Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/m1P47kQeeCkZsT9FbtaH9dyf4L0.roa
File: m1P47kQeeCkZsT9FbtaH9dyf4L0.roa (raw, json)
Hash identifier: 2Q9r+6XhlbQh87T+haTZrk3TRKvnrJW2ewNWl5hdSBM=
Subject key identifier: 9B:53:F8:EE:44:1E:78:29:19:B1:3F:45:6E:D6:87:F5:DC:9F:E0:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E6B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m1P47kQeeCkZsT9FbtaH9dyf4L0.roa
Signing time: Thu 11 Apr 2024 19:23:16 +0000
ROA not before: Thu 11 Apr 2024 19:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15979 (0x3e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 19:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B53F8EE441E782919B13F456ED687F5DC9FE0BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:75:77:eb:0a:12:9f:f9:af:2b:f8:46:4b:
3a:54:a9:b7:65:96:5e:21:a8:84:79:56:0d:9e:36:
ff:ff:9b:bc:5a:48:8f:70:d0:6b:d2:61:8f:a6:3d:
8c:a2:96:3e:d6:0d:1f:17:d2:ed:73:36:86:94:bc:
1f:26:00:83:ba:6c:ec:56:e9:63:4e:3e:6a:d4:4b:
72:ba:c4:87:5e:e6:dd:14:df:94:bd:82:3b:65:5f:
c5:4b:ea:8f:15:c1:42:c8:65:dd:2d:80:1d:93:50:
d3:7b:ee:80:c6:67:59:7e:3f:55:17:9d:e5:5d:97:
e1:e5:1b:af:67:87:37:ea:fa:e4:69:f2:46:80:1a:
d3:67:f3:ce:58:6c:13:16:e3:f9:b6:31:8d:55:66:
17:f7:4c:8d:c5:b9:21:86:e3:ea:fc:c6:bf:a7:20:
39:d2:b1:12:8c:39:56:6d:55:6e:c3:5d:20:51:17:
37:fa:49:bb:29:dd:04:ff:b8:0c:e4:fa:05:a6:b8:
82:ab:ef:d7:ee:1b:8a:d2:22:e4:7c:f8:40:2c:2b:
ad:c9:9c:bb:53:13:0e:e3:b6:a4:8e:8a:d7:26:0c:
56:02:ec:5e:1c:3f:00:6f:5c:41:2e:42:c3:bb:0c:
d1:64:0d:bc:85:d5:43:1d:c0:9c:4d:b3:b1:e6:21:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:F8:EE:44:1E:78:29:19:B1:3F:45:6E:D6:87:F5:DC:9F:E0:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/m1P47kQeeCkZsT9FbtaH9dyf4L0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:2b:ef:18:1e:4e:a5:a0:29:0e:f7:61:35:4e:e3:c1:53:47:
7a:16:7a:80:44:d8:9a:76:8e:3d:8c:52:c1:56:76:a3:40:3e:
94:3a:89:2e:83:d9:9d:71:16:52:7b:2b:9a:13:e7:6b:8b:fa:
4d:6c:b1:72:59:4f:59:a7:00:31:44:fd:22:e9:1d:c8:12:20:
1c:c1:c3:c3:04:a5:67:a0:3a:ab:ba:75:2c:f8:fb:73:86:69:
f7:39:65:a5:e2:82:cf:22:9c:b6:c7:e9:b9:73:bf:75:1c:be:
65:af:4c:64:51:9d:e3:9f:6f:91:8b:de:ae:94:88:85:e7:a9:
59:2e:65:26:df:60:97:6d:01:dd:e0:48:87:dc:cf:84:dd:fb:
0b:cc:74:f8:48:a2:2f:fe:d6:9e:32:0e:16:7b:08:da:56:8c:
50:3c:0b:bf:0c:95:15:6a:0d:bd:c6:1d:f6:47:ca:eb:85:5e:
6d:d2:09:bd:84:18:aa:0a:87:40:ad:fd:40:25:37:91:d3:fb:
fb:57:d1:22:a3:c5:b8:5c:2c:05:4e:51:85:d2:1e:7a:b8:83:
43:0a:5f:a7:b0:80:c0:ce:cf:66:a3:27:1d:cc:76:29:e9:83:
e4:1f:ea:0d:ec:fd:31:4e:74:fb:7d:57:b6:e7:2a:f9:f4:c2:
a3:7c:c9:d3
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEx
OTIzMTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlCNTNGOEVFNDQxRTc4
MjkxOUIxM0Y0NTZFRDY4N0Y1REM5RkUwQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZGHV36woSn/mvK/hGSzpUqbdlll4hqIR5Vg2eNv//m7xaSI9w
0GvSYY+mPYyilj7WDR8X0u1zNoaUvB8mAIO6bOxW6WNOPmrUS3K6xIde5t0U35S9
gjtlX8VL6o8VwULIZd0tgB2TUNN77oDGZ1l+P1UXneVdl+HlG69nhzfq+uRp8kaA
GtNn885YbBMW4/m2MY1VZhf3TI3FuSGG4+r8xr+nIDnSsRKMOVZtVW7DXSBRFzf6
Sbsp3QT/uAzk+gWmuIKr79fuG4rSIuR8+EAsK63JnLtTEw7jtqSOitcmDFYC7F4c
PwBvXEEuQsO7DNFkDbyF1UMdwJxNs7HmIbNzAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUm1P47kQeeCkZsT9FbtaH9dyf4L0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L20xUDQ3a1FlZUNrWnNU
OUZidGFIOWR5ZjRMMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAwr7xgeTqWgKQ73YTVO48FTR3oWeoBE
2Jp2jj2MUsFWdqNAPpQ6iS6D2Z1xFlJ7K5oT52uL+k1ssXJZT1mnADFE/SLpHcgS
IBzBw8MEpWegOqu6dSz4+3OGafc5ZaXigs8inLbH6blzv3UcvmWvTGRRneOfb5GL
3q6UiIXnqVkuZSbfYJdtAd3gSIfcz4Td+wvMdPhIoi/+1p4yDhZ7CNpWjFA8C78M
lRVqDb3GHfZHyuuFXm3SCb2EGKoKh0Ct/UAlN5HT+/tX0SKjxbhcLAVOUYXSHnq4
g0MKX6ewgMDOz2ajJx3Mdinpg+Qf6g3s/TFOdPt9V7bnKvn0wqN8ydM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org