Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ELzgsk_X443v1gssStFYDycXwZs.roa
File: ELzgsk_X443v1gssStFYDycXwZs.roa (raw, json)
Hash identifier: ZqIJI8WiB9TLcuuMaerrlc7WuZcRCnLXho9mrohS2Wo=
Subject key identifier: 10:BC:E0:B2:4F:D7:E3:8D:EF:D6:0B:2C:4A:D1:58:0F:27:17:C1:9B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ELzgsk_X443v1gssStFYDycXwZs.roa
Signing time: Sat 30 Mar 2024 03:22:15 +0000
ROA not before: Sat 30 Mar 2024 03:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13547 (0x34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 03:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=10BCE0B24FD7E38DEFD60B2C4AD1580F2717C19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:63:db:87:7c:f9:76:68:1d:f8:56:08:85:
12:82:df:ed:cb:27:1a:23:61:cc:a1:2f:30:15:93:
63:9b:37:fe:4f:24:34:e8:6b:c1:1e:1b:b3:df:c3:
0b:36:17:ee:78:61:b3:43:12:7b:af:92:4a:7f:e0:
51:3a:be:56:b7:c5:98:d3:d7:22:a2:11:40:32:18:
c8:59:49:97:91:06:44:9c:b8:36:70:32:c4:0e:61:
77:64:0e:4d:46:d6:59:b5:84:09:c0:fb:dd:7a:b3:
fa:af:e6:a8:0b:55:89:d7:a2:82:08:1e:54:82:1a:
d2:60:fd:59:e1:8e:cc:e5:21:f6:06:1f:94:87:9e:
18:f7:65:92:76:e7:0d:8f:ff:8e:11:26:82:cf:a8:
f2:d8:ef:7f:34:97:bb:21:23:bf:3a:d3:2e:53:98:
e2:c4:f8:44:4a:82:33:28:bd:d3:41:4e:26:32:a0:
01:3b:0e:18:9b:0e:e6:03:f7:67:10:53:14:4d:b3:
e6:db:7b:dc:37:68:20:d7:31:8d:63:89:ca:b6:0c:
10:fa:7a:7e:cd:ae:b4:ca:ca:13:55:aa:07:a7:63:
b0:e8:76:a6:74:8a:6b:75:54:89:be:07:15:d3:09:
59:b8:06:83:75:ad:ae:66:53:0d:c5:74:89:28:eb:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:E0:B2:4F:D7:E3:8D:EF:D6:0B:2C:4A:D1:58:0F:27:17:C1:9B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ELzgsk_X443v1gssStFYDycXwZs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:b9:88:98:9f:da:7c:fd:47:f8:ad:bf:8a:f1:6c:f1:b3:e6:
28:da:4a:17:f8:e8:0f:7f:1d:c8:ff:49:51:78:46:c2:66:b3:
db:b1:a2:7f:23:a7:bc:18:f4:e5:00:f7:23:dd:39:b2:46:99:
70:5c:83:64:0d:e2:e4:16:3c:06:a4:2d:b0:7b:68:7d:f3:8e:
01:e0:76:57:03:4e:06:b0:8c:6f:9b:39:ae:4a:ef:18:f1:ad:
2e:36:b7:06:b5:73:34:87:84:51:d8:c6:02:6f:5f:88:0f:68:
fa:e7:61:c5:a3:09:df:af:4a:66:bc:00:c0:fd:ba:56:d7:3f:
20:e7:58:6c:99:e1:8f:42:c3:90:f6:ab:70:9b:2c:c2:32:05:
6d:0c:3c:53:e0:e4:de:08:72:c5:4c:82:64:ef:c6:c8:4e:ba:
20:71:35:dd:3f:56:43:d8:4d:58:76:bb:7d:f9:90:20:12:71:
f8:42:c7:66:aa:75:76:7e:47:0d:1c:51:17:cc:68:c8:ea:2b:
a8:a3:f0:35:81:ee:e4:1d:fd:c4:89:84:3c:7c:0d:49:d1:3d:
0d:dc:0a:72:5f:14:1d:4c:da:50:6d:11:d0:8a:52:c7:4a:b3:
a5:f9:e5:dc:e8:d6:f8:6c:41:12:b4:74:53:1b:7c:5f:c3:cf:
3c:38:69:9f
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzAw
MzIyMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDEwQkNFMEIyNEZEN0Uz
OERFRkQ2MEIyQzRBRDE1ODBGMjcxN0MxOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf4GPbh3z5dmgd+FYIhRKC3+3LJxojYcyhLzAVk2ObN/5PJDTo
a8EeG7Pfwws2F+54YbNDEnuvkkp/4FE6vla3xZjT1yKiEUAyGMhZSZeRBkScuDZw
MsQOYXdkDk1G1lm1hAnA+916s/qv5qgLVYnXooIIHlSCGtJg/VnhjszlIfYGH5SH
nhj3ZZJ25w2P/44RJoLPqPLY7380l7shI7860y5TmOLE+ERKgjMovdNBTiYyoAE7
DhibDuYD92cQUxRNs+bbe9w3aCDXMY1jicq2DBD6en7NrrTKyhNVqgenY7DodqZ0
imt1VIm+BxXTCVm4BoN1ra5mUw3FdIko64azAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUELzgsk/X443v1gssStFYDycXwZswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0VMemdza19YNDQzdjFn
c3NTdEZZRHljWHdacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAD65iJif2nz9R/itv4rxbPGz5ijaShf4
6A9/Hcj/SVF4RsJms9uxon8jp7wY9OUA9yPdObJGmXBcg2QN4uQWPAakLbB7aH3z
jgHgdlcDTgawjG+bOa5K7xjxrS42twa1czSHhFHYxgJvX4gPaPrnYcWjCd+vSma8
AMD9ulbXPyDnWGyZ4Y9Cw5D2q3CbLMIyBW0MPFPg5N4IcsVMgmTvxshOuiBxNd0/
VkPYTVh2u335kCAScfhCx2aqdXZ+Rw0cURfMaMjqK6ij8DWB7uQd/cSJhDx8DUnR
PQ3cCnJfFB1M2lBtEdCKUsdKs6X55dzo1vhsQRK0dFMbfF/Dzzw4aZ8=
-----END CERTIFICATE-----
Generated at Sat Mar 30 09:11:46 2024 by rpki-client on console.sobornost.net