Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/q3lm2VmY0ee9JOzbezt8DDGSV3o.roa
File: q3lm2VmY0ee9JOzbezt8DDGSV3o.roa (raw, json)
Hash identifier: IxtIkCIUFsZkn0KzdXNxjQFENP34UoNUtezzaCKk320=
Subject key identifier: AB:79:66:D9:59:98:D1:E7:BD:24:EC:DB:7B:3B:7C:0C:31:92:57:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q3lm2VmY0ee9JOzbezt8DDGSV3o.roa
Signing time: Wed 17 Apr 2024 20:53:09 +0000
ROA not before: Wed 17 Apr 2024 20:53:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17143 (0x42f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 20:53:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AB7966D95998D1E7BD24ECDB7B3B7C0C3192577A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:87:13:ea:9c:a9:82:b9:d2:2a:7f:13:4c:
ad:c1:54:8f:28:61:e0:67:e2:19:78:b1:0f:2e:c6:
64:54:c2:85:f1:05:ac:00:ca:83:12:e9:da:be:01:
49:b3:f1:06:f6:fd:7d:28:af:26:a4:55:c8:fa:a3:
fe:2a:fd:f5:0f:96:97:58:2e:e7:a5:83:46:0a:55:
b6:40:3f:e7:1f:69:b3:86:2f:5f:09:01:5b:ac:f2:
0c:14:a0:c3:12:38:6c:1c:eb:d1:e2:98:02:64:d7:
21:fe:34:5a:fd:c0:72:bc:bb:14:06:d9:43:d2:f2:
da:4d:2c:77:5a:60:2f:57:b2:42:e7:d2:8c:79:d3:
3b:17:7a:8e:9a:d0:84:fe:66:57:cf:c2:66:15:cf:
3b:f1:b4:40:aa:2c:a3:75:a7:e1:6e:cb:9a:36:97:
e6:6c:4b:fb:82:5f:7c:56:65:05:99:e5:64:1e:3a:
f2:1d:d5:5b:b9:af:61:c5:0d:52:c7:b4:aa:7e:58:
bb:c6:cb:13:4b:3f:71:a4:ce:96:cd:3f:d9:d0:9d:
35:9f:71:99:fc:72:42:e0:eb:3b:14:bd:60:c2:ab:
12:aa:84:1f:7f:da:28:36:34:0b:f0:0c:63:33:73:
aa:41:62:f0:8c:0d:ba:83:b5:72:64:ee:da:8d:d6:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:66:D9:59:98:D1:E7:BD:24:EC:DB:7B:3B:7C:0C:31:92:57:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q3lm2VmY0ee9JOzbezt8DDGSV3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:d8:3e:d0:cb:e1:fd:43:3c:7c:bc:e3:bf:77:ac:0d:0d:da:
6f:f4:f0:7e:aa:2e:62:42:c2:3b:a8:07:99:27:b9:38:68:bc:
b7:a6:31:f3:3d:95:4f:29:22:07:4e:d1:4e:1a:cc:5d:8f:39:
ce:4c:ce:ed:41:c2:10:25:55:10:11:fc:66:26:18:eb:46:d8:
41:b6:5c:a2:3e:c9:aa:d8:bc:ff:86:cf:a7:c2:ff:0e:0f:c0:
43:3a:19:e5:b2:bb:25:90:3b:84:80:b6:88:76:54:e0:d3:eb:
28:47:69:74:38:f2:89:ea:a6:59:fd:c9:5e:60:0e:b9:03:99:
d9:d4:bb:ec:20:19:80:b7:5d:7b:b2:80:dc:4d:4b:28:e0:2d:
17:b4:a3:c1:06:0b:28:4a:9a:e6:c1:56:24:f4:75:6e:e8:f1:
32:a1:db:9f:54:60:4c:f3:3b:0d:c7:db:65:0b:62:c0:d8:4f:
34:82:7a:40:35:86:70:17:7a:bd:c9:38:41:53:28:bc:ca:cb:
0e:2f:66:44:94:98:8b:bf:e6:eb:54:3c:83:af:85:f4:9b:ba:
80:63:24:f4:8e:fb:ae:d5:88:c7:0d:95:a9:76:24:e6:fd:07:
4a:fe:13:a6:dd:ad:e3:03:5e:06:ad:1a:68:9c:e6:0b:a8:10:
32:c9:55:22
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcy
MDUzMDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFCNzk2NkQ5NTk5OEQx
RTdCRDI0RUNEQjdCM0I3QzBDMzE5MjU3N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWQ4cT6pypgrnSKn8TTK3BVI8oYeBn4hl4sQ8uxmRUwoXxBawA
yoMS6dq+AUmz8Qb2/X0oryakVcj6o/4q/fUPlpdYLuelg0YKVbZAP+cfabOGL18J
AVus8gwUoMMSOGwc69HimAJk1yH+NFr9wHK8uxQG2UPS8tpNLHdaYC9XskLn0ox5
0zsXeo6a0IT+ZlfPwmYVzzvxtECqLKN1p+Fuy5o2l+ZsS/uCX3xWZQWZ5WQeOvId
1Vu5r2HFDVLHtKp+WLvGyxNLP3GkzpbNP9nQnTWfcZn8ckLg6zsUvWDCqxKqhB9/
2ig2NAvwDGMzc6pBYvCMDbqDtXJk7tqN1u4/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUq3lm2VmY0ee9JOzbezt8DDGSV3owHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3EzbG0yVm1ZMGVlOUpP
emJlenQ4RERHU1Yzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALLYPtDL4f1DPHy84793rA0N2m/08H6q
LmJCwjuoB5knuThovLemMfM9lU8pIgdO0U4azF2POc5Mzu1BwhAlVRAR/GYmGOtG
2EG2XKI+yarYvP+Gz6fC/w4PwEM6GeWyuyWQO4SAtoh2VODT6yhHaXQ48onqpln9
yV5gDrkDmdnUu+wgGYC3XXuygNxNSyjgLRe0o8EGCyhKmubBViT0dW7o8TKh259U
YEzzOw3H22ULYsDYTzSCekA1hnAXer3JOEFTKLzKyw4vZkSUmIu/5utUPIOvhfSb
uoBjJPSO+67ViMcNlal2JOb9B0r+E6bdreMDXgatGmic5guoEDLJVSI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org