Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/s_iDYpXqFEbzjuIhphqAvZn0W1Y.roa
File: s_iDYpXqFEbzjuIhphqAvZn0W1Y.roa (raw, json)
Hash identifier: I7lJ2JYSu0miPEGowqnbAQtDJLoFXpzaIkIvMbAjqJY=
Subject key identifier: B3:F8:83:62:95:EA:14:46:F3:8E:E2:21:A6:1A:80:BD:99:F4:5B:56
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3977
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s_iDYpXqFEbzjuIhphqAvZn0W1Y.roa
Signing time: Fri 05 Apr 2024 04:52:24 +0000
ROA not before: Fri 05 Apr 2024 04:52:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14711 (0x3977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 04:52:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B3F8836295EA1446F38EE221A61A80BD99F45B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:fb:9c:7e:63:0a:2b:23:28:bc:21:0f:bb:
5a:6a:80:36:d6:aa:cc:e8:2d:c2:af:53:20:aa:70:
db:6d:ea:92:d5:cc:2c:04:b9:34:40:4c:1e:11:c8:
cd:c3:33:6e:ca:0a:0b:75:3b:0f:14:21:b1:ef:c1:
be:91:e9:0f:d2:6f:08:f7:aa:d0:bf:57:6f:0f:ba:
38:4f:d8:65:d8:5d:61:fa:9b:77:84:05:0c:ec:3b:
17:16:45:00:8d:0e:67:83:b4:6e:d1:23:ab:9a:44:
27:7f:31:7d:f4:66:13:24:39:6d:30:2e:e3:58:4d:
57:5c:0e:9b:65:29:9f:8d:4a:49:cc:b2:0a:09:7d:
e0:2e:32:95:c4:aa:c5:d2:e2:51:43:e4:1c:f7:cd:
5e:2f:91:85:ba:82:e8:a7:15:4a:d0:22:20:83:9e:
e3:b4:7f:3f:bb:c6:a8:37:c3:86:53:9d:25:06:e2:
4f:8c:63:94:68:c1:55:58:b1:51:48:9b:f2:71:73:
6e:44:c1:f3:c6:e5:3e:75:84:de:57:ef:e5:4e:09:
7f:db:2c:47:f8:a1:cd:26:d1:62:80:6e:15:f2:47:
a6:f4:42:cf:73:75:fc:66:73:4f:2c:1e:b4:e1:92:
7e:fd:79:65:02:b1:65:06:06:20:b8:78:54:53:27:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:83:62:95:EA:14:46:F3:8E:E2:21:A6:1A:80:BD:99:F4:5B:56
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s_iDYpXqFEbzjuIhphqAvZn0W1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:9a:3a:52:c5:5d:65:02:f1:29:cf:44:6c:fc:e9:94:2b:e4:
10:84:a6:78:9a:23:7c:8c:b5:08:93:7c:47:11:2f:37:3e:68:
b1:37:d4:08:28:b7:67:d4:e7:ad:fb:cf:17:fe:e9:70:34:d6:
88:7b:2c:b9:f6:02:c1:ed:2d:b8:11:1d:0c:08:46:e6:40:aa:
17:37:d7:3f:84:48:0f:e3:c4:8d:e1:da:b0:cb:ec:16:06:02:
44:7a:22:64:8c:04:39:13:ad:b4:cd:80:59:9c:6e:b3:15:89:
cf:9a:ac:0b:dd:b5:47:08:c7:bc:ca:4e:e8:da:cd:dd:9b:03:
dd:ed:f6:d2:22:4b:1c:47:5b:4d:13:de:b4:3f:e7:4e:00:28:
a5:06:f7:48:b7:67:8b:e3:a7:b8:a6:f9:3a:3c:af:54:75:eb:
db:2c:7d:82:e2:81:9d:1a:68:93:ea:5d:9a:65:c6:5a:14:d9:
e3:56:4f:95:58:bb:43:1f:c7:42:f2:de:37:a8:6d:7c:6e:e5:
aa:70:09:7f:f8:a4:bf:00:2b:2f:c1:09:8d:8d:66:1a:73:ba:
e4:19:b7:fc:06:b9:86:6e:5b:b7:0f:cc:2b:b0:2c:ff:a6:2d:
7c:2c:2b:21:82:16:db:ce:08:cd:a3:d1:ad:68:b3:99:77:a1:
7a:5e:7f:44
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDUw
NDUyMjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIzRjg4MzYyOTVFQTE0
NDZGMzhFRTIyMUE2MUE4MEJEOTlGNDVCNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvWvucfmMKKyMovCEPu1pqgDbWqszoLcKvUyCqcNtt6pLVzCwE
uTRATB4RyM3DM27KCgt1Ow8UIbHvwb6R6Q/Sbwj3qtC/V28PujhP2GXYXWH6m3eE
BQzsOxcWRQCNDmeDtG7RI6uaRCd/MX30ZhMkOW0wLuNYTVdcDptlKZ+NSknMsgoJ
feAuMpXEqsXS4lFD5Bz3zV4vkYW6guinFUrQIiCDnuO0fz+7xqg3w4ZTnSUG4k+M
Y5RowVVYsVFIm/Jxc25EwfPG5T51hN5X7+VOCX/bLEf4oc0m0WKAbhXyR6b0Qs9z
dfxmc08sHrThkn79eWUCsWUGBiC4eFRTJ1z5AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUs/iDYpXqFEbzjuIhphqAvZn0W1YwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NfaURZcFhxRkViemp1
SWhwaHFBdlpuMFcxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACiaOlLFXWUC8SnPRGz86ZQr5BCEpnia
I3yMtQiTfEcRLzc+aLE31Agot2fU5637zxf+6XA01oh7LLn2AsHtLbgRHQwIRuZA
qhc31z+ESA/jxI3h2rDL7BYGAkR6ImSMBDkTrbTNgFmcbrMVic+arAvdtUcIx7zK
Tujazd2bA93t9tIiSxxHW00T3rQ/504AKKUG90i3Z4vjp7im+To8r1R169ssfYLi
gZ0aaJPqXZplxloU2eNWT5VYu0Mfx0Ly3jeobXxu5apwCX/4pL8AKy/BCY2NZhpz
uuQZt/wGuYZuW7cPzCuwLP+mLXwsKyGCFtvOCM2j0a1os5l3oXpef0Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:28 2025 by rpki-client