Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/smXPUGtItHmKJZ_56mOCAYf4GFk.roa
File: smXPUGtItHmKJZ_56mOCAYf4GFk.roa (raw, json)
Hash identifier: 98YVuaQgpT06NkSl10eonjYEjqapIOKmXv+0hkwY9hE=
Subject key identifier: B2:65:CF:50:6B:48:B4:79:8A:25:9F:F9:EA:63:82:01:87:F8:18:59
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44B7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/smXPUGtItHmKJZ_56mOCAYf4GFk.roa
Signing time: Sat 20 Apr 2024 04:53:28 +0000
ROA not before: Sat 20 Apr 2024 04:53:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17591 (0x44b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 04:53:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B265CF506B48B4798A259FF9EA63820187F81859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:54:f9:55:68:ef:cb:98:78:92:73:d7:a3:
86:e6:5d:7b:a7:bc:0e:ab:3c:a9:04:7e:d5:9b:d5:
d6:0d:90:a9:a8:1d:bd:68:95:b8:b5:4f:ac:ce:e0:
ed:d8:94:9f:93:d8:11:9d:73:ca:55:7d:b6:dc:60:
40:38:7b:73:95:5f:2f:16:e2:8a:36:d6:b5:c3:62:
c1:58:b2:00:c7:c2:b7:22:42:b0:bb:49:55:c3:2f:
98:bc:c0:24:59:e0:50:6c:af:fb:e5:f7:ba:f0:42:
e5:30:bd:df:cc:6e:85:32:d4:15:c1:8b:4d:25:42:
b6:ab:05:ad:66:c6:4b:18:d7:8f:f7:46:82:37:39:
9e:0e:c5:21:b5:5b:03:8a:7c:19:f1:42:a9:d2:a9:
d2:da:35:6a:ba:17:fc:fa:9a:b2:24:09:ab:d6:7e:
fd:00:45:36:4a:55:27:49:86:7a:9d:94:eb:52:b1:
ce:fe:13:b5:1c:91:3a:c8:8e:45:65:66:17:9b:33:
3a:51:09:ce:23:80:11:a4:1d:9e:37:df:cd:5b:ba:
d5:aa:df:8a:79:8b:6d:26:4a:9f:93:8f:c8:09:b2:
09:78:93:5e:63:3e:12:81:19:52:68:76:58:7b:1e:
8b:c2:3b:2f:b5:32:bd:85:04:2f:82:4c:6e:72:1f:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:CF:50:6B:48:B4:79:8A:25:9F:F9:EA:63:82:01:87:F8:18:59
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/smXPUGtItHmKJZ_56mOCAYf4GFk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:7f:2d:38:29:0d:6c:25:86:fe:82:bb:52:8c:3e:b4:81:8d:
5b:e7:e0:31:b7:52:dd:1f:25:ce:6b:3d:d3:07:1c:fd:51:13:
c5:48:7f:ce:73:c3:82:32:93:5e:92:09:91:87:3f:c1:29:f5:
7a:ea:b1:f6:b3:31:48:b1:01:35:55:6c:18:a6:5e:61:b6:4b:
7d:4e:be:51:1c:c8:ed:75:ff:0b:2d:81:58:ba:74:3f:34:17:
e3:9d:7d:81:29:0a:7e:04:25:1d:06:8b:ba:2a:43:73:bf:04:
10:ec:e6:49:63:c0:47:ca:28:bd:d7:5a:bf:f9:72:fa:31:dc:
a4:3d:11:41:cc:49:b1:7f:19:10:92:41:18:d9:e3:d6:9d:ec:
9d:b4:a3:2f:4a:c7:43:2e:9a:4c:38:f8:c3:85:1c:44:67:4a:
96:b1:d0:ad:6a:48:1f:b8:00:3d:ec:a3:35:fe:dc:2f:2f:d6:
7d:53:a9:9e:f5:89:b3:ff:92:a1:bd:8a:65:4e:11:8c:89:77:
af:24:3f:cb:d0:32:51:f5:ea:95:86:50:8e:c3:18:8d:36:43:
2e:eb:a0:fb:fe:d7:ed:dd:05:64:bc:ee:04:38:de:80:9b:52:
c5:5c:8c:0a:0f:f7:0a:c3:8a:91:d6:de:1d:3c:87:13:48:e1:
f0:26:e7:c0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAw
NDUzMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIyNjVDRjUwNkI0OEI0
Nzk4QTI1OUZGOUVBNjM4MjAxODdGODE4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDpVT5VWjvy5h4knPXo4bmXXunvA6rPKkEftWb1dYNkKmoHb1o
lbi1T6zO4O3YlJ+T2BGdc8pVfbbcYEA4e3OVXy8W4oo21rXDYsFYsgDHwrciQrC7
SVXDL5i8wCRZ4FBsr/vl97rwQuUwvd/MboUy1BXBi00lQrarBa1mxksY14/3RoI3
OZ4OxSG1WwOKfBnxQqnSqdLaNWq6F/z6mrIkCavWfv0ARTZKVSdJhnqdlOtSsc7+
E7UckTrIjkVlZhebMzpRCc4jgBGkHZ43381butWq34p5i20mSp+Tj8gJsgl4k15j
PhKBGVJodlh7HovCOy+1Mr2FBC+CTG5yH21bAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUsmXPUGtItHmKJZ/56mOCAYf4GFkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NtWFBVR3RJdEhtS0pa
XzU2bU9DQVlmNEdGay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAA1/LTgpDWwlhv6Cu1KMPrSBjVvn4DG3
Ut0fJc5rPdMHHP1RE8VIf85zw4Iyk16SCZGHP8Ep9XrqsfazMUixATVVbBimXmG2
S31OvlEcyO11/wstgVi6dD80F+OdfYEpCn4EJR0Gi7oqQ3O/BBDs5kljwEfKKL3X
Wr/5cvox3KQ9EUHMSbF/GRCSQRjZ49ad7J20oy9Kx0Mumkw4+MOFHERnSpax0K1q
SB+4AD3sozX+3C8v1n1TqZ71ibP/kqG9imVOEYyJd68kP8vQMlH16pWGUI7DGI02
Qy7roPv+1+3dBWS87gQ43oCbUsVcjAoP9wrDipHW3h08hxNI4fAm58A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org