Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vVpppn_jOU54KSpNzt70lTkTuLk.roa
File: vVpppn_jOU54KSpNzt70lTkTuLk.roa (raw, json)
Hash identifier: BmPTh0IsocYRNO8FEsQZIDum0Xm+w3kYpcacfNZ6DdM=
Subject key identifier: BD:5A:69:A6:7F:E3:39:4E:78:29:2A:4D:CE:DE:F4:95:39:13:B8:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vVpppn_jOU54KSpNzt70lTkTuLk.roa
Signing time: Wed 24 Apr 2024 11:53:14 +0000
ROA not before: Wed 24 Apr 2024 11:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18415 (0x47ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 11:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD5A69A67FE3394E78292A4DCEDEF4953913B8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:f7:18:fc:70:ed:03:3e:df:c6:14:3c:ab:
91:39:3b:06:6e:ce:b2:ba:e6:7b:22:83:0e:ad:d0:
f3:44:f2:4b:67:49:9a:55:28:64:3c:2c:11:e3:6f:
16:88:0d:59:09:bd:94:f0:64:aa:f5:72:d6:46:5b:
33:89:6d:65:51:6e:76:2a:14:5e:d5:2e:da:11:1c:
04:10:23:12:bf:9a:3c:b0:b0:a5:dc:e9:b2:4f:b0:
e7:74:97:66:a3:77:c9:ef:e9:a0:e5:4d:57:91:ef:
2e:c6:00:28:6a:c3:2e:84:5a:63:72:9e:37:de:8d:
16:37:7d:6b:7d:82:a8:bd:18:28:d1:1b:e9:69:88:
50:b6:8e:fc:a7:a9:37:17:c0:c2:b7:cb:7e:9d:0a:
e4:09:ed:44:28:66:35:bb:56:e2:e8:04:ad:9c:06:
72:39:24:b5:5c:4d:d6:f9:42:4e:bc:87:22:06:58:
b6:a8:f4:a2:07:26:3c:33:85:9a:3d:0c:58:1a:70:
c4:b0:96:8b:a2:1c:ed:c7:6a:08:91:34:5f:22:a9:
71:66:a1:23:b9:20:cf:a8:99:cb:69:3c:3d:0f:1f:
b0:57:2b:1a:f1:05:f4:1b:d0:25:5a:fd:4f:6b:55:
87:90:67:67:be:6b:2c:35:d8:bc:09:b2:84:a9:87:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:69:A6:7F:E3:39:4E:78:29:2A:4D:CE:DE:F4:95:39:13:B8:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vVpppn_jOU54KSpNzt70lTkTuLk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:03:44:0b:53:32:d0:28:ee:09:72:2b:36:82:1e:8a:06:39:
8f:91:48:f1:e6:45:3f:fb:67:00:9a:e8:e1:db:7a:fd:f5:db:
d2:df:c6:e4:1a:93:72:35:b7:57:5c:37:3d:8e:62:1f:45:ee:
e4:4d:6d:92:36:84:af:2b:c2:ff:2f:0a:44:de:4e:6e:7e:00:
f5:22:96:5e:97:46:68:ca:ea:16:45:c9:a5:b9:3b:2a:be:b6:
a4:38:9b:23:5e:10:66:9f:ce:48:b4:33:20:e3:89:93:87:c6:
04:82:44:71:00:f3:2b:50:52:6f:65:83:a4:ce:82:2b:3c:32:
94:bb:4e:88:32:41:46:36:df:3d:aa:2d:54:8d:76:fd:24:28:
27:2b:e8:23:d6:c0:28:dd:70:54:50:f2:b6:97:b8:09:ad:3f:
52:25:fe:e4:8f:d7:7e:3e:ea:3c:1f:b4:76:7d:f5:48:1b:6e:
a1:ac:25:35:9e:14:a5:68:76:ce:07:25:7f:77:ae:12:b8:8e:
33:f6:a2:eb:3e:4c:65:d3:53:ae:6f:31:37:60:4a:44:4c:d0:
1f:79:18:c1:c1:ee:54:f0:5f:27:8b:d1:5d:b0:ea:b9:d7:c5:
aa:d5:b9:f5:ad:cc:da:43:be:64:08:c0:ee:8e:ae:81:97:7b:
11:e0:93:74
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICR+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQx
MTUzMTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJENUE2OUE2N0ZFMzM5
NEU3ODI5MkE0RENFREVGNDk1MzkxM0I4QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOivcY/HDtAz7fxhQ8q5E5OwZuzrK65nsigw6t0PNE8ktnSZpV
KGQ8LBHjbxaIDVkJvZTwZKr1ctZGWzOJbWVRbnYqFF7VLtoRHAQQIxK/mjywsKXc
6bJPsOd0l2ajd8nv6aDlTVeR7y7GAChqwy6EWmNynjfejRY3fWt9gqi9GCjRG+lp
iFC2jvynqTcXwMK3y36dCuQJ7UQoZjW7VuLoBK2cBnI5JLVcTdb5Qk68hyIGWLao
9KIHJjwzhZo9DFgacMSwlouiHO3HagiRNF8iqXFmoSO5IM+omctpPD0PH7BXKxrx
BfQb0CVa/U9rVYeQZ2e+ayw12LwJsoSphwGpAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUvVpppn/jOU54KSpNzt70lTkTuLkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZWcHBwbl9qT1U1NEtT
cE56dDcwbFRrVHVMay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKwDRAtTMtAo7glyKzaCHooGOY+RSPHm
RT/7ZwCa6OHbev3129LfxuQak3I1t1dcNz2OYh9F7uRNbZI2hK8rwv8vCkTeTm5+
APUill6XRmjK6hZFyaW5Oyq+tqQ4myNeEGafzki0MyDjiZOHxgSCRHEA8ytQUm9l
g6TOgis8MpS7TogyQUY23z2qLVSNdv0kKCcr6CPWwCjdcFRQ8raXuAmtP1Il/uSP
134+6jwftHZ99UgbbqGsJTWeFKVods4HJX93rhK4jjP2ous+TGXTU65vMTdgSkRM
0B95GMHB7lTwXyeL0V2w6rnXxarVufWtzNpDvmQIwO6OroGXexHgk3Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org