Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pta1PttZ8UDj7AVnvfWilYvNBoI.roa
File: pta1PttZ8UDj7AVnvfWilYvNBoI.roa (raw, json)
Hash identifier: YWXM8LSEPqWnCxwglONFfF1PwQenytEftvwf2cGyHiU=
Subject key identifier: A6:D6:B5:3E:DB:59:F1:40:E3:EC:05:67:BD:F5:A2:95:8B:CD:06:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4437
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pta1PttZ8UDj7AVnvfWilYvNBoI.roa
Signing time: Fri 19 Apr 2024 12:53:02 +0000
ROA not before: Fri 19 Apr 2024 12:53:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17463 (0x4437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 12:53:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A6D6B53EDB59F140E3EC0567BDF5A2958BCD0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:14:d0:9d:f6:5a:e0:75:66:a7:2c:f8:99:
85:8b:f3:bc:a4:9a:62:1e:fc:19:81:7d:c5:a1:bf:
b2:96:09:9e:a0:46:e2:fe:3a:09:0b:d6:62:b7:49:
da:a3:63:2b:d6:7c:df:5c:cd:ce:d8:90:2a:f9:a1:
31:e9:01:0f:05:ab:1f:92:20:6e:66:7a:ea:a3:ec:
6e:b9:0c:00:bf:08:5a:67:c4:a5:77:31:27:c0:e9:
4e:97:b8:63:79:14:6e:dd:bb:9d:99:78:06:08:58:
d5:81:86:ef:d0:98:ba:25:b8:65:38:31:6a:c0:c9:
c1:ab:73:4b:18:e4:68:fc:7e:1f:76:7e:f5:f9:54:
f4:5f:eb:a1:b8:6b:f8:b3:69:ff:03:c8:42:7b:f2:
0c:a5:2f:8c:0c:53:04:89:51:56:85:71:b8:31:6a:
e8:e0:d9:58:cc:18:73:e6:23:ba:7e:9e:07:c0:61:
4a:bc:93:29:29:d9:33:d0:4d:46:cc:33:8d:2d:30:
dd:d6:b7:0e:4b:09:f4:59:56:94:a7:38:9c:4d:08:
4d:73:52:63:1c:14:c7:33:1b:73:36:69:54:1b:13:
d9:ea:31:f4:1d:81:ff:59:1f:fb:92:82:24:dd:10:
30:59:ae:41:ed:dd:b9:8c:24:2b:25:8e:07:f3:45:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:B5:3E:DB:59:F1:40:E3:EC:05:67:BD:F5:A2:95:8B:CD:06:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pta1PttZ8UDj7AVnvfWilYvNBoI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
25:d2:14:72:16:86:b6:9e:dd:d4:a8:29:11:b1:7d:fe:47:1d:
20:a7:4d:0e:9e:25:c2:8d:3e:28:42:22:ac:fc:81:97:b0:d1:
df:67:95:3f:6f:f5:bf:34:1e:35:8d:4f:bd:f0:40:c2:c6:64:
80:83:7d:d4:de:96:9d:87:4e:9d:68:eb:07:94:0f:f5:1c:c5:
13:5e:d9:ac:98:df:c3:71:42:ce:3e:ce:2e:83:35:a0:bb:46:
53:54:6e:c0:fe:57:41:b2:45:b8:36:41:c8:cf:d9:3f:24:5b:
16:1c:52:f7:ec:f4:c8:a9:a8:a5:27:68:8c:30:47:90:d4:c7:
85:0f:ed:8a:3a:76:76:09:28:0a:2b:22:30:e3:48:47:ef:4d:
ac:89:ae:ff:df:54:3b:54:0b:9d:6f:54:c8:e8:3a:d8:00:d9:
ee:3b:65:8e:fc:fc:64:93:aa:c8:f6:60:b0:af:77:d5:d7:58:
03:ee:13:51:6f:15:38:70:fe:c3:27:61:21:e6:22:0f:cf:75:
cd:2b:42:e4:32:9e:6f:69:12:a8:74:53:ef:1c:8f:d1:1a:a0:
7f:79:cd:c6:02:07:68:07:cc:10:99:d1:7b:e1:24:b5:6a:83:
bd:24:27:b5:17:06:88:7d:da:e6:15:d4:91:70:aa:30:91:1d:
cc:48:e5:20
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkx
MjUzMDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE2RDZCNTNFREI1OUYx
NDBFM0VDMDU2N0JERjVBMjk1OEJDRDA2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpuhTQnfZa4HVmpyz4mYWL87ykmmIe/BmBfcWhv7KWCZ6gRuL+
OgkL1mK3SdqjYyvWfN9czc7YkCr5oTHpAQ8Fqx+SIG5meuqj7G65DAC/CFpnxKV3
MSfA6U6XuGN5FG7du52ZeAYIWNWBhu/QmLoluGU4MWrAycGrc0sY5Gj8fh92fvX5
VPRf66G4a/izaf8DyEJ78gylL4wMUwSJUVaFcbgxaujg2VjMGHPmI7p+ngfAYUq8
kykp2TPQTUbMM40tMN3Wtw5LCfRZVpSnOJxNCE1zUmMcFMczG3M2aVQbE9nqMfQd
gf9ZH/uSgiTdEDBZrkHt3bmMJCsljgfzRd1VAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUpta1PttZ8UDj7AVnvfWilYvNBoIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3B0YTFQdHRaOFVEajdB
Vm52ZldpbFl2TkJvSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACXSFHIWhrae3dSoKRGxff5HHSCnTQ6e
JcKNPihCIqz8gZew0d9nlT9v9b80HjWNT73wQMLGZICDfdTelp2HTp1o6weUD/Uc
xRNe2ayY38NxQs4+zi6DNaC7RlNUbsD+V0GyRbg2QcjP2T8kWxYcUvfs9MipqKUn
aIwwR5DUx4UP7Yo6dnYJKAorIjDjSEfvTayJrv/fVDtUC51vVMjoOtgA2e47ZY78
/GSTqsj2YLCvd9XXWAPuE1FvFThw/sMnYSHmIg/Pdc0rQuQynm9pEqh0U+8cj9Ea
oH95zcYCB2gHzBCZ0XvhJLVqg70kJ7UXBoh92uYV1JFwqjCRHcxI5SA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org