Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vW3KFNdIrMy1kEWfSZVeXKXIyaw.roa
File: vW3KFNdIrMy1kEWfSZVeXKXIyaw.roa (raw, json)
Hash identifier: sArUvcLT12RwCQDkp/mUu2twVtjIu3x9fe37B6cEbis=
Subject key identifier: BD:6D:CA:14:D7:48:AC:CC:B5:90:45:9F:49:95:5E:5C:A5:C8:C9:AC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FF7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vW3KFNdIrMy1kEWfSZVeXKXIyaw.roa
Signing time: Sat 13 Apr 2024 20:52:51 +0000
ROA not before: Sat 13 Apr 2024 20:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16375 (0x3ff7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 20:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD6DCA14D748ACCCB590459F49955E5CA5C8C9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:3c:72:19:5c:f4:b1:a3:75:6b:32:b9:05:
03:b9:ce:a5:47:ce:43:1e:8a:b9:ab:83:e2:d3:93:
ae:18:74:7a:12:a7:31:57:86:7a:98:aa:84:64:de:
bf:4d:d5:14:56:b8:8a:a4:34:7c:c3:d4:d0:13:a8:
8f:72:c4:bf:3e:6a:0e:9a:52:89:4d:c1:53:27:87:
3b:d9:b2:75:e9:6f:74:70:24:ae:52:a4:e1:9a:be:
b2:b6:ef:a7:94:5d:a4:2b:b2:e5:00:51:7c:b1:6b:
bf:c5:0a:27:e4:45:0c:11:e0:f3:a0:d8:06:f5:c1:
3d:bf:eb:0a:28:7c:f4:5b:e9:c0:1a:a9:62:b5:7b:
fb:27:52:53:49:e0:8b:f8:76:50:58:39:82:03:e9:
62:d5:e0:e2:bf:8b:c1:ef:97:71:3b:d6:ed:04:de:
14:3b:1f:9c:86:77:90:31:a4:53:0d:0f:63:72:2a:
35:75:c1:65:bc:7f:fa:08:b9:c9:8a:7e:a7:56:55:
1c:1f:95:53:79:26:6b:72:d3:c0:31:64:62:47:54:
99:a1:5e:d0:47:f4:42:4d:8f:81:8c:2f:dd:6f:8c:
37:3c:df:8d:d8:ce:b6:d7:91:10:81:97:08:ec:91:
2f:e4:da:97:80:1e:1d:3c:ba:94:4e:5e:ad:b0:c7:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:CA:14:D7:48:AC:CC:B5:90:45:9F:49:95:5E:5C:A5:C8:C9:AC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vW3KFNdIrMy1kEWfSZVeXKXIyaw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:82:f4:8e:4a:e5:85:b8:c3:db:18:ab:61:7f:26:46:e1:71:
8b:a4:22:34:b5:30:a1:0d:39:98:7d:d4:09:ad:c9:d4:c3:8a:
31:77:64:cd:49:d1:bf:22:d8:40:54:4f:df:9b:f3:3d:0c:b2:
38:c1:49:96:47:02:9c:9d:15:39:a7:3e:be:d7:96:17:d9:4f:
9c:8d:63:ad:27:53:dd:ed:ee:46:20:d3:0f:01:1b:d6:71:f1:
d9:a8:a4:f9:43:30:b6:a3:c3:1b:ee:b0:dc:26:a6:37:90:ae:
9a:64:11:cb:ba:9c:3a:4d:eb:e0:d7:bc:83:c5:86:9b:ac:6f:
7e:9b:f2:36:d3:3f:c8:bd:cf:7e:7d:da:cc:be:ee:11:65:bd:
9a:7d:1f:02:7d:d3:8c:60:a7:4c:18:fa:b4:b8:36:30:4f:2c:
b3:0c:a8:42:d5:14:ea:c5:34:57:59:55:f3:74:de:0e:0c:80:
48:06:76:4f:d3:d7:88:4f:00:bb:c3:51:86:35:5f:a3:40:1a:
fb:b8:7f:85:1c:66:7e:1b:d8:c6:5a:ba:1b:c7:8a:9f:35:8d:
d6:c4:30:00:b3:61:c6:4a:b0:1b:27:f2:88:6b:69:4b:c4:b9:
b2:cc:bc:d0:6f:6c:b3:07:97:c1:95:3b:7e:9c:57:8d:fa:16:
75:9c:d3:9d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICP/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTMy
MDUyNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJENkRDQTE0RDc0OEFD
Q0NCNTkwNDU5RjQ5OTU1RTVDQTVDOEM5QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwSjxyGVz0saN1azK5BQO5zqVHzkMeirmrg+LTk64YdHoSpzFX
hnqYqoRk3r9N1RRWuIqkNHzD1NATqI9yxL8+ag6aUolNwVMnhzvZsnXpb3RwJK5S
pOGavrK276eUXaQrsuUAUXyxa7/FCifkRQwR4POg2Ab1wT2/6woofPRb6cAaqWK1
e/snUlNJ4Iv4dlBYOYID6WLV4OK/i8Hvl3E71u0E3hQ7H5yGd5AxpFMND2NyKjV1
wWW8f/oIucmKfqdWVRwflVN5Jmty08AxZGJHVJmhXtBH9EJNj4GML91vjDc8343Y
zrbXkRCBlwjskS/k2peAHh08upROXq2wx1yVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUvW3KFNdIrMy1kEWfSZVeXKXIyawwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZXM0tGTmRJck15MWtF
V2ZTWlZlWEtYSXlhdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEaC9I5K5YW4w9sYq2F/JkbhcYukIjS1
MKENOZh91AmtydTDijF3ZM1J0b8i2EBUT9+b8z0MsjjBSZZHApydFTmnPr7XlhfZ
T5yNY60nU93t7kYg0w8BG9Zx8dmopPlDMLajwxvusNwmpjeQrppkEcu6nDpN6+DX
vIPFhpusb36b8jbTP8i9z3592sy+7hFlvZp9HwJ904xgp0wY+rS4NjBPLLMMqELV
FOrFNFdZVfN03g4MgEgGdk/T14hPALvDUYY1X6NAGvu4f4UcZn4b2MZauhvHip81
jdbEMACzYcZKsBsn8ohraUvEubLMvNBvbLMHl8GVO36cV436FnWc050=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org