Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pCKxgffwwQjV9u3Ps1oYDeLnA2w.roa
File: pCKxgffwwQjV9u3Ps1oYDeLnA2w.roa (raw, json)
Hash identifier: H5yUy0sc64PaJt5A8EWDaMjkS+rbhzPsJB+JpMgJwmE=
Subject key identifier: A4:22:B1:81:F7:F0:C1:08:D5:F6:ED:CF:B3:5A:18:0D:E2:E7:03:6C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E17
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pCKxgffwwQjV9u3Ps1oYDeLnA2w.roa
Signing time: Thu 02 May 2024 16:53:43 +0000
ROA not before: Thu 02 May 2024 16:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19991 (0x4e17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 16:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A422B181F7F0C108D5F6EDCFB35A180DE2E7036C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:38:3c:b6:22:e2:51:a4:65:a6:12:82:e5:
3f:1f:50:29:f8:d3:c2:a2:d2:e6:9d:2a:13:9a:98:
99:15:59:52:aa:9d:20:47:47:34:1a:ca:b6:ea:b2:
78:96:b8:e3:6a:9f:64:18:9b:96:bf:c3:38:c0:88:
48:9c:61:18:a2:45:33:95:dc:bd:e1:41:22:8d:6d:
07:0e:4b:a0:53:99:2f:1b:84:1e:0e:17:9c:b7:d0:
e1:f0:ad:37:6b:6a:27:50:ac:fd:75:df:1c:87:4b:
ef:9a:18:47:04:66:0a:3b:31:80:71:07:14:b8:51:
00:7f:36:6d:d2:f9:82:85:64:22:a3:09:cb:b0:c9:
f1:37:92:4d:de:00:1f:fc:18:33:97:02:44:50:f0:
4c:e4:f0:97:36:d1:8a:9c:a5:9f:ce:5c:50:a8:8e:
50:c4:da:77:e7:d2:3a:53:8a:6c:f2:5a:b5:53:bb:
07:22:85:0f:8c:83:0b:d4:0b:5a:bb:39:43:b0:65:
dd:1e:71:eb:59:a1:79:1a:f3:84:75:98:d4:54:cf:
e4:a4:8f:96:33:00:45:04:17:cf:37:6d:aa:28:17:
3f:4a:6e:cd:69:34:10:14:b5:64:61:6e:13:73:b6:
f1:f4:2f:09:a8:89:20:4d:8c:0f:98:b6:aa:b2:0e:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:B1:81:F7:F0:C1:08:D5:F6:ED:CF:B3:5A:18:0D:E2:E7:03:6C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pCKxgffwwQjV9u3Ps1oYDeLnA2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:85:e5:19:b9:8d:de:cc:03:0a:4c:46:b4:4f:7d:83:28:39:
f1:0c:2b:ea:1d:5c:54:64:cb:e0:57:53:29:db:90:54:27:15:
8e:0a:9d:19:39:ca:3b:e2:39:84:c9:af:9e:1f:78:4e:72:6e:
19:65:53:58:f9:20:2c:82:5e:29:76:75:68:80:53:32:e3:e2:
32:08:aa:02:11:5e:6a:b6:46:42:05:83:34:32:ae:1d:cc:f5:
0e:63:e2:8a:23:12:4f:84:63:bd:a4:91:8d:c1:ac:07:b4:51:
b5:ad:6b:d5:bf:1e:51:a4:4e:c1:6f:f9:89:4d:05:30:2c:65:
c5:ec:02:44:c7:13:5b:66:f5:ab:91:ba:04:2e:eb:0c:a9:27:
c4:65:ac:68:ff:2c:10:a9:d8:72:23:a2:40:8f:2e:e5:82:57:
d2:40:97:6b:33:b2:90:12:21:f3:c8:5e:60:ab:06:60:2d:f0:
de:15:47:4d:f5:55:6e:26:3e:07:c8:e8:93:77:4c:c1:d6:ff:
aa:d1:8b:11:7c:3c:ce:68:f3:c0:49:0e:12:10:da:43:df:c3:
85:6f:b8:85:41:04:70:49:4a:7c:20:3e:55:75:3f:3d:71:7c:
ae:14:1b:e5:20:1e:3f:e9:21:47:bb:f5:57:69:a6:9d:30:16:
6d:f0:da:f8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICThcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIx
NjUzNDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE0MjJCMTgxRjdGMEMx
MDhENUY2RURDRkIzNUExODBERTJFNzAzNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVtDg8tiLiUaRlphKC5T8fUCn408Ki0uadKhOamJkVWVKqnSBH
RzQayrbqsniWuONqn2QYm5a/wzjAiEicYRiiRTOV3L3hQSKNbQcOS6BTmS8bhB4O
F5y30OHwrTdraidQrP113xyHS++aGEcEZgo7MYBxBxS4UQB/Nm3S+YKFZCKjCcuw
yfE3kk3eAB/8GDOXAkRQ8Ezk8Jc20YqcpZ/OXFCojlDE2nfn0jpTimzyWrVTuwci
hQ+MgwvUC1q7OUOwZd0ecetZoXka84R1mNRUz+Skj5YzAEUEF883baooFz9Kbs1p
NBAUtWRhbhNztvH0LwmoiSBNjA+YtqqyDjSZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUpCKxgffwwQjV9u3Ps1oYDeLnA2wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BDS3hnZmZ3d1FqVjl1
M1BzMW9ZRGVMbkEydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADWF5Rm5jd7MAwpMRrRPfYMoOfEMK+od
XFRky+BXUynbkFQnFY4KnRk5yjviOYTJr54feE5ybhllU1j5ICyCXil2dWiAUzLj
4jIIqgIRXmq2RkIFgzQyrh3M9Q5j4oojEk+EY72kkY3BrAe0UbWta9W/HlGkTsFv
+YlNBTAsZcXsAkTHE1tm9auRugQu6wypJ8RlrGj/LBCp2HIjokCPLuWCV9JAl2sz
spASIfPIXmCrBmAt8N4VR031VW4mPgfI6JN3TMHW/6rRixF8PM5o88BJDhIQ2kPf
w4VvuIVBBHBJSnwgPlV1Pz1xfK4UG+UgHj/pIUe79Vdppp0wFm3w2vg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org