Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wlS-sISR3LloE-LMzdsAoqfs9RA.roa
File: wlS-sISR3LloE-LMzdsAoqfs9RA.roa (raw, json)
Hash identifier: a+NJKgUt1wK5Vw0ABQ+kStDGBfuaE9F32EqtBiO0aWg=
Subject key identifier: C2:54:BE:B0:84:91:DC:B9:68:13:E2:CC:CD:DB:00:A2:A7:EC:F5:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4543
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wlS-sISR3LloE-LMzdsAoqfs9RA.roa
Signing time: Sat 20 Apr 2024 22:23:05 +0000
ROA not before: Sat 20 Apr 2024 22:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17731 (0x4543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 22:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C254BEB08491DCB96813E2CCCDDB00A2A7ECF510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:5b:9d:37:6a:4e:ed:65:89:1f:28:32:8c:
46:c0:19:37:d7:1e:5b:d5:d9:25:df:c0:24:a2:f2:
c5:26:85:a9:d7:38:1f:c0:c3:b4:3c:53:70:74:8d:
e6:e0:ad:0f:50:3c:fd:e9:38:4a:8e:cc:4d:0d:eb:
5d:d0:5e:a7:80:9a:bb:69:50:86:00:7f:b7:6a:8e:
dc:52:ca:d2:17:37:7b:56:ff:e3:ee:fe:87:3d:2a:
ef:f0:f7:3c:f5:1e:4b:dd:80:07:b0:76:71:12:97:
85:ea:f4:3f:21:a3:05:b6:6a:51:42:4d:9f:dc:c6:
3e:09:d9:5c:92:64:e5:22:85:9f:a4:ca:cc:08:7a:
63:b7:9f:9a:bb:ca:86:93:94:54:8e:f7:7e:3f:8a:
22:3f:f3:29:c2:4d:99:7d:d1:df:6e:5d:f2:96:49:
dc:64:66:12:05:f8:0b:ab:9f:58:d1:f3:b3:b9:02:
7b:90:bd:56:1b:3b:61:9a:dd:d7:0f:4d:a8:99:56:
fc:f9:64:49:79:32:49:97:9d:81:d9:a3:dc:83:22:
ef:22:dd:b9:82:80:58:2e:08:05:c6:8f:52:0b:42:
1b:35:7c:25:48:ed:aa:5f:67:eb:2a:ba:e8:29:16:
66:bb:d1:1b:ab:7a:f4:73:db:bb:8a:63:01:85:c1:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:BE:B0:84:91:DC:B9:68:13:E2:CC:CD:DB:00:A2:A7:EC:F5:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wlS-sISR3LloE-LMzdsAoqfs9RA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:d6:81:53:80:0d:a6:0b:0a:2d:90:ca:20:fa:d3:28:23:3c:
70:e5:7b:2b:39:47:ec:98:d4:5a:c3:33:d7:c6:bd:53:a5:c7:
8a:5c:9e:f6:a7:56:4f:85:5b:2f:29:12:22:72:a3:a3:d3:8c:
af:14:46:06:07:24:e5:cb:da:fb:d1:aa:bf:38:c7:e4:95:eb:
c3:a8:aa:5b:77:8b:05:3b:fa:b0:e1:4a:d3:d0:4d:88:ed:42:
5d:bc:76:bd:68:91:7a:bd:6d:86:96:fc:6b:5f:a8:4d:44:41:
6b:d3:b3:23:d4:60:24:f8:7f:85:f8:df:43:dd:62:7f:7b:4f:
d6:d2:c9:70:48:1f:7b:9a:f8:78:b1:4a:fd:b0:7a:69:76:8c:
8d:98:fb:1f:0d:fe:54:58:fc:08:f4:d9:be:e8:48:91:78:6b:
cb:a7:ad:5a:c6:0a:24:27:ad:3e:cd:6f:5a:ef:52:ea:1a:9c:
34:9d:c2:49:23:d0:9c:22:02:f9:ab:30:89:f3:fe:ea:87:dc:
4c:ed:75:18:d9:ce:a2:38:3d:7c:d6:5e:5a:54:73:08:ea:68:
03:aa:9d:ab:1b:96:94:3b:6a:ea:ca:f2:d7:32:5a:0f:48:5d:
30:20:5e:8d:d2:87:f2:be:19:e9:c9:38:2a:1e:fb:a2:42:3e:
bc:5d:8d:fb
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAy
MjIzMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMyNTRCRUIwODQ5MURD
Qjk2ODEzRTJDQ0NEREIwMEEyQTdFQ0Y1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoHFudN2pO7WWJHygyjEbAGTfXHlvV2SXfwCSi8sUmhanXOB/A
w7Q8U3B0jebgrQ9QPP3pOEqOzE0N613QXqeAmrtpUIYAf7dqjtxSytIXN3tW/+Pu
/oc9Ku/w9zz1HkvdgAewdnESl4Xq9D8howW2alFCTZ/cxj4J2VySZOUihZ+kyswI
emO3n5q7yoaTlFSO934/iiI/8ynCTZl90d9uXfKWSdxkZhIF+Aurn1jR87O5AnuQ
vVYbO2Ga3dcPTaiZVvz5ZEl5MkmXnYHZo9yDIu8i3bmCgFguCAXGj1ILQhs1fCVI
7apfZ+squugpFma70RurevRz27uKYwGFwQjRAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUwlS+sISR3LloE+LMzdsAoqfs9RAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3dsUy1zSVNSM0xsb0Ut
TE16ZHNBb3FmczlSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAB7WgVOADaYLCi2QyiD60ygjPHDleys5
R+yY1FrDM9fGvVOlx4pcnvanVk+FWy8pEiJyo6PTjK8URgYHJOXL2vvRqr84x+SV
68Ooqlt3iwU7+rDhStPQTYjtQl28dr1okXq9bYaW/GtfqE1EQWvTsyPUYCT4f4X4
30PdYn97T9bSyXBIH3ua+HixSv2weml2jI2Y+x8N/lRY/Aj02b7oSJF4a8unrVrG
CiQnrT7Nb1rvUuoanDSdwkkj0JwiAvmrMInz/uqH3EztdRjZzqI4PXzWXlpUcwjq
aAOqnasblpQ7aurK8tcyWg9IXTAgXo3Sh/K+GenJOCoe+6JCPrxdjfs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org