Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qbOeNqn0fkL1O2wh-XnGrnwdXRg.roa
File: qbOeNqn0fkL1O2wh-XnGrnwdXRg.roa (raw, json)
Hash identifier: jiDulPlOhQQ5Ta8oAJMoozv83wa/ib3P+ASb7DKLZ2o=
Subject key identifier: A9:B3:9E:36:A9:F4:7E:42:F5:3B:6C:21:F9:79:C6:AE:7C:1D:5D:18
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3653
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qbOeNqn0fkL1O2wh-XnGrnwdXRg.roa
Signing time: Mon 01 Apr 2024 00:22:11 +0000
ROA not before: Mon 01 Apr 2024 00:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13907 (0x3653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 00:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9B39E36A9F47E42F53B6C21F979C6AE7C1D5D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:f5:a5:ac:2c:67:79:79:35:1a:40:48:9f:
ff:2c:d6:68:b0:58:bb:e3:92:02:04:28:03:68:e7:
6e:b2:fb:f7:ff:1b:ba:17:44:7c:28:b2:7d:90:1d:
6e:4d:af:95:f5:96:80:4c:58:7d:c2:23:e9:f0:8a:
2f:96:14:ee:a8:16:11:6a:4c:af:47:5a:c5:e3:90:
de:79:0d:de:a3:30:ec:73:b2:52:15:0e:66:14:37:
e3:38:ff:cc:4f:7c:c6:0b:bc:34:c7:fd:63:f6:85:
06:92:78:27:73:3f:3f:26:bb:a8:9e:28:f5:b4:c3:
39:88:c3:a5:e3:14:e8:8b:ac:b3:b6:67:bc:70:90:
7f:7f:2a:a4:46:4a:39:a3:0f:f1:dd:98:6f:21:0c:
fc:39:f1:a3:da:8b:51:bd:f4:8d:95:f1:f2:85:f6:
93:9c:d9:79:fc:c1:9d:50:1d:01:31:78:54:da:f8:
42:e1:33:ce:f9:8e:18:4b:23:fd:58:14:ac:13:42:
42:64:08:46:84:b0:1b:64:38:4e:34:df:54:1e:6b:
8a:57:ed:28:a0:aa:d2:8f:b4:a6:aa:2d:76:57:e0:
2a:77:8c:c0:46:2c:29:23:52:55:8b:16:b9:2f:d0:
ce:a3:4d:45:89:39:38:bc:09:2e:ec:f4:ee:01:0e:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:9E:36:A9:F4:7E:42:F5:3B:6C:21:F9:79:C6:AE:7C:1D:5D:18
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qbOeNqn0fkL1O2wh-XnGrnwdXRg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:42:a0:93:32:98:23:22:38:98:73:97:75:38:40:46:5a:c2:
44:47:2d:c3:71:93:3f:6a:04:11:61:62:9e:ca:d3:8c:ca:d4:
6a:fd:bc:53:16:ae:1f:ce:2a:44:22:e0:ef:1b:fc:e5:35:38:
91:6a:cd:61:41:18:92:4e:82:fa:fb:2e:59:64:6a:46:b8:72:
b0:17:81:12:0b:06:1e:67:76:fb:cc:33:61:dd:5b:8a:69:c1:
c2:ca:e5:71:7f:56:80:72:6d:ae:1e:43:f2:14:68:ee:ea:ca:
0f:6a:35:b8:04:36:78:f4:28:55:0d:68:8e:69:30:53:f9:17:
37:f4:13:58:99:1c:e9:32:98:99:78:ec:f6:81:ba:d9:b8:23:
89:26:f9:d3:ea:37:d9:1c:b4:a9:98:4b:54:02:54:f4:9a:c4:
ba:b9:e5:a4:ca:72:c2:39:ba:7f:19:f5:47:48:82:37:af:a5:
87:8b:5b:13:22:dc:56:b8:1e:ae:cb:7a:6f:ec:b6:2b:86:82:
f8:0c:1e:49:dd:a0:00:fc:31:37:78:dc:95:9a:cb:6c:97:c4:
eb:2b:ef:e8:9a:df:c5:09:4e:56:13:1d:9b:d1:4a:e2:a5:1e:
33:93:82:2c:b6:fa:68:49:e8:a5:49:78:d3:19:41:2f:3e:5e:
02:74:4b:03
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEw
MDIyMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE5QjM5RTM2QTlGNDdF
NDJGNTNCNkMyMUY5NzlDNkFFN0MxRDVEMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7KfWlrCxneXk1GkBIn/8s1miwWLvjkgIEKANo526y+/f/G7oX
RHwosn2QHW5Nr5X1loBMWH3CI+nwii+WFO6oFhFqTK9HWsXjkN55Dd6jMOxzslIV
DmYUN+M4/8xPfMYLvDTH/WP2hQaSeCdzPz8mu6ieKPW0wzmIw6XjFOiLrLO2Z7xw
kH9/KqRGSjmjD/HdmG8hDPw58aPai1G99I2V8fKF9pOc2Xn8wZ1QHQExeFTa+ELh
M875jhhLI/1YFKwTQkJkCEaEsBtkOE4031Qea4pX7SigqtKPtKaqLXZX4Cp3jMBG
LCkjUlWLFrkv0M6jTUWJOTi8CS7s9O4BDreFAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUqbOeNqn0fkL1O2wh+XnGrnwdXRgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3FiT2VOcW4wZmtMMU8y
d2gtWG5Hcm53ZFhSZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAC9CoJMymCMiOJhzl3U4QEZawkRHLcNx
kz9qBBFhYp7K04zK1Gr9vFMWrh/OKkQi4O8b/OU1OJFqzWFBGJJOgvr7Lllkaka4
crAXgRILBh5ndvvMM2HdW4ppwcLK5XF/VoByba4eQ/IUaO7qyg9qNbgENnj0KFUN
aI5pMFP5Fzf0E1iZHOkymJl47PaButm4I4km+dPqN9kctKmYS1QCVPSaxLq55aTK
csI5un8Z9UdIgjevpYeLWxMi3Fa4Hq7Lem/stiuGgvgMHkndoAD8MTd43JWay2yX
xOsr7+ia38UJTlYTHZvRSuKlHjOTgiy2+mhJ6KVJeNMZQS8+XgJ0SwM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:48 2024 by rpki-client on console-fra.rpki-client.org