Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v5FuvhwZS4Vr09oOf13hQdKm0Os.roa
File: v5FuvhwZS4Vr09oOf13hQdKm0Os.roa (raw, json)
Hash identifier: vIGl/eUwNQ5ewZlxafYvMtHs/zw/uR3TAmvT1x4mHfs=
Subject key identifier: BF:91:6E:BE:1C:19:4B:85:6B:D3:DA:0E:7F:5D:E1:41:D2:A6:D0:EB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D93
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v5FuvhwZS4Vr09oOf13hQdKm0Os.roa
Signing time: Thu 02 May 2024 00:23:40 +0000
ROA not before: Thu 02 May 2024 00:23:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19859 (0x4d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 00:23:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF916EBE1C194B856BD3DA0E7F5DE141D2A6D0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:b6:81:00:c0:82:cd:5b:9a:bb:db:63:84:
8e:00:fd:08:fa:4c:c9:fd:33:41:0d:96:6f:4c:01:
d2:29:d3:ea:a8:57:88:84:e9:02:0c:39:67:43:79:
de:b8:6a:31:ff:e7:86:17:6c:df:4a:00:05:4e:44:
d6:0c:b9:71:a6:b0:04:77:d0:7e:75:83:27:77:1f:
7d:d7:52:35:5b:f8:3d:06:5c:4e:7d:5f:06:3c:9b:
0f:97:4a:ff:a0:93:ca:f2:e2:ef:c7:bc:04:ab:ce:
ff:37:43:ee:99:d8:73:1f:44:97:15:a3:58:9a:ba:
1e:e1:f1:0a:30:53:96:31:7e:ae:1e:c2:09:28:cd:
a1:8c:57:2c:d8:14:07:96:21:0d:78:20:6b:7f:d2:
73:c3:e4:c2:52:05:b9:58:53:4c:4b:07:73:5e:c9:
13:ff:6c:37:b4:6f:30:9d:fc:1b:43:82:e7:07:a3:
d5:1d:90:a7:5f:32:ad:6b:78:5c:7b:22:0e:25:3b:
9c:21:22:35:15:c1:57:39:76:36:e3:4f:43:e5:49:
00:50:94:91:01:ad:13:18:1d:b3:61:20:bf:3c:ed:
01:eb:d6:bc:7b:b9:a2:89:44:66:a9:c5:0b:7a:96:
5e:94:86:13:7d:f6:c5:b3:d5:95:1c:31:f1:1f:6a:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:6E:BE:1C:19:4B:85:6B:D3:DA:0E:7F:5D:E1:41:D2:A6:D0:EB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v5FuvhwZS4Vr09oOf13hQdKm0Os.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:05:4d:a3:ae:aa:3c:42:f1:36:68:b6:1c:07:40:a9:be:96:
7b:e9:e6:f5:e3:cf:fa:5a:f2:84:d1:f3:86:c6:e0:8f:ce:f5:
d1:59:1d:73:47:d9:be:59:dd:c0:b1:49:19:0f:9c:6a:4c:ed:
c3:6e:11:82:3e:ef:01:d7:61:5c:d7:39:25:99:77:e7:5a:a6:
d8:94:cd:ff:ef:04:f6:e5:29:5f:8b:5c:c4:a3:65:1e:45:b6:
9b:53:14:2e:16:5b:4c:2e:f7:f1:b9:d0:6c:99:fc:b2:8f:5b:
ca:53:76:c0:b4:bb:e7:ac:f3:ba:85:28:b3:6d:65:02:8e:8e:
d4:07:96:f4:90:3d:18:4d:81:2b:fc:9f:11:de:6d:95:e0:bd:
33:5a:e0:9b:7f:7c:d5:07:48:93:73:94:13:5e:0f:25:37:a5:
a8:65:eb:24:5f:a4:d7:d2:66:49:89:7d:dd:77:22:e4:40:6c:
0e:62:d4:c2:d3:c6:d9:49:f0:3f:66:e3:70:29:28:31:ad:09:
04:c6:11:a7:f8:09:18:41:ee:25:f4:ae:f4:be:55:27:bd:aa:
b8:b4:c5:ea:17:4a:c9:d7:98:3e:2f:46:19:ab:b6:aa:46:03:
b0:cc:45:8b:9a:50:46:92:70:37:7a:ef:32:70:70:9f:00:8a:
9c:c0:c5:95
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIw
MDIzNDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJGOTE2RUJFMUMxOTRC
ODU2QkQzREEwRTdGNURFMTQxRDJBNkQwRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/JLaBAMCCzVuau9tjhI4A/Qj6TMn9M0ENlm9MAdIp0+qoV4iE
6QIMOWdDed64ajH/54YXbN9KAAVORNYMuXGmsAR30H51gyd3H33XUjVb+D0GXE59
XwY8mw+XSv+gk8ry4u/HvASrzv83Q+6Z2HMfRJcVo1iauh7h8QowU5Yxfq4ewgko
zaGMVyzYFAeWIQ14IGt/0nPD5MJSBblYU0xLB3NeyRP/bDe0bzCd/BtDgucHo9Ud
kKdfMq1reFx7Ig4lO5whIjUVwVc5djbjT0PlSQBQlJEBrRMYHbNhIL887QHr1rx7
uaKJRGapxQt6ll6UhhN99sWz1ZUcMfEfap4/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUv5FuvhwZS4Vr09oOf13hQdKm0OswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3Y1RnV2aHdaUzRWcjA5
b09mMTNoUWRLbTBPcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJsFTaOuqjxC8TZothwHQKm+lnvp5vXj
z/pa8oTR84bG4I/O9dFZHXNH2b5Z3cCxSRkPnGpM7cNuEYI+7wHXYVzXOSWZd+da
ptiUzf/vBPblKV+LXMSjZR5FtptTFC4WW0wu9/G50GyZ/LKPW8pTdsC0u+es87qF
KLNtZQKOjtQHlvSQPRhNgSv8nxHebZXgvTNa4Jt/fNUHSJNzlBNeDyU3pahl6yRf
pNfSZkmJfd13IuRAbA5i1MLTxtlJ8D9m43ApKDGtCQTGEaf4CRhB7iX0rvS+VSe9
qri0xeoXSsnXmD4vRhmrtqpGA7DMRYuaUEaScDd67zJwcJ8AipzAxZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org