60:fe:a0:82:dc:07:3e:fd:71:be:4c:6e:8d:1e:ab:03:
1e:ef:cd:12
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTMw
NDI0MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk0RUM5N0JFRjY1OTZE
NUJBQTY4MEMyQTlDMDBDQTU4NDI5N0Q1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcLIaQnjXbvBOiJqamlBWkMrJ35z5cHHwco9wRxnENWuWk2F7f
SSbaPmNXg356YikA4YNKFKE5i9NyFuIVc4LWmCnYXzCmExmLIkTImsM2I3TiWThT
VHBNMekx9Se4HrtQ64Xg+AI0srWWJSv8+IAhCZ94ZgMbfZexVXTlpvGEKkiiaTKX
Y3mcxmpj49xNJza+r6DP+3AeuzIMUxqK8pvYN6kMX5R2/aZYY1tz/tHET5UT6YI0
ZaclAvqrTiqfKniJEp92TOCFjErwiTbyphBQAnTCerp0l25F03WXrrDizLIsNQ9u
0HYt/sGzCHrW6gd9ylXPYl3oBmu5J1VjyYoFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUlOyXvvZZbVuqaAwqnADKWEKX1YMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2xPeVh2dlpaYlZ1cWFB
d3FuQURLV0VLWDFZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAy4bRKwmoc1awZsMhVtjQFkYxQlTMKf
MwTZ9dYc7CuWpMWKRht0jNrF0kAjsdUWWimluNhpFZovglarE29xb4KpcidddLbr
FwRgXuk3JxmJWGql+A1tl2VNFqPrsZEijEf7ifv1Rcs8rOYnbmsu0f/d1GOJR9w3
QuJaCADcvuGQrnSnghQAhDjYiV7KmS6p+PlHs930KkKmJLdX+LLWBXNU94f9yhuz
jprbv8Xi4SPLrXx15TL8o00IJBuVIRqZ6kEoC6WjUPBNhAuI9gHtkpIY/COLYdz2
AmFdpGKDoEiHmDwdP7INkSqmM9zPYP6ggtwHPv1xvkxujR6rAx7vzRI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:06 2024 by rpki-client on console-ams.rpki-client.org