Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nM6rw2zKBQMaeUpMBGV4P5ZPAFQ.roa
File: nM6rw2zKBQMaeUpMBGV4P5ZPAFQ.roa (raw, json)
Hash identifier: C6JhKBkrWQN3e4bF5eXQMEGnT+hZhqjUS5XBD78CUdM=
Subject key identifier: 9C:CE:AB:C3:6C:CA:05:03:1A:79:4A:4C:04:65:78:3F:96:4F:00:54
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D97
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nM6rw2zKBQMaeUpMBGV4P5ZPAFQ.roa
Signing time: Wed 10 Apr 2024 16:52:43 +0000
ROA not before: Wed 10 Apr 2024 16:52:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15767 (0x3d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 16:52:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9CCEABC36CCA05031A794A4C0465783F964F0054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:26:70:e9:bd:7f:fb:c2:54:67:f7:8e:49:
9f:74:bd:15:41:6e:05:a7:1e:a4:39:b6:0a:17:af:
a3:64:3b:58:bd:4e:f0:bc:f6:c5:fb:98:14:fd:e4:
2e:b3:99:67:64:ed:bb:d1:8f:53:e3:ed:1d:c2:a3:
da:54:76:1d:42:65:97:e4:73:18:b5:6f:d0:4e:bd:
8f:28:14:f2:b6:75:2e:b4:ea:9a:90:e7:fb:c9:4e:
2a:ea:3d:42:8d:06:ff:6f:7c:6a:ff:69:7e:51:b0:
0c:de:df:e3:07:a7:2d:89:1b:17:26:c0:2e:ce:73:
69:07:60:63:c7:5c:d7:39:99:b7:e8:51:37:35:bf:
b5:f2:81:a6:bf:63:4f:66:06:1b:70:83:2e:a4:82:
73:7b:15:22:15:a6:eb:7b:af:8f:a8:fb:a0:3c:0c:
44:ea:53:86:20:78:b9:81:f5:22:2a:e0:62:ca:72:
b2:a8:48:9b:b3:d5:54:66:d0:ea:34:55:f5:2d:49:
cf:80:e0:95:bd:fb:4f:75:cf:18:b1:92:e2:c5:11:
df:57:a7:ec:5f:50:8e:c3:b3:c9:1f:49:c2:c9:bd:
33:9b:1d:c3:9b:95:2d:83:1f:a3:2c:81:3f:16:0a:
0f:76:f9:46:4b:41:ce:9d:f3:b9:4e:0a:fd:0b:b4:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:AB:C3:6C:CA:05:03:1A:79:4A:4C:04:65:78:3F:96:4F:00:54
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nM6rw2zKBQMaeUpMBGV4P5ZPAFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:68:06:18:7f:e2:a9:d9:18:e7:74:e0:26:05:d0:27:aa:8b:
f0:79:36:59:71:07:49:7f:ec:a9:25:52:1f:09:55:d3:43:37:
1e:13:80:7c:1e:da:3e:35:00:82:63:b0:38:6b:58:84:43:eb:
f0:f8:a5:3b:92:c3:9e:4c:f4:83:97:da:b2:8a:49:8e:06:34:
35:71:8b:fa:79:f6:01:75:df:48:5e:c1:c4:77:2b:9f:24:67:
ea:f0:be:de:20:d0:4e:5e:73:1b:b6:39:e2:5d:97:8d:01:53:
68:f9:9b:40:f8:50:39:15:2e:96:b7:53:64:7d:64:96:3a:0e:
ba:09:b8:8c:8b:06:2b:2d:98:d2:f7:3d:e9:d0:8c:58:ef:ae:
97:31:23:a4:ff:b0:39:0e:31:ae:20:a1:b6:2f:4b:df:07:b7:
78:12:88:70:81:16:47:99:1e:7c:68:8b:f3:78:cc:35:2f:dd:
70:af:c7:31:55:43:20:40:35:87:75:1d:7e:87:c4:9d:bc:03:
af:79:d3:11:98:bc:3c:1d:7b:c8:ac:b6:89:b4:c8:3f:22:e9:
0a:36:44:0b:45:45:a8:7d:6d:a0:67:3c:64:62:ad:14:65:fd:
6b:07:06:70:fa:66:8c:1a:7e:a4:f3:6f:41:f8:7d:77:e4:f3:
07:f5:53:72
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICPZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAx
NjUyNDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlDQ0VBQkMzNkNDQTA1
MDMxQTc5NEE0QzA0NjU3ODNGOTY0RjAwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgfiZw6b1/+8JUZ/eOSZ90vRVBbgWnHqQ5tgoXr6NkO1i9TvC8
9sX7mBT95C6zmWdk7bvRj1Pj7R3Co9pUdh1CZZfkcxi1b9BOvY8oFPK2dS606pqQ
5/vJTirqPUKNBv9vfGr/aX5RsAze3+MHpy2JGxcmwC7Oc2kHYGPHXNc5mbfoUTc1
v7Xygaa/Y09mBhtwgy6kgnN7FSIVput7r4+o+6A8DETqU4YgeLmB9SIq4GLKcrKo
SJuz1VRm0Oo0VfUtSc+A4JW9+091zxixkuLFEd9Xp+xfUI7Ds8kfScLJvTObHcOb
lS2DH6MsgT8WCg92+UZLQc6d87lOCv0LtCBrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUnM6rw2zKBQMaeUpMBGV4P5ZPAFQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L25NNnJ3MnpLQlFNYWVV
cE1CR1Y0UDVaUEFGUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFBoBhh/4qnZGOd04CYF0Ceqi/B5Nllx
B0l/7KklUh8JVdNDNx4TgHwe2j41AIJjsDhrWIRD6/D4pTuSw55M9IOX2rKKSY4G
NDVxi/p59gF130hewcR3K58kZ+rwvt4g0E5ecxu2OeJdl40BU2j5m0D4UDkVLpa3
U2R9ZJY6DroJuIyLBistmNL3PenQjFjvrpcxI6T/sDkOMa4gobYvS98Ht3gSiHCB
FkeZHnxoi/N4zDUv3XCvxzFVQyBANYd1HX6HxJ28A6950xGYvDwde8istom0yD8i
6Qo2RAtFRah9baBnPGRirRRl/WsHBnD6ZowafqTzb0H4fXfk8wf1U3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org