Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sa_bN2LOYbzZFzwXr2Xv43Tnsdo.roa
File: sa_bN2LOYbzZFzwXr2Xv43Tnsdo.roa (raw, json)
Hash identifier: vgQV/kpILiDFDK3a4ZFF1rG5G46RK/es8pHY4iwzPUM=
Subject key identifier: B1:AF:DB:37:62:CE:61:BC:D9:17:3C:17:AF:65:EF:E3:74:E7:B1:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 549F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sa_bN2LOYbzZFzwXr2Xv43Tnsdo.roa
Signing time: Sat 11 May 2024 09:54:03 +0000
ROA not before: Sat 11 May 2024 09:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21663 (0x549f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 09:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B1AFDB3762CE61BCD9173C17AF65EFE374E7B1DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:6c:cf:37:99:bc:51:ea:b8:e7:29:75:69:
26:34:80:d1:34:75:e6:58:bf:b5:f4:a3:5c:41:32:
e4:fe:72:aa:ad:61:a8:76:7b:d9:58:55:75:4b:56:
51:78:7c:23:66:70:c9:b6:19:f4:00:b4:0e:33:b6:
24:67:b0:09:02:28:7a:cd:c4:23:c1:62:01:3e:3d:
f9:2f:cf:37:36:8c:e4:bf:fe:dc:9f:5e:bc:77:c3:
05:ae:08:13:a4:e1:e4:d2:7b:bb:6c:16:91:59:14:
70:ff:08:28:13:a4:c1:bf:63:ae:2d:59:06:42:0c:
d2:16:1e:f9:39:f4:ec:ca:75:b4:a3:44:9d:05:ab:
61:46:76:4e:88:a5:ab:79:6b:51:3b:0f:de:a5:f3:
a7:e0:ab:5c:6e:19:d4:ce:f8:26:c3:69:49:9c:76:
d2:f5:28:0c:b3:6e:76:f8:44:9a:13:c7:25:e7:5d:
ad:a4:5b:d3:52:33:20:7a:49:3b:c7:f0:f8:9d:09:
9d:b6:74:5c:8f:57:8d:b6:88:8d:3a:6b:39:e8:d9:
51:45:32:90:fe:e2:35:ea:dd:6e:7a:25:97:7c:4e:
37:94:d9:64:67:89:2a:e2:9d:01:fd:56:7e:f0:d6:
cc:6e:8d:65:3b:19:96:96:ec:35:20:42:3e:2f:e5:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:DB:37:62:CE:61:BC:D9:17:3C:17:AF:65:EF:E3:74:E7:B1:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sa_bN2LOYbzZFzwXr2Xv43Tnsdo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:0c:b6:3d:61:66:6d:31:7c:cf:40:0e:a6:ab:bc:f9:a5:07:
51:e3:2b:ee:22:5b:47:a9:2a:d7:1a:2a:d2:2a:55:ba:5b:58:
d6:4a:b9:07:f6:b9:ed:58:49:d1:9e:9a:6a:cd:36:c9:bd:bc:
90:b8:9a:2e:a5:98:14:6d:87:0d:d0:34:26:45:5d:4e:89:53:
de:92:32:14:e0:d2:dd:ea:09:91:b5:de:b0:52:ea:85:01:19:
3a:a6:72:c3:a7:e2:90:e5:82:a8:cc:a4:f2:6b:ce:84:34:f1:
ae:d2:04:c6:3f:42:37:86:fc:24:7e:00:92:32:86:0e:79:2d:
eb:41:49:95:82:5f:ea:3e:03:cb:7f:a0:4d:bc:0f:c8:91:3e:
71:4b:9a:cf:b9:cd:af:61:b5:8e:7c:21:13:cc:4a:2e:21:32:
7a:0e:2e:77:d0:01:38:82:b2:b5:2c:76:eb:24:10:75:3d:01:
9e:2d:08:85:d1:65:96:72:ed:de:ba:19:40:64:b8:18:9b:10:
11:c8:9f:f9:d3:8d:05:3d:b1:f8:9d:03:e3:2f:c5:07:2e:e5:
bd:90:73:45:30:4f:34:9e:e2:03:31:6b:53:fb:7d:bb:c8:aa:
38:d8:e8:af:41:1d:cc:e7:3a:f3:20:a7:d7:25:fe:25:2e:0a:
72:15:ab:f0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTEw
OTU0MDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIxQUZEQjM3NjJDRTYx
QkNEOTE3M0MxN0FGNjVFRkUzNzRFN0IxREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvemzPN5m8Ueq45yl1aSY0gNE0deZYv7X0o1xBMuT+cqqtYah2
e9lYVXVLVlF4fCNmcMm2GfQAtA4ztiRnsAkCKHrNxCPBYgE+Pfkvzzc2jOS//tyf
Xrx3wwWuCBOk4eTSe7tsFpFZFHD/CCgTpMG/Y64tWQZCDNIWHvk59OzKdbSjRJ0F
q2FGdk6Ipat5a1E7D96l86fgq1xuGdTO+CbDaUmcdtL1KAyzbnb4RJoTxyXnXa2k
W9NSMyB6STvH8PidCZ22dFyPV422iI06azno2VFFMpD+4jXq3W56JZd8TjeU2WRn
iSrinQH9Vn7w1sxujWU7GZaW7DUgQj4v5W1nAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUsa/bN2LOYbzZFzwXr2Xv43TnsdowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NhX2JOMkxPWWJ6WkZ6
d1hyMlh2NDNUbnNkby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJQMtj1hZm0xfM9ADqarvPmlB1HjK+4i
W0epKtcaKtIqVbpbWNZKuQf2ue1YSdGemmrNNsm9vJC4mi6lmBRthw3QNCZFXU6J
U96SMhTg0t3qCZG13rBS6oUBGTqmcsOn4pDlgqjMpPJrzoQ08a7SBMY/QjeG/CR+
AJIyhg55LetBSZWCX+o+A8t/oE28D8iRPnFLms+5za9htY58IRPMSi4hMnoOLnfQ
ATiCsrUsduskEHU9AZ4tCIXRZZZy7d66GUBkuBibEBHIn/nTjQU9sfidA+MvxQcu
5b2Qc0UwTzSe4gMxa1P7fbvIqjjY6K9BHcznOvMgp9cl/iUuCnIVq/A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org