Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qdnL1RRRLL3Zm6ZsniQJNM8BUqk.roa
File: qdnL1RRRLL3Zm6ZsniQJNM8BUqk.roa (raw, json)
Hash identifier: OshfsYlWeE1ZLO1cW5ijgQpGQc8dqTtPGJ9nG3qxKyg=
Subject key identifier: A9:D9:CB:D5:14:51:2C:BD:D9:9B:A6:6C:9E:24:09:34:CF:01:52:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 369F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qdnL1RRRLL3Zm6ZsniQJNM8BUqk.roa
Signing time: Mon 01 Apr 2024 09:52:11 +0000
ROA not before: Mon 01 Apr 2024 09:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13983 (0x369f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 09:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9D9CBD514512CBDD99BA66C9E240934CF0152A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:24:71:28:17:0d:6c:48:51:ee:03:7d:e4:
17:21:84:77:56:cf:03:ad:a5:4a:ae:d4:a9:75:7b:
29:f6:41:01:0f:2b:7a:f0:81:ec:de:8c:6b:15:36:
b3:5d:73:75:f5:e9:57:4c:02:62:40:47:ee:51:c9:
ac:85:73:ec:b9:87:cc:8a:2a:b6:6f:67:8b:3e:94:
ef:94:05:ab:92:3b:fd:50:37:8c:e2:07:be:93:ff:
5d:f4:7c:54:fe:25:28:10:15:78:5f:06:80:64:b3:
ae:78:5c:9b:d2:6c:e4:2a:41:60:dd:42:8d:b5:65:
28:b5:a9:bc:c9:ea:3d:c8:18:6b:10:88:a4:db:c2:
79:f7:f1:a0:5a:b2:07:f7:17:9f:4a:5d:15:06:31:
61:a9:5d:3f:d8:a1:e6:08:b2:f1:3a:1b:c6:04:d6:
10:bb:4b:17:c3:a0:5c:94:6d:3b:32:a6:39:7e:43:
7e:cc:77:36:fd:04:a9:73:f5:98:22:3a:d8:7f:d4:
37:af:83:4d:c0:c8:fe:b6:06:90:da:e0:04:1a:ad:
73:5f:8e:f5:0a:8c:80:f3:8f:11:89:22:9f:e9:ec:
31:e6:b4:9a:4f:af:c6:40:48:26:18:1f:06:7b:41:
d6:33:73:19:ae:4e:d8:92:53:ca:a4:59:6f:e2:eb:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:CB:D5:14:51:2C:BD:D9:9B:A6:6C:9E:24:09:34:CF:01:52:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qdnL1RRRLL3Zm6ZsniQJNM8BUqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
13:5d:4a:a8:ef:86:94:ba:94:c9:e4:3d:47:24:72:43:f6:f9:
ab:59:53:5b:ac:a8:9c:e2:62:87:27:c5:76:88:69:f4:14:dc:
ca:f8:e8:c6:53:c1:9b:3b:12:61:84:f9:05:6f:43:b3:e8:cd:
2c:ea:7e:a0:e8:cc:ee:6a:5c:24:b1:a9:c9:cd:64:61:13:4d:
6a:ad:11:b2:ff:9d:f2:c7:95:c2:88:52:d7:10:4d:5f:7b:08:
bd:87:7e:20:78:fd:c2:3a:9c:ba:87:a9:bb:98:cd:bf:60:8c:
03:fb:19:a9:58:a2:e6:79:44:4e:90:38:bb:23:d5:72:8e:1c:
11:01:78:10:d7:ed:f3:85:e9:06:ca:ce:c2:e4:8d:8a:39:7f:
26:03:61:65:1c:10:a6:d2:78:c9:89:9b:28:fd:a0:4c:61:a0:
81:7a:02:2f:4b:ba:a0:87:05:d0:91:20:f0:10:56:d2:fe:22:
62:8b:92:9f:c4:a1:fe:a3:94:02:3a:96:7a:ce:6c:53:ef:9b:
72:28:e7:25:ab:66:13:dc:6d:a4:b3:4c:19:64:bd:88:36:c0:
18:21:c3:d6:c7:9d:6f:58:dc:ce:b9:ce:02:66:0c:53:14:1f:
98:9f:19:69:37:82:ae:68:c7:08:de:77:4e:df:ce:d4:30:ec:
ab:90:bc:9a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDEw
OTUyMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE5RDlDQkQ1MTQ1MTJD
QkREOTlCQTY2QzlFMjQwOTM0Q0YwMTUyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwlCRxKBcNbEhR7gN95BchhHdWzwOtpUqu1Kl1eyn2QQEPK3rw
gezejGsVNrNdc3X16VdMAmJAR+5RyayFc+y5h8yKKrZvZ4s+lO+UBauSO/1QN4zi
B76T/130fFT+JSgQFXhfBoBks654XJvSbOQqQWDdQo21ZSi1qbzJ6j3IGGsQiKTb
wnn38aBasgf3F59KXRUGMWGpXT/YoeYIsvE6G8YE1hC7SxfDoFyUbTsypjl+Q37M
dzb9BKlz9ZgiOth/1Devg03AyP62BpDa4AQarXNfjvUKjIDzjxGJIp/p7DHmtJpP
r8ZASCYYHwZ7QdYzcxmuTtiSU8qkWW/i681LAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUqdnL1RRRLL3Zm6ZsniQJNM8BUqkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3FkbkwxUlJSTEwzWm02
WnNuaVFKTk04QlVxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABNdSqjvhpS6lMnkPUckckP2+atZU1us
qJziYocnxXaIafQU3Mr46MZTwZs7EmGE+QVvQ7PozSzqfqDozO5qXCSxqcnNZGET
TWqtEbL/nfLHlcKIUtcQTV97CL2HfiB4/cI6nLqHqbuYzb9gjAP7GalYouZ5RE6Q
OLsj1XKOHBEBeBDX7fOF6QbKzsLkjYo5fyYDYWUcEKbSeMmJmyj9oExhoIF6Ai9L
uqCHBdCRIPAQVtL+ImKLkp/Eof6jlAI6lnrObFPvm3Io5yWrZhPcbaSzTBlkvYg2
wBghw9bHnW9Y3M65zgJmDFMUH5ifGWk3gq5oxwjed07fztQw7KuQvJo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:12 2024 by rpki-client on console-ams.rpki-client.org