Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lwFNtgT3ulHL2MFbMIMZwdqZd5Q.roa
File: lwFNtgT3ulHL2MFbMIMZwdqZd5Q.roa (raw, json)
Hash identifier: q2bZ8131oFvj76lUYZhFWLuQh3ZayNQC2A5+0t0ZxNM=
Subject key identifier: 97:01:4D:B6:04:F7:BA:51:CB:D8:C1:5B:30:83:19:C1:DA:99:77:94
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B93
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lwFNtgT3ulHL2MFbMIMZwdqZd5Q.roa
Signing time: Mon 29 Apr 2024 08:23:30 +0000
ROA not before: Mon 29 Apr 2024 08:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19347 (0x4b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 08:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97014DB604F7BA51CBD8C15B308319C1DA997794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:e8:c2:67:ef:ea:18:ac:51:cd:82:06:69:
95:ad:bb:10:5f:7a:26:d5:93:27:63:b5:1f:8f:fa:
27:6d:82:38:d4:ec:a0:47:d0:23:9f:69:7d:a7:3b:
cc:cc:53:c7:69:05:5c:88:c9:a6:c3:23:0b:33:94:
ca:1e:92:b4:87:51:f1:c9:6f:57:3e:0e:58:29:00:
b0:b3:64:ae:f1:d9:04:8f:73:3f:6d:55:ff:62:95:
8b:f1:ea:87:72:e2:f6:67:bd:ea:59:81:b7:17:7a:
fc:40:1e:32:6b:b5:74:32:3d:d1:b6:e5:ac:b3:15:
6e:ee:2d:31:e7:c6:8b:7f:02:3b:be:3b:aa:0c:fa:
db:68:71:eb:8d:78:2f:89:73:47:27:81:d4:25:0e:
39:ce:35:8c:ba:d4:51:a0:5e:e6:8b:b8:0f:8a:97:
a8:c7:a2:01:f7:60:0d:ed:49:a0:90:90:e4:85:13:
69:a6:73:ef:70:a3:a7:65:18:44:65:e9:fa:b7:0e:
5b:bf:9f:5c:54:e6:42:e2:75:69:bd:60:be:83:a6:
8d:15:9b:a5:2f:be:a9:23:a5:a3:e9:18:72:8a:96:
ac:c3:e9:2f:06:2f:31:5c:ce:3b:4a:96:8e:31:fb:
cd:a1:d7:c1:ec:72:a8:7d:da:b5:d1:ed:d5:72:9b:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:4D:B6:04:F7:BA:51:CB:D8:C1:5B:30:83:19:C1:DA:99:77:94
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lwFNtgT3ulHL2MFbMIMZwdqZd5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
44:9d:a5:17:99:3c:23:c6:01:d0:75:15:b1:da:8a:4d:82:9a:
6f:62:ad:48:ee:d8:dd:28:88:cf:22:93:7b:29:ee:dd:12:ae:
8b:97:6d:8e:1d:16:f5:5e:0d:79:97:7c:9a:de:64:56:95:3e:
a6:6c:f0:11:1a:4b:c6:32:98:b5:d3:43:89:de:c7:f6:bb:ab:
ba:2b:a0:5e:86:08:fc:5d:13:64:bb:66:32:31:65:74:bf:f5:
43:62:de:94:d0:35:4c:63:e3:3f:40:94:fc:a2:95:ab:51:d4:
d1:8c:3c:cd:b3:a9:f3:fe:f9:eb:dc:f5:b8:ee:a6:f1:05:6a:
37:d0:22:c9:c6:6c:c6:53:66:68:b6:9e:03:f3:c0:47:78:30:
9f:01:6c:3d:f3:82:ac:a6:05:5e:cd:02:cd:ea:13:6c:c7:3f:
a3:21:02:ba:ca:ce:f5:e0:a9:29:77:f1:25:6c:0b:b9:02:13:
32:43:84:0b:b0:83:18:9a:a7:ca:31:8d:20:28:20:9f:53:57:
a1:af:15:31:98:b5:db:a8:29:52:88:c9:e5:93:74:6d:93:74:
14:f9:48:45:ee:8c:2e:f1:e9:ef:5a:c3:05:63:8e:65:e5:db:
e4:ad:96:5c:01:65:b7:db:52:3f:b7:db:6f:21:10:bf:cf:7d:
a9:b3:00:7a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICS5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkw
ODIzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk3MDE0REI2MDRGN0JB
NTFDQkQ4QzE1QjMwODMxOUMxREE5OTc3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2wujCZ+/qGKxRzYIGaZWtuxBfeibVkydjtR+P+idtgjjU7KBH
0COfaX2nO8zMU8dpBVyIyabDIwszlMoekrSHUfHJb1c+DlgpALCzZK7x2QSPcz9t
Vf9ilYvx6ody4vZnvepZgbcXevxAHjJrtXQyPdG25ayzFW7uLTHnxot/Aju+O6oM
+ttoceuNeC+Jc0cngdQlDjnONYy61FGgXuaLuA+Kl6jHogH3YA3tSaCQkOSFE2mm
c+9wo6dlGERl6fq3Dlu/n1xU5kLidWm9YL6Dpo0Vm6UvvqkjpaPpGHKKlqzD6S8G
LzFczjtKlo4x+82h18Hscqh92rXR7dVymyhBAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUlwFNtgT3ulHL2MFbMIMZwdqZd5QwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2x3Rk50Z1QzdWxITDJN
RmJNSU1ad2RxWmQ1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAESdpReZPCPGAdB1FbHaik2Cmm9irUju
2N0oiM8ik3sp7t0SrouXbY4dFvVeDXmXfJreZFaVPqZs8BEaS8YymLXTQ4nex/a7
q7oroF6GCPxdE2S7ZjIxZXS/9UNi3pTQNUxj4z9AlPyilatR1NGMPM2zqfP++evc
9bjupvEFajfQIsnGbMZTZmi2ngPzwEd4MJ8BbD3zgqymBV7NAs3qE2zHP6MhArrK
zvXgqSl38SVsC7kCEzJDhAuwgxiap8oxjSAoIJ9TV6GvFTGYtduoKVKIyeWTdG2T
dBT5SEXujC7x6e9awwVjjmXl2+StllwBZbfbUj+3228hEL/PfamzAHo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org