Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ypb3s6z3TSC3sDJ1EoHd-riD6CA.roa
File: ypb3s6z3TSC3sDJ1EoHd-riD6CA.roa (raw, json)
Hash identifier: vyuDHJTK0G57sNlrgfO3cdEYLXEF0MbVWWBofUEhKao=
Subject key identifier: CA:96:F7:B3:AC:F7:4D:20:B7:B0:32:75:12:81:DD:FA:B8:83:E8:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4863
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ypb3s6z3TSC3sDJ1EoHd-riD6CA.roa
Signing time: Thu 25 Apr 2024 02:23:20 +0000
ROA not before: Thu 25 Apr 2024 02:23:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18531 (0x4863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 02:23:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA96F7B3ACF74D20B7B032751281DDFAB883E820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:58:f4:1c:e1:f7:64:48:2d:d8:fc:e1:37:
cc:65:75:10:c4:4d:39:42:20:8a:a8:c7:a9:b8:2d:
c1:37:5d:1b:51:85:96:de:7b:5f:d9:5f:1c:a5:b3:
5d:67:aa:e8:c0:ee:00:cc:90:86:d3:5c:ba:07:2c:
ae:d6:15:b1:a6:2f:ed:b6:a4:a4:63:fb:1a:07:16:
57:35:bf:42:8b:3e:ce:10:4b:9f:a9:de:a8:c4:ed:
9d:f0:7b:d8:6b:84:e8:ba:c5:30:fc:fd:a3:ae:9c:
86:f1:69:53:c2:20:d5:28:16:67:2b:c0:f1:7e:2c:
50:12:81:1d:e3:36:32:f9:76:df:5a:bb:bd:28:0b:
4b:59:27:6a:4d:ac:72:dc:b6:4c:74:e6:f8:fa:d6:
52:33:e1:b6:b9:48:c2:c1:58:74:7a:fb:d7:3b:bc:
82:5d:e8:cc:ff:ad:bd:61:26:76:96:17:8e:c5:5b:
bc:20:22:0d:e2:1f:5e:7c:44:3c:b4:b1:de:40:d0:
81:74:ea:77:56:42:9a:21:25:d5:9c:64:62:89:86:
ae:0c:3a:7e:93:ca:73:d2:ec:5a:0f:c4:66:8a:11:
09:fd:16:e7:d0:d9:8e:1b:c8:0c:85:96:32:b2:b8:
91:3e:ba:4d:8f:91:b0:09:1d:89:9d:cd:b6:7e:fc:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:F7:B3:AC:F7:4D:20:B7:B0:32:75:12:81:DD:FA:B8:83:E8:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ypb3s6z3TSC3sDJ1EoHd-riD6CA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:a3:29:a2:cd:e6:53:04:97:cb:f0:bd:30:0d:1d:cd:6a:06:
c6:8c:fb:43:44:35:92:54:fd:37:1e:d9:a6:01:79:ba:98:fa:
6f:fd:a0:b5:65:86:7c:7d:d8:04:d5:51:40:e3:02:26:ea:f3:
94:b9:72:82:77:fc:86:d6:82:82:e1:d9:37:78:1e:73:06:c5:
78:81:96:90:71:13:72:60:3b:31:3a:c5:89:80:17:84:ff:b6:
05:0e:7b:9d:31:d4:ca:45:a8:4f:8d:8e:de:85:d2:95:6a:4d:
f9:04:1e:1f:7e:f4:ce:92:b7:a7:8f:30:af:25:e7:c8:97:30:
03:99:14:f8:69:90:79:e3:0e:4b:3b:29:6e:a3:7c:32:ac:a6:
49:18:59:be:c0:a0:f3:17:db:73:8b:ae:8d:56:04:c5:59:a7:
49:5a:e9:f6:3c:d1:f0:7c:e3:b5:e1:45:c0:29:1e:13:5c:5d:
78:c7:0d:9b:f2:11:c8:22:28:b7:fb:72:0c:97:88:61:d5:d3:
4a:b0:bc:ff:c1:5e:76:d4:21:ca:d3:8f:fd:1e:62:8e:6e:7c:
3d:1d:7c:26:9a:15:bc:e6:27:73:c7:f2:c1:6f:c1:7e:ac:62:
61:9d:ec:1f:50:a5:76:13:95:82:f6:ef:5e:bc:b6:de:e5:99:
63:b1:fe:6a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICSGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUw
MjIzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENBOTZGN0IzQUNGNzRE
MjBCN0IwMzI3NTEyODFEREZBQjg4M0U4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTJVj0HOH3ZEgt2PzhN8xldRDETTlCIIqox6m4LcE3XRtRhZbe
e1/ZXxyls11nqujA7gDMkIbTXLoHLK7WFbGmL+22pKRj+xoHFlc1v0KLPs4QS5+p
3qjE7Z3we9hrhOi6xTD8/aOunIbxaVPCINUoFmcrwPF+LFASgR3jNjL5dt9au70o
C0tZJ2pNrHLctkx05vj61lIz4ba5SMLBWHR6+9c7vIJd6Mz/rb1hJnaWF47FW7wg
Ig3iH158RDy0sd5A0IF06ndWQpohJdWcZGKJhq4MOn6TynPS7FoPxGaKEQn9FufQ
2Y4byAyFljKyuJE+uk2PkbAJHYmdzbZ+/FILAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUypb3s6z3TSC3sDJ1EoHd+riD6CAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lwYjNzNnozVFNDM3NE
SjFFb0hkLXJpRDZDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAGqjKaLN5lMEl8vwvTANHc1qBsaM+0NE
NZJU/Tce2aYBebqY+m/9oLVlhnx92ATVUUDjAibq85S5coJ3/IbWgoLh2Td4HnMG
xXiBlpBxE3JgOzE6xYmAF4T/tgUOe50x1MpFqE+Njt6F0pVqTfkEHh9+9M6St6eP
MK8l58iXMAOZFPhpkHnjDks7KW6jfDKspkkYWb7AoPMX23OLro1WBMVZp0la6fY8
0fB847XhRcApHhNcXXjHDZvyEcgiKLf7cgyXiGHV00qwvP/BXnbUIcrTj/0eYo5u
fD0dfCaaFbzmJ3PH8sFvwX6sYmGd7B9QpXYTlYL27168tt7lmWOx/mo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org