Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yNTSKuSvk1WCrMSDcJ-IlNLjRtw.roa
File: yNTSKuSvk1WCrMSDcJ-IlNLjRtw.roa (raw, json)
Hash identifier: RjFLoqOwTJfnNwkBSPoCvIOSwhHSMFz15SB5y+ZslC0=
Subject key identifier: C8:D4:D2:2A:E4:AF:93:55:82:AC:C4:83:70:9F:88:94:D2:E3:46:DC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44E7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yNTSKuSvk1WCrMSDcJ-IlNLjRtw.roa
Signing time: Sat 20 Apr 2024 10:53:07 +0000
ROA not before: Sat 20 Apr 2024 10:53:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17639 (0x44e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 10:53:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C8D4D22AE4AF935582ACC483709F8894D2E346DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:2e:27:91:6d:d7:4a:c5:a0:72:fe:be:d8:
d1:a7:0a:ba:3d:b9:eb:b6:ba:80:d0:df:2f:78:3a:
03:43:a6:81:a8:15:d4:56:b1:d5:c6:9e:a2:6a:02:
7e:ac:5f:3a:44:7d:41:de:3d:a5:0f:3c:f4:1c:cc:
48:03:84:b4:71:49:0c:20:f7:64:fa:1f:6c:45:a0:
3c:4b:06:dd:43:5d:ee:29:7b:10:95:88:db:e6:d3:
ae:07:a1:0c:85:27:36:a9:e1:90:ab:26:a3:3f:6e:
3c:c3:86:cf:4f:0d:a0:f1:f0:e8:35:5f:19:84:46:
3f:35:3d:97:36:54:97:41:24:46:ac:fa:33:51:66:
89:ef:9b:02:62:c2:73:02:ea:50:8f:18:40:54:d3:
92:df:07:8b:b2:e3:e1:26:da:b5:35:87:a3:eb:a6:
88:3e:75:fc:de:52:06:87:a9:ff:63:f8:4b:6f:ad:
9f:80:aa:9d:5f:23:9a:94:db:44:28:06:5f:4f:84:
1d:11:f1:8a:56:24:5d:68:d2:46:f1:dc:58:fe:a4:
7e:37:e4:e5:52:0a:18:08:55:b8:4a:c9:c9:dd:bf:
14:b3:01:40:79:32:97:d5:9a:72:36:a2:67:38:b7:
5b:0d:aa:13:0a:df:85:1a:7e:52:cc:48:c5:d5:74:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:D2:2A:E4:AF:93:55:82:AC:C4:83:70:9F:88:94:D2:E3:46:DC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yNTSKuSvk1WCrMSDcJ-IlNLjRtw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:d4:03:ea:9a:28:27:25:29:a3:c8:0a:88:68:4d:87:40:1e:
70:48:88:36:2e:b1:dd:0e:79:60:1f:f1:0e:34:3e:e3:f1:80:
14:49:49:ae:b7:b4:fc:1b:1e:88:66:a2:f4:94:58:e6:0f:b9:
10:3d:f0:d6:19:de:73:bb:bc:f8:00:c5:1a:7b:49:51:71:f3:
ef:2b:7d:fa:38:f1:5e:f9:bf:68:0b:09:ad:27:95:ca:f8:4d:
ef:23:0d:6b:4f:5a:6d:52:89:e5:66:6d:6c:6c:36:be:9d:5a:
4d:64:ff:d1:f4:ee:38:54:ec:e4:3f:4f:f7:5b:75:8f:86:d2:
70:c8:82:2d:a4:ba:5b:f4:fa:2b:94:f7:f0:93:6b:7e:14:a9:
a6:31:39:12:a9:06:ea:03:0a:dd:43:57:07:45:22:2c:8d:dd:
d5:50:a4:e7:40:0f:41:35:b5:ba:29:05:6f:20:01:73:a2:bf:
09:f6:3f:ef:84:35:e2:c9:74:51:42:94:b6:02:c0:72:5f:d1:
4a:5c:1c:5d:5c:e1:87:e0:e5:98:77:a5:96:7a:16:63:5f:44:
f3:a4:64:2b:58:db:f3:4c:ec:1c:39:a4:69:f7:24:fb:ac:65:
60:4d:08:cc:74:50:e0:2e:32:63:55:6a:bb:8f:e8:72:19:24:
36:bd:25:51
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICROcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
MDUzMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM4RDREMjJBRTRBRjkz
NTU4MkFDQzQ4MzcwOUY4ODk0RDJFMzQ2REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyCi4nkW3XSsWgcv6+2NGnCro9ueu2uoDQ3y94OgNDpoGoFdRW
sdXGnqJqAn6sXzpEfUHePaUPPPQczEgDhLRxSQwg92T6H2xFoDxLBt1DXe4pexCV
iNvm064HoQyFJzap4ZCrJqM/bjzDhs9PDaDx8Og1XxmERj81PZc2VJdBJEas+jNR
ZonvmwJiwnMC6lCPGEBU05LfB4uy4+Em2rU1h6Prpog+dfzeUgaHqf9j+EtvrZ+A
qp1fI5qU20QoBl9PhB0R8YpWJF1o0kbx3Fj+pH435OVSChgIVbhKycndvxSzAUB5
MpfVmnI2omc4t1sNqhMK34UaflLMSMXVdOxPAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUyNTSKuSvk1WCrMSDcJ+IlNLjRtwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lOVFNLdVN2azFXQ3JN
U0RjSi1JbE5MalJ0dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKPUA+qaKCclKaPICohoTYdAHnBIiDYu
sd0OeWAf8Q40PuPxgBRJSa63tPwbHohmovSUWOYPuRA98NYZ3nO7vPgAxRp7SVFx
8+8rffo48V75v2gLCa0nlcr4Te8jDWtPWm1SieVmbWxsNr6dWk1k/9H07jhU7OQ/
T/dbdY+G0nDIgi2kulv0+iuU9/CTa34UqaYxORKpBuoDCt1DVwdFIiyN3dVQpOdA
D0E1tbopBW8gAXOivwn2P++ENeLJdFFClLYCwHJf0UpcHF1c4Yfg5Zh3pZZ6FmNf
RPOkZCtY2/NM7Bw5pGn3JPusZWBNCMx0UOAuMmNVaruP6HIZJDa9JVE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org