Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PR1E8w5-WGpukKxwxCRKpG06llo.roa
File: PR1E8w5-WGpukKxwxCRKpG06llo.roa (raw, json)
Hash identifier: bFrDs0Xv6CAzmFHPlHOM+9dSrNNdGVoSN4hLbWY1YSk=
Subject key identifier: 3D:1D:44:F3:0E:7E:58:6A:6E:90:AC:70:C4:24:4A:A4:6D:3A:96:5A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 450F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PR1E8w5-WGpukKxwxCRKpG06llo.roa
Signing time: Sat 20 Apr 2024 15:53:05 +0000
ROA not before: Sat 20 Apr 2024 15:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17679 (0x450f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 15:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D1D44F30E7E586A6E90AC70C4244AA46D3A965A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:e7:66:0d:c8:75:66:fc:af:01:cc:3f:ed:
d4:5e:33:ff:a1:f4:46:0b:5e:b5:91:78:57:ae:56:
be:de:e3:ea:03:e2:dc:95:03:48:06:b3:7a:0d:8d:
c8:43:d4:9a:ea:0b:c0:06:b4:a1:d5:66:71:43:50:
b8:4f:a5:bf:7e:cc:fb:da:0d:f5:01:d8:a7:b8:ea:
83:d2:23:27:4e:7c:73:c8:75:aa:30:45:78:e8:7e:
86:91:12:a3:b8:a5:26:46:93:a9:8b:e9:d7:aa:e2:
f3:ae:b8:cf:57:5d:d7:76:2e:7b:24:c0:47:4a:33:
11:65:2e:fa:42:4f:96:4d:c0:e4:05:b2:94:db:65:
d8:d3:ea:66:af:cc:eb:af:92:54:53:cd:06:49:63:
df:fe:4f:8a:da:e3:bc:1b:b4:55:38:a4:10:85:77:
c4:47:16:9d:09:b4:ad:48:76:cb:ac:7d:89:7f:8f:
09:2d:6b:e6:7e:5b:cc:cb:0d:c8:ae:b5:94:6c:b1:
3a:5d:9f:47:6c:2e:ca:88:88:86:9f:4b:b6:0f:33:
c1:ce:39:e1:28:e8:1f:29:05:1a:87:81:c1:9f:ef:
e7:fd:97:64:67:17:93:cb:a9:99:58:42:6d:c6:30:
09:c7:bf:91:b9:02:2e:4e:b5:af:eb:88:64:e8:e9:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:44:F3:0E:7E:58:6A:6E:90:AC:70:C4:24:4A:A4:6D:3A:96:5A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PR1E8w5-WGpukKxwxCRKpG06llo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:39:73:db:3d:f8:da:a8:90:c0:9a:04:fc:b4:ae:1c:57:d2:
45:ee:31:fc:56:47:a7:70:75:00:24:07:b3:77:74:5c:33:8a:
51:57:50:33:bb:20:10:03:69:09:87:24:26:a3:72:c7:25:b3:
68:a7:da:d5:e4:61:76:d9:59:5f:a4:68:49:27:ff:2d:41:15:
00:59:cb:71:12:ad:db:46:17:8c:88:b6:4e:ca:45:7e:c6:54:
55:0d:6c:e9:bd:01:1c:b2:91:5c:bd:58:99:cf:54:17:16:ad:
2d:8b:8f:9f:40:e5:cf:e6:3c:0d:bf:41:50:25:f2:d0:1a:57:
eb:65:9c:88:7e:b0:8e:cc:24:32:6b:e9:21:2b:f3:53:cc:6b:
bf:55:4e:ed:6a:51:43:86:ee:d2:c1:af:21:c0:54:06:09:bf:
86:ab:b8:18:9b:d1:cf:36:fa:24:e2:0f:7c:8a:2e:c6:ca:ea:
08:c5:29:a5:6a:5f:22:3b:45:ad:23:87:30:ed:16:71:a8:e9:
43:3d:9d:af:1e:87:f1:51:9e:68:7b:ef:59:b2:22:54:62:11:
86:5e:cd:9f:ec:39:2d:bf:05:c6:b9:4f:ac:65:f0:6c:00:93:
fb:43:9e:26:fc:16:2c:89:9a:2a:95:91:63:75:34:f5:02:4b:
47:02:ab:1c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICRQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx
NTUzMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNEMUQ0NEYzMEU3RTU4
NkE2RTkwQUM3MEM0MjQ0QUE0NkQzQTk2NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAVedmDch1ZvyvAcw/7dReM/+h9EYLXrWReFeuVr7e4+oD4tyV
A0gGs3oNjchD1JrqC8AGtKHVZnFDULhPpb9+zPvaDfUB2Ke46oPSIydOfHPIdaow
RXjofoaREqO4pSZGk6mL6deq4vOuuM9XXdd2LnskwEdKMxFlLvpCT5ZNwOQFspTb
ZdjT6mavzOuvklRTzQZJY9/+T4ra47wbtFU4pBCFd8RHFp0JtK1IdsusfYl/jwkt
a+Z+W8zLDciutZRssTpdn0dsLsqIiIafS7YPM8HOOeEo6B8pBRqHgcGf7+f9l2Rn
F5PLqZlYQm3GMAnHv5G5Ai5Ota/riGTo6bKjAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUPR1E8w5+WGpukKxwxCRKpG06llowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BSMUU4dzUtV0dwdWtL
eHd4Q1JLcEcwNmxsby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKI5c9s9+NqokMCaBPy0rhxX0kXuMfxW
R6dwdQAkB7N3dFwzilFXUDO7IBADaQmHJCajcscls2in2tXkYXbZWV+kaEkn/y1B
FQBZy3ESrdtGF4yItk7KRX7GVFUNbOm9ARyykVy9WJnPVBcWrS2Lj59A5c/mPA2/
QVAl8tAaV+tlnIh+sI7MJDJr6SEr81PMa79VTu1qUUOG7tLBryHAVAYJv4aruBib
0c82+iTiD3yKLsbK6gjFKaVqXyI7Ra0jhzDtFnGo6UM9na8eh/FRnmh771myIlRi
EYZezZ/sOS2/Bca5T6xl8GwAk/tDnib8FiyJmiqVkWN1NPUCS0cCqxw=
-----END CERTIFICATE-----
Generated at Sat Apr 20 21:07:10 2024 by rpki-client on console.sobornost.net