Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pdU27GdkoGzBuJO4pZ1aLP97tcc.roa
File: pdU27GdkoGzBuJO4pZ1aLP97tcc.roa (raw, json)
Hash identifier: 0CqpoxNtFQUdKkco12WoT9ddBpCs1IkTmyY782VsvW8=
Subject key identifier: A5:D5:36:EC:67:64:A0:6C:C1:B8:93:B8:A5:9D:5A:2C:FF:7B:B5:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C5B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pdU27GdkoGzBuJO4pZ1aLP97tcc.roa
Signing time: Tue 30 Apr 2024 09:23:33 +0000
ROA not before: Tue 30 Apr 2024 09:23:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19547 (0x4c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 09:23:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A5D536EC6764A06CC1B893B8A59D5A2CFF7BB5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:f8:58:ba:33:aa:bd:6d:c6:c4:96:5d:93:
3c:c7:e1:52:5d:b3:4a:76:39:c1:a1:19:3f:2e:89:
e0:ad:0f:31:c6:41:4d:b5:0b:ec:18:68:63:f9:87:
37:b8:d7:70:8e:ff:42:fd:66:ef:8e:12:9e:49:59:
b5:53:51:41:7e:ff:9e:7b:a6:25:b5:a8:eb:ca:b6:
58:b9:ec:ad:57:6a:76:62:91:97:9a:57:70:41:44:
e6:75:e4:78:e3:ed:4b:98:bd:91:ca:f2:75:e9:4b:
6d:c6:45:5c:94:18:65:6d:7d:0a:ca:52:1b:e3:29:
35:d2:4f:f7:e0:4d:86:99:a8:61:42:32:d1:49:92:
0a:6d:60:92:3a:40:b9:f7:c0:fd:9d:86:6f:68:62:
8e:ea:e5:dc:f6:42:a7:78:9a:37:97:99:f1:03:48:
7e:9c:80:15:b7:f6:f7:04:fc:bf:b9:24:e2:b3:89:
4f:2e:90:d7:f7:d5:66:19:08:1c:50:15:77:4c:80:
d5:96:8d:d9:41:73:27:e8:92:fc:6e:35:8c:b7:1c:
c5:c6:8d:e1:0e:ff:03:2c:5d:7f:eb:4c:15:60:31:
ed:f2:5b:2d:b5:01:22:a7:91:65:e8:1c:e5:5c:a9:
8f:1e:63:1b:fc:d2:c8:82:ae:24:b3:9d:df:d1:48:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:36:EC:67:64:A0:6C:C1:B8:93:B8:A5:9D:5A:2C:FF:7B:B5:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pdU27GdkoGzBuJO4pZ1aLP97tcc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
13:36:eb:7f:e2:80:bb:ba:b2:05:57:9f:46:89:d0:19:fb:8c:
5e:63:1c:d4:44:b7:b8:5d:13:8f:67:43:cd:7c:1f:26:f9:18:
0b:a4:26:f5:5e:59:ca:24:5d:8b:4a:07:48:62:1b:1d:b3:5e:
6c:ab:ec:24:3b:5f:1a:6f:de:e5:c9:7a:84:39:60:bb:3c:92:
a9:d0:64:ce:12:b8:1b:fd:4d:5d:0e:63:aa:86:14:63:21:4a:
e0:34:52:5c:7c:65:21:2f:ed:35:db:04:cc:8f:aa:86:ee:dc:
87:6a:38:c8:16:82:8a:19:8b:6b:22:5d:90:77:4e:e3:c0:e1:
d3:93:14:14:91:55:e8:db:e0:63:f3:48:d2:d7:d6:b5:d4:b7:
0d:16:13:bc:9a:91:ce:fa:02:fc:d4:9d:d2:71:a5:e2:91:b3:
27:d2:02:88:b4:1e:87:06:2b:d4:af:b2:78:f1:36:e1:a2:75:
c4:28:ae:35:af:37:f5:1e:d9:82:d4:01:4b:c5:96:ed:04:c6:
cc:22:f3:23:1f:35:e2:5d:61:63:c4:f0:be:33:0c:54:0b:08:
37:33:5c:3d:af:6d:9d:4e:f9:df:42:c4:fc:af:34:f1:49:e0:
83:f6:a0:da:94:ec:43:f6:f3:5d:0c:1d:bc:25:a1:46:d7:27:
b4:ae:18:c8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MzAw
OTIzMzNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE1RDUzNkVDNjc2NEEw
NkNDMUI4OTNCOEE1OUQ1QTJDRkY3QkI1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK6/hYujOqvW3GxJZdkzzH4VJds0p2OcGhGT8uieCtDzHGQU21
C+wYaGP5hze413CO/0L9Zu+OEp5JWbVTUUF+/557piW1qOvKtli57K1XanZikZea
V3BBROZ15Hjj7UuYvZHK8nXpS23GRVyUGGVtfQrKUhvjKTXST/fgTYaZqGFCMtFJ
kgptYJI6QLn3wP2dhm9oYo7q5dz2Qqd4mjeXmfEDSH6cgBW39vcE/L+5JOKziU8u
kNf31WYZCBxQFXdMgNWWjdlBcyfokvxuNYy3HMXGjeEO/wMsXX/rTBVgMe3yWy21
ASKnkWXoHOVcqY8eYxv80siCriSznd/RSBFfAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUpdU27GdkoGzBuJO4pZ1aLP97tccwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BkVTI3R2Rrb0d6QnVK
TzRwWjFhTFA5N3RjYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABM263/igLu6sgVXn0aJ0Bn7jF5jHNRE
t7hdE49nQ818Hyb5GAukJvVeWcokXYtKB0hiGx2zXmyr7CQ7Xxpv3uXJeoQ5YLs8
kqnQZM4SuBv9TV0OY6qGFGMhSuA0Ulx8ZSEv7TXbBMyPqobu3IdqOMgWgooZi2si
XZB3TuPA4dOTFBSRVejb4GPzSNLX1rXUtw0WE7yakc76AvzUndJxpeKRsyfSAoi0
HocGK9SvsnjxNuGidcQorjWvN/Ue2YLUAUvFlu0Exswi8yMfNeJdYWPE8L4zDFQL
CDczXD2vbZ1O+d9CxPyvNPFJ4IP2oNqU7EP2810MHbwloUbXJ7SuGMg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org