Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vUyuyGycoxH0NQz_TRvB7_fe9Ds.roa
File: vUyuyGycoxH0NQz_TRvB7_fe9Ds.roa (raw, json)
Hash identifier: GrP4TpJeaHxhlCoi24FZmgQ7WtzL2bGnWm8W+wVImuQ=
Subject key identifier: BD:4C:AE:C8:6C:9C:A3:11:F4:35:0C:FF:4D:1B:C1:EF:F7:DE:F4:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40E3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vUyuyGycoxH0NQz_TRvB7_fe9Ds.roa
Signing time: Mon 15 Apr 2024 02:22:53 +0000
ROA not before: Mon 15 Apr 2024 02:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16611 (0x40e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 02:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD4CAEC86C9CA311F4350CFF4D1BC1EFF7DEF43B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:4e:d8:dc:c3:3c:87:08:57:f8:59:f1:de:
e9:5a:cb:11:c8:7c:c7:2a:c2:74:3d:c7:e5:51:89:
b4:b6:b0:5b:af:95:03:bf:53:c3:85:26:3f:aa:ed:
17:05:ef:64:cd:db:ec:65:e3:7d:df:b9:ae:cf:50:
e6:52:82:37:6e:e0:78:a9:15:f2:bf:db:20:3c:03:
40:b4:14:f8:21:6b:8e:fb:5c:e9:6e:1f:9e:7c:9a:
79:0f:68:b7:ff:59:59:f2:09:e5:27:65:49:47:35:
41:f9:4e:1c:b2:9c:fa:55:9c:10:4c:20:68:89:92:
03:c9:27:d8:e5:2e:ce:8d:19:27:91:88:18:d5:10:
a4:89:d3:d7:00:e6:21:aa:54:a8:dc:66:f6:d4:20:
79:4b:0b:a2:9e:82:1f:e2:b3:4c:c9:59:5b:d9:01:
af:79:01:1f:b4:02:0f:ea:92:8e:a7:d6:80:5a:4e:
a7:21:94:6a:05:97:98:e8:5c:48:00:50:1c:b5:67:
ff:1a:df:bf:29:22:5f:3a:e8:8b:f3:91:a9:bb:8e:
2b:23:25:c6:b4:ea:87:e4:e6:9a:d2:13:34:76:5b:
73:31:dc:79:a8:c9:8c:43:9a:39:db:4c:65:e2:f5:
85:0d:1a:22:b3:10:96:11:ac:be:35:d4:72:6b:7a:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:AE:C8:6C:9C:A3:11:F4:35:0C:FF:4D:1B:C1:EF:F7:DE:F4:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vUyuyGycoxH0NQz_TRvB7_fe9Ds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
29:19:70:9c:7c:67:ff:c4:59:2b:3a:b1:35:91:d5:ba:80:f8:
2a:98:25:eb:c0:61:74:77:88:e8:87:19:f0:35:41:30:39:fe:
51:ec:79:83:ef:be:89:f1:6c:2d:7f:65:95:7c:60:00:52:8f:
ca:72:dd:d9:4e:50:08:4e:4f:d3:26:1d:7f:7e:ba:81:9a:e1:
d2:21:f1:27:86:02:b0:79:ac:fc:fb:ea:60:80:bb:3f:6c:f1:
fd:7d:5c:37:f0:e6:8b:0f:b9:71:6e:01:67:2d:9d:a0:3f:5d:
9a:18:2f:68:e7:78:bf:1e:fd:aa:52:56:fb:46:b2:67:db:bd:
cc:f2:1e:a4:8a:45:ad:65:0a:9b:11:19:22:3f:52:7b:86:56:
92:05:5e:29:8e:a4:c4:b0:63:2f:fe:2f:08:b4:fa:b8:f6:aa:
a3:a2:77:37:13:60:44:60:bc:d7:b0:33:02:18:f9:07:97:32:
5d:fa:3c:f8:50:c8:68:15:20:26:dc:2b:bb:c4:34:da:d3:5a:
27:79:03:72:1d:1d:98:01:53:6b:fd:51:17:23:98:a2:6d:ab:
68:4f:4e:1b:a9:f3:93:34:63:c8:68:12:b7:23:eb:bd:18:20:
da:1c:c8:91:dd:3e:82:0d:f7:e9:a0:b5:3c:f7:f4:8a:44:c3:
8e:5e:34:c8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUw
MjIyNTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJENENBRUM4NkM5Q0Ez
MTFGNDM1MENGRjREMUJDMUVGRjdERUY0M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVeU7Y3MM8hwhX+Fnx3ulayxHIfMcqwnQ9x+VRibS2sFuvlQO/
U8OFJj+q7RcF72TN2+xl433fua7PUOZSgjdu4HipFfK/2yA8A0C0FPgha477XOlu
H558mnkPaLf/WVnyCeUnZUlHNUH5ThyynPpVnBBMIGiJkgPJJ9jlLs6NGSeRiBjV
EKSJ09cA5iGqVKjcZvbUIHlLC6Kegh/is0zJWVvZAa95AR+0Ag/qko6n1oBaTqch
lGoFl5joXEgAUBy1Z/8a378pIl866Ivzkam7jisjJca06ofk5prSEzR2W3Mx3Hmo
yYxDmjnbTGXi9YUNGiKzEJYRrL411HJrev7bAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUvUyuyGycoxH0NQz/TRvB7/fe9DswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZVeXV5R3ljb3hIME5R
el9UUnZCN19mZTlEcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACkZcJx8Z//EWSs6sTWR1bqA+CqYJevA
YXR3iOiHGfA1QTA5/lHseYPvvonxbC1/ZZV8YABSj8py3dlOUAhOT9MmHX9+uoGa
4dIh8SeGArB5rPz76mCAuz9s8f19XDfw5osPuXFuAWctnaA/XZoYL2jneL8e/apS
VvtGsmfbvczyHqSKRa1lCpsRGSI/UnuGVpIFXimOpMSwYy/+Lwi0+rj2qqOidzcT
YERgvNewMwIY+QeXMl36PPhQyGgVICbcK7vENNrTWid5A3IdHZgBU2v9URcjmKJt
q2hPThup85M0Y8hoErcj670YINocyJHdPoIN9+mgtTz39IpEw45eNMg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org