Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mSm16IeUuJE8ef_8DWABBaZGSb0.roa
File: mSm16IeUuJE8ef_8DWABBaZGSb0.roa (raw, json)
Hash identifier: 289VbJxG4zyKjz/XJ3W8PLhsCOWnAQyTa9pZhSNVeZ0=
Subject key identifier: 99:29:B5:E8:87:94:B8:91:3C:79:FF:FC:0D:60:01:05:A6:46:49:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52F3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mSm16IeUuJE8ef_8DWABBaZGSb0.roa
Signing time: Thu 09 May 2024 04:24:02 +0000
ROA not before: Thu 09 May 2024 04:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21235 (0x52f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 04:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9929B5E88794B8913C79FFFC0D600105A64649BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:09:ff:c3:8b:56:94:f6:e0:be:db:63:dd:
96:94:fc:8a:cf:17:16:a0:0a:39:4a:0e:5b:26:c0:
76:8f:a1:5b:f1:98:61:48:db:97:e3:3e:64:49:75:
b8:75:27:56:26:03:b6:e8:6a:33:f5:b8:91:9a:9d:
04:f0:0c:9b:a2:24:5b:8f:ef:01:4d:4a:08:a5:c5:
f3:f5:c8:34:b0:4a:a3:45:e8:d4:07:98:86:dc:db:
b4:51:af:d1:61:81:ab:8c:78:f0:b6:bd:cd:29:5c:
cf:17:e9:b7:40:40:05:63:22:68:47:e8:ac:22:4a:
91:55:11:03:5e:23:95:89:84:e6:fa:17:82:6d:9b:
b7:ad:3e:ca:f0:89:57:27:8c:30:d6:60:6b:57:68:
bc:b2:de:61:48:9c:47:2a:2e:db:39:f6:c6:bb:2c:
86:31:06:f6:54:a3:97:3d:72:fd:9e:9e:3c:c4:0c:
49:45:b4:85:75:cb:f0:6b:71:f6:4b:4f:78:e0:32:
a0:67:d3:c5:af:3f:f7:8e:5d:62:67:5a:b2:0b:77:
58:62:1b:3a:ec:5e:92:38:a0:70:3e:51:6d:a7:2c:
81:e5:2b:83:8c:21:72:86:ff:a6:f3:cf:a3:29:e7:
df:c9:68:78:89:d2:1c:d9:0c:88:71:da:d3:e6:e8:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:B5:E8:87:94:B8:91:3C:79:FF:FC:0D:60:01:05:A6:46:49:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mSm16IeUuJE8ef_8DWABBaZGSb0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:79:85:dc:22:53:73:74:9c:d8:96:c3:92:e1:dc:d8:1c:20:
83:94:d7:c6:d8:6f:60:af:23:9e:ec:ba:f4:0b:a4:8f:f3:c2:
b5:55:fa:b2:ad:e1:20:e3:30:8e:d4:1c:3e:1a:6f:7b:8a:d4:
0d:33:e0:2c:37:fd:82:a8:e2:f1:92:4a:67:c3:c0:52:e1:f7:
0a:92:89:03:9f:27:89:fc:7e:3c:92:9b:9a:82:c3:4c:27:a6:
15:e8:0c:79:b1:3f:d2:70:ee:ae:de:c2:a0:75:69:42:e0:07:
8b:11:3a:26:59:37:08:41:cd:e3:70:6d:9d:f5:7c:71:56:e6:
df:01:63:74:52:65:58:5c:79:25:eb:fa:d2:42:41:5b:e8:53:
76:cc:21:85:d6:15:f5:30:ea:b7:34:ac:2c:86:30:fc:6a:3b:
f8:f7:23:33:2f:d7:d7:88:54:b8:6e:58:97:2e:01:47:d6:df:
95:a2:0d:cb:47:a7:15:2d:e1:db:a5:d9:c3:22:9e:82:e6:46:
6a:70:39:be:f2:42:a5:b9:24:38:f7:a7:8d:47:bc:79:f3:3a:
52:9a:a1:10:33:91:5b:61:03:6a:8e:58:e4:90:4b:e7:63:63:
c7:87:7d:91:46:c7:90:7e:19:26:ce:e6:5f:1d:40:57:07:fb:
8b:ec:5e:91
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICUvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDkw
NDI0MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk5MjlCNUU4ODc5NEI4
OTEzQzc5RkZGQzBENjAwMTA1QTY0NjQ5QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpQQn/w4tWlPbgvttj3ZaU/IrPFxagCjlKDlsmwHaPoVvxmGFI
25fjPmRJdbh1J1YmA7boajP1uJGanQTwDJuiJFuP7wFNSgilxfP1yDSwSqNF6NQH
mIbc27RRr9FhgauMePC2vc0pXM8X6bdAQAVjImhH6KwiSpFVEQNeI5WJhOb6F4Jt
m7etPsrwiVcnjDDWYGtXaLyy3mFInEcqLts59sa7LIYxBvZUo5c9cv2enjzEDElF
tIV1y/BrcfZLT3jgMqBn08WvP/eOXWJnWrILd1hiGzrsXpI4oHA+UW2nLIHlK4OM
IXKG/6bzz6Mp59/JaHiJ0hzZDIhx2tPm6AjnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUmSm16IeUuJE8ef/8DWABBaZGSb0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L21TbTE2SWVVdUpFOGVm
XzhEV0FCQmFaR1NiMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJx5hdwiU3N0nNiWw5Lh3NgcIIOU18bY
b2CvI57suvQLpI/zwrVV+rKt4SDjMI7UHD4ab3uK1A0z4Cw3/YKo4vGSSmfDwFLh
9wqSiQOfJ4n8fjySm5qCw0wnphXoDHmxP9Jw7q7ewqB1aULgB4sROiZZNwhBzeNw
bZ31fHFW5t8BY3RSZVhceSXr+tJCQVvoU3bMIYXWFfUw6rc0rCyGMPxqO/j3IzMv
19eIVLhuWJcuAUfW35WiDctHpxUt4dul2cMinoLmRmpwOb7yQqW5JDj3p41HvHnz
OlKaoRAzkVthA2qOWOSQS+djY8eHfZFGx5B+GSbO5l8dQFcH+4vsXpE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org