Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o_x6o4j1kkdo0WSatERf36SoAsA.roa
File: o_x6o4j1kkdo0WSatERf36SoAsA.roa (raw, json)
Hash identifier: ottb0bSJfloRI5ii6FOHwn1ErPqPTGZpSkgVSyo41ss=
Subject key identifier: A3:FC:7A:A3:88:F5:92:47:68:D1:64:9A:B4:44:5F:DF:A4:A8:02:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3907
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o_x6o4j1kkdo0WSatERf36SoAsA.roa
Signing time: Thu 04 Apr 2024 14:52:24 +0000
ROA not before: Thu 04 Apr 2024 14:52:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14599 (0x3907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 14:52:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3FC7AA388F5924768D1649AB4445FDFA4A802C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:69:43:e5:87:a6:bf:d8:fc:7e:42:77:ca:
da:9d:cc:7e:9e:1b:85:27:50:9c:d2:e7:cb:0d:b5:
da:45:70:00:8f:aa:46:8b:4d:e1:b6:fd:c4:d3:67:
18:00:41:04:4c:a7:c4:c9:8a:3e:23:ad:44:6b:54:
40:59:e9:45:f2:a6:87:ed:1c:36:a7:d4:5e:5a:0d:
f6:d5:e6:40:cf:eb:9e:9f:91:8e:6e:3f:05:fa:1b:
65:96:e5:40:ea:22:c3:e8:50:aa:0b:5f:25:eb:71:
3d:18:2a:53:c5:96:17:c8:b0:33:80:cc:d6:d4:d1:
c9:c4:49:94:1e:e4:2b:0c:86:1b:75:c3:b5:34:ec:
9f:59:77:68:dc:8c:ac:d1:ad:1c:6c:94:5a:ac:6b:
21:0c:1b:a3:dc:b0:99:48:53:74:28:ed:bd:11:13:
36:c2:35:c4:e4:99:bd:3f:ae:d5:5b:78:d6:6e:dd:
44:7f:b2:96:bc:bc:a2:2d:41:fa:73:00:cf:ad:a6:
e0:5a:c6:b6:19:36:f9:30:2a:73:e8:43:75:87:9c:
a5:2e:3d:94:c0:7d:3d:1c:19:3b:0c:6b:58:31:cf:
fc:69:c1:bd:c0:9b:1f:e2:1f:f9:64:00:a5:e0:15:
62:7f:dc:da:18:e9:3a:59:79:c1:94:30:76:2a:a3:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:7A:A3:88:F5:92:47:68:D1:64:9A:B4:44:5F:DF:A4:A8:02:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o_x6o4j1kkdo0WSatERf36SoAsA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:d2:3a:1a:04:ad:e3:e4:9b:6d:d4:f8:e7:b3:91:7e:8a:36:
f6:6d:7c:2e:86:6d:4d:8b:48:3e:c3:1c:a6:4e:68:94:5f:c5:
21:2d:ab:8a:8d:87:f3:fb:8a:62:09:fa:dc:23:9c:5d:41:3a:
33:7e:1d:1c:27:2a:42:7a:62:49:ee:a9:12:b6:29:2d:5b:d6:
cd:aa:f5:aa:cb:8c:dd:00:8d:80:e0:6a:89:3e:2e:ee:73:2f:
cc:80:96:38:35:e8:45:44:38:db:2e:94:74:38:4e:f1:66:c7:
e7:9e:e3:f7:90:27:c9:aa:c8:3e:9e:00:dd:6f:18:67:57:b4:
e4:f3:bc:f9:f8:0e:d7:2f:82:b9:16:3e:58:85:b7:bf:f2:d5:
c6:57:70:93:ec:d4:94:0a:79:34:2a:55:06:78:ca:93:b8:8e:
e5:e1:09:e7:c3:b9:25:cc:5f:73:ac:b1:16:52:77:75:61:bf:
4d:d6:fa:20:a1:16:af:1b:60:27:53:2f:7a:02:36:49:53:6a:
ea:bf:40:f9:85:84:38:2a:ef:b8:af:05:9c:ab:78:18:cc:4b:
48:a3:c2:90:cc:fa:b2:81:2e:22:f4:5f:13:db:2d:33:43:c0:
95:7b:f5:f6:c1:25:73:95:01:f4:ba:ca:1b:1a:ae:00:10:71:
78:2b:52:4e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDQx
NDUyMjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEEzRkM3QUEzODhGNTky
NDc2OEQxNjQ5QUI0NDQ1RkRGQTRBODAyQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLeWlD5Yemv9j8fkJ3ytqdzH6eG4UnUJzS58sNtdpFcACPqkaL
TeG2/cTTZxgAQQRMp8TJij4jrURrVEBZ6UXypoftHDan1F5aDfbV5kDP656fkY5u
PwX6G2WW5UDqIsPoUKoLXyXrcT0YKlPFlhfIsDOAzNbU0cnESZQe5CsMhht1w7U0
7J9Zd2jcjKzRrRxslFqsayEMG6PcsJlIU3Qo7b0REzbCNcTkmb0/rtVbeNZu3UR/
spa8vKItQfpzAM+tpuBaxrYZNvkwKnPoQ3WHnKUuPZTAfT0cGTsMa1gxz/xpwb3A
mx/iH/lkAKXgFWJ/3NoY6TpZecGUMHYqo1BnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUo/x6o4j1kkdo0WSatERf36SoAsAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29feDZvNGoxa2tkbzBX
U2F0RVJmMzZTb0FzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFvSOhoErePkm23U+OezkX6KNvZtfC6G
bU2LSD7DHKZOaJRfxSEtq4qNh/P7imIJ+twjnF1BOjN+HRwnKkJ6YknuqRK2KS1b
1s2q9arLjN0AjYDgaok+Lu5zL8yAljg16EVEONsulHQ4TvFmx+ee4/eQJ8mqyD6e
AN1vGGdXtOTzvPn4DtcvgrkWPliFt7/y1cZXcJPs1JQKeTQqVQZ4ypO4juXhCefD
uSXMX3OssRZSd3Vhv03W+iChFq8bYCdTL3oCNklTauq/QPmFhDgq77ivBZyreBjM
S0ijwpDM+rKBLiL0XxPbLTNDwJV79fbBJXOVAfS6yhsargAQcXgrUk4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org