Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wvKuS5M_9CZ1mcjvuU1rUO0Nf4I.roa
File: wvKuS5M_9CZ1mcjvuU1rUO0Nf4I.roa (raw, json)
Hash identifier: VGJ/GzcA0QN/yHG6mxf1+u0hsKVskpwK/cWzQx+dsXg=
Subject key identifier: C2:F2:AE:4B:93:3F:F4:26:75:99:C8:EF:B9:4D:6B:50:ED:0D:7F:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EEF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wvKuS5M_9CZ1mcjvuU1rUO0Nf4I.roa
Signing time: Fri 03 May 2024 19:53:54 +0000
ROA not before: Fri 03 May 2024 19:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20207 (0x4eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 19:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C2F2AE4B933FF4267599C8EFB94D6B50ED0D7F82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:c6:c4:28:96:54:60:2d:f0:3c:af:ff:fb:
1d:be:e5:96:2c:48:d6:d6:8a:4c:3a:75:2f:fe:b2:
f5:16:db:ed:3f:26:9a:48:b5:fc:f5:c5:fe:e1:de:
41:a2:e0:29:44:d3:f8:0e:13:e6:56:cb:9b:7b:c0:
12:e2:59:98:61:3e:66:00:cc:ba:fc:8a:7c:67:5a:
6e:e3:03:df:6b:18:97:4a:1d:ea:80:d0:10:f4:24:
a6:b6:db:6a:de:59:2e:84:6e:33:aa:92:da:5e:e4:
45:13:a4:4a:1d:96:66:66:3d:08:8e:83:7d:54:9b:
d7:2b:d6:e9:2c:2f:2e:a1:0f:6d:e9:eb:ed:63:56:
f7:95:aa:6f:f7:18:69:08:2e:55:88:da:82:4f:53:
1f:52:b2:5f:07:35:36:32:39:6f:b9:df:e8:55:89:
ee:4b:43:66:ae:0f:ca:00:c9:5b:27:bf:59:9f:16:
8b:7a:27:cb:64:94:5f:f8:36:ab:fb:82:e7:b3:ea:
9d:8e:0e:43:2a:eb:2a:b4:93:10:f7:0b:b9:49:df:
cf:4f:ce:ea:5f:c1:24:03:3c:e3:52:4d:8f:37:a5:
7d:ce:34:cf:66:dd:c5:06:a0:ee:67:aa:c8:81:9d:
4c:68:d9:11:bf:8a:53:59:c5:d5:62:03:3a:75:78:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:AE:4B:93:3F:F4:26:75:99:C8:EF:B9:4D:6B:50:ED:0D:7F:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wvKuS5M_9CZ1mcjvuU1rUO0Nf4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:30:b3:31:0a:53:c9:33:ba:c7:2e:5e:c0:95:69:0f:71:40:
5b:36:9b:bb:d4:8c:c4:28:da:f9:96:36:6b:43:27:7a:c5:ba:
e6:15:8e:d1:8e:a3:2a:3a:a6:1e:70:40:01:98:57:9a:72:4b:
da:87:af:d0:5f:b5:79:74:1d:a0:29:5e:fc:a3:30:da:07:af:
a5:16:75:83:c9:46:52:d2:8d:ff:58:b6:29:f4:e0:70:a7:5c:
fb:46:85:9f:66:a9:94:cb:80:88:31:c4:e0:53:03:83:98:58:
64:64:cd:45:b8:82:ce:39:ae:0a:2f:fd:64:38:12:5b:3e:d3:
90:ac:65:02:09:26:86:60:81:28:da:e2:6a:91:54:91:1d:52:
a0:46:8f:6c:7f:72:5f:bc:fb:ee:4d:82:e3:a5:03:9f:4f:49:
fc:b7:72:e6:4c:7c:44:24:c8:f6:04:ce:f5:32:3c:3c:82:ee:
07:2d:4e:24:db:a2:e2:d8:06:13:da:57:30:73:5a:94:5b:ff:
b8:8d:77:f5:5e:3f:c2:bc:f7:dd:c7:2d:96:7a:fd:24:8d:87:
7b:5b:e5:e7:13:20:ef:12:61:9f:0f:af:99:6d:ee:a9:90:0e:
0d:76:fc:55:c7:ed:48:5b:01:a5:8b:cd:ed:9d:82:f8:d6:ec:
9b:88:8e:22
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMx
OTUzNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMyRjJBRTRCOTMzRkY0
MjY3NTk5QzhFRkI5NEQ2QjUwRUQwRDdGODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCq8bEKJZUYC3wPK//+x2+5ZYsSNbWikw6dS/+svUW2+0/JppI
tfz1xf7h3kGi4ClE0/gOE+ZWy5t7wBLiWZhhPmYAzLr8inxnWm7jA99rGJdKHeqA
0BD0JKa222reWS6EbjOqktpe5EUTpEodlmZmPQiOg31Um9cr1uksLy6hD23p6+1j
VveVqm/3GGkILlWI2oJPUx9Ssl8HNTYyOW+53+hVie5LQ2auD8oAyVsnv1mfFot6
J8tklF/4Nqv7guez6p2ODkMq6yq0kxD3C7lJ389PzupfwSQDPONSTY83pX3ONM9m
3cUGoO5nqsiBnUxo2RG/ilNZxdViAzp1eF7HAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUwvKuS5M/9CZ1mcjvuU1rUO0Nf4IwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3d2S3VTNU1fOUNaMW1j
anZ1VTFyVU8wTmY0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABIwszEKU8kzuscuXsCVaQ9xQFs2m7vU
jMQo2vmWNmtDJ3rFuuYVjtGOoyo6ph5wQAGYV5pyS9qHr9BftXl0HaApXvyjMNoH
r6UWdYPJRlLSjf9Ytin04HCnXPtGhZ9mqZTLgIgxxOBTA4OYWGRkzUW4gs45rgov
/WQ4Els+05CsZQIJJoZggSja4mqRVJEdUqBGj2x/cl+8++5NguOlA59PSfy3cuZM
fEQkyPYEzvUyPDyC7gctTiTbouLYBhPaVzBzWpRb/7iNd/VeP8K8993HLZZ6/SSN
h3tb5ecTIO8SYZ8Pr5lt7qmQDg12/FXH7UhbAaWLze2dgvjW7JuIjiI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org