Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/K3edLKEVrWGW8aav-OAmqSJ71ZA.roa
File: K3edLKEVrWGW8aav-OAmqSJ71ZA.roa (raw, json)
Hash identifier: KvQLQqYJKFr1LiR0oH2nmjWc/3gcfrvzowM0Sqd67Yk=
Subject key identifier: 2B:77:9D:2C:A1:15:AD:61:96:F1:A6:AF:F8:E0:26:A9:22:7B:D5:90
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F0F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3edLKEVrWGW8aav-OAmqSJ71ZA.roa
Signing time: Fri 03 May 2024 23:54:02 +0000
ROA not before: Fri 03 May 2024 23:54:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20239 (0x4f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 23:54:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2B779D2CA115AD6196F1A6AFF8E026A9227BD590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:fb:57:15:43:07:34:b1:ec:4e:8d:95:3d:
19:a7:e5:de:8b:cd:be:8c:d2:23:0b:d4:ab:16:e2:
76:b6:cc:7f:f4:0b:ee:87:8d:7d:a7:36:f7:e3:7c:
c6:79:31:69:ab:a0:a4:29:9c:6b:2b:19:7b:48:b7:
33:2a:f6:91:b1:f5:7b:02:e7:24:92:dd:1f:8d:cd:
77:7a:27:f2:16:46:30:1c:08:4d:2f:76:0f:e2:96:
bb:45:71:02:d9:17:13:a0:9c:9d:32:b1:7d:25:6c:
09:b1:58:2f:75:56:d2:28:12:46:da:52:10:6c:f1:
d1:2f:a8:c1:3e:43:06:ea:4e:1e:a8:d1:00:4e:d9:
2a:34:0c:22:42:04:05:0d:cb:f5:20:6e:b7:73:bb:
0a:41:4b:3e:b4:61:3d:37:55:5c:47:f0:09:fd:d2:
fe:b9:8d:66:bc:75:56:4a:98:d7:74:a2:0c:5c:3c:
cd:16:88:f9:c1:4e:89:c8:5b:07:89:b9:d9:36:89:
6c:ab:a6:a1:60:be:5e:d5:0d:9a:a2:69:ec:03:a5:
ab:b2:77:64:3f:89:15:71:31:bd:33:9e:8c:56:a2:
1d:10:a2:25:21:bf:55:0c:35:cc:d7:56:f9:7a:dc:
eb:e3:0a:e0:ae:99:32:2a:8e:9d:02:26:dd:12:be:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:9D:2C:A1:15:AD:61:96:F1:A6:AF:F8:E0:26:A9:22:7B:D5:90
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3edLKEVrWGW8aav-OAmqSJ71ZA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:7b:86:fa:45:c0:2b:d9:1b:5b:b8:b5:e4:46:75:a3:68:b7:
73:8d:4f:e0:4d:ca:29:ab:fc:6e:5a:67:12:f8:aa:50:c8:22:
9e:4c:42:e7:c5:e3:3f:84:48:a2:9b:83:4a:6c:1e:52:77:d8:
c6:88:3c:0d:dd:ea:ea:52:47:16:27:5f:f8:97:f7:1a:ae:c7:
db:1c:de:49:db:9c:0f:c3:69:89:e8:5c:d8:bd:a1:c8:0f:30:
be:27:80:52:b5:9c:f0:cd:17:cf:55:42:4c:eb:0d:1b:a9:19:
cc:e7:14:32:9b:6f:70:ab:49:d2:4a:6f:23:19:9a:0a:50:6e:
4d:7b:6c:a4:7c:3f:ad:ad:4a:cd:62:2e:b1:ab:d6:0c:4d:f3:
ea:10:bd:2a:98:dc:89:be:af:2c:c1:90:6a:52:6c:ea:86:37:
76:95:72:29:f9:f8:78:c1:94:e7:97:9d:7b:4b:7e:89:45:06:
5e:ee:e6:f2:0e:2d:a2:95:4b:33:69:c4:db:05:20:d9:1a:13:
0f:2b:2c:f5:87:4a:84:d7:6d:63:4e:3e:92:65:3a:c4:81:97:
18:b2:5d:0a:a3:5b:5f:11:c3:13:42:7c:41:7e:74:8b:63:92:
e9:ca:8b:1f:4b:00:08:56:c1:c7:77:f0:5f:56:3e:c4:41:78:
9f:47:52:7d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICTw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMy
MzU0MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJCNzc5RDJDQTExNUFE
NjE5NkYxQTZBRkY4RTAyNkE5MjI3QkQ1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+ZvtXFUMHNLHsTo2VPRmn5d6Lzb6M0iML1KsW4na2zH/0C+6H
jX2nNvfjfMZ5MWmroKQpnGsrGXtItzMq9pGx9XsC5ySS3R+NzXd6J/IWRjAcCE0v
dg/ilrtFcQLZFxOgnJ0ysX0lbAmxWC91VtIoEkbaUhBs8dEvqME+QwbqTh6o0QBO
2So0DCJCBAUNy/UgbrdzuwpBSz60YT03VVxH8An90v65jWa8dVZKmNd0ogxcPM0W
iPnBTonIWweJudk2iWyrpqFgvl7VDZqiaewDpauyd2Q/iRVxMb0znoxWoh0QoiUh
v1UMNczXVvl63OvjCuCumTIqjp0CJt0Svp/VAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUK3edLKEVrWGW8aav+OAmqSJ71ZAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0szZWRMS0VWcldHVzhh
YXYtT0FtcVNKNzFaQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAK17hvpFwCvZG1u4teRGdaNot3ONT+BN
yimr/G5aZxL4qlDIIp5MQufF4z+ESKKbg0psHlJ32MaIPA3d6upSRxYnX/iX9xqu
x9sc3knbnA/DaYnoXNi9ocgPML4ngFK1nPDNF89VQkzrDRupGcznFDKbb3CrSdJK
byMZmgpQbk17bKR8P62tSs1iLrGr1gxN8+oQvSqY3Im+ryzBkGpSbOqGN3aVcin5
+HjBlOeXnXtLfolFBl7u5vIOLaKVSzNpxNsFINkaEw8rLPWHSoTXbWNOPpJlOsSB
lxiyXQqjW18RwxNCfEF+dItjkunKix9LAAhWwcd38F9WPsRBeJ9HUn0=
-----END CERTIFICATE-----
Generated at Thu May 9 03:53:50 2024 by rpki-client on console.sobornost.net