Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LDV2fJOjNEZDfgrwcLgVVYcAABI.roa
File: LDV2fJOjNEZDfgrwcLgVVYcAABI.roa (raw, json)
Hash identifier: x9FshVcKI/Vh1hxswWeeQdS/ucw/Cp4p7YEy/QoHExQ=
Subject key identifier: 2C:35:76:7C:93:A3:34:46:43:7E:0A:F0:70:B8:15:55:87:00:00:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 537F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LDV2fJOjNEZDfgrwcLgVVYcAABI.roa
Signing time: Thu 09 May 2024 21:54:27 +0000
ROA not before: Thu 09 May 2024 21:54:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21375 (0x537f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 21:54:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2C35767C93A33446437E0AF070B8155587000012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:d1:99:0d:e8:40:a8:40:d0:e2:e2:3b:61:
36:09:66:a3:ad:cd:ac:3e:dc:b1:62:20:40:eb:b2:
1e:b4:c8:14:e3:39:c1:e3:30:8b:d0:0e:9b:da:fa:
41:e3:85:81:b3:9e:2d:2c:74:0a:09:1c:49:b8:4c:
f5:b2:9f:30:5e:63:b5:9b:e1:a2:0d:e3:80:45:57:
e3:9d:bd:2d:25:37:70:5d:2e:36:32:c3:bf:4a:94:
cd:b1:8f:bb:58:42:30:35:6f:b7:8a:ee:63:29:ac:
da:8b:a4:e1:28:ed:91:12:6d:23:b6:20:8b:cd:a2:
52:96:55:2e:5e:af:ec:18:4a:0d:5c:19:ca:54:3d:
7a:c0:dd:e1:0c:31:11:67:75:b3:88:08:d6:2a:a8:
00:1d:4b:aa:4d:29:36:7e:a7:eb:ce:2a:8c:1c:cc:
f4:9e:20:e4:99:28:28:83:a4:17:af:ae:d1:f9:0a:
5f:8e:32:c5:c5:44:c7:77:6f:7c:14:35:1d:9d:df:
02:b5:98:02:3c:e6:ee:98:d6:e9:0c:b7:ed:af:ec:
32:b9:f0:a6:56:f4:41:4b:27:d6:0e:e4:9d:9b:d5:
35:ba:73:a6:aa:65:d7:77:3e:8c:ed:5e:28:e1:6c:
7c:7f:84:db:f0:9b:60:31:ba:8d:1a:d4:ad:d5:e3:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:76:7C:93:A3:34:46:43:7E:0A:F0:70:B8:15:55:87:00:00:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LDV2fJOjNEZDfgrwcLgVVYcAABI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
48:d9:d7:20:85:90:55:93:e2:1a:fd:34:cd:a1:98:aa:32:d9:
71:87:5b:e5:90:1a:ff:19:8b:43:4d:07:f0:f2:cd:eb:8f:f3:
48:c1:73:57:17:be:e6:64:e2:80:dd:38:57:df:42:a4:32:a1:
ad:aa:66:68:84:3d:7e:13:43:cb:01:f7:e3:e6:2e:02:99:e1:
82:6d:03:00:f4:37:34:a6:5f:0b:9b:93:6a:b3:fd:25:5e:f2:
44:16:04:02:d2:40:7b:e9:db:97:74:da:0b:65:41:b5:d5:e9:
57:b7:40:40:4f:bc:5c:15:82:7c:7d:ee:0d:42:a7:73:a3:a1:
98:47:0a:44:bc:8a:90:9b:e4:eb:89:45:ad:19:16:d0:08:ee:
a6:80:fa:ee:5d:3d:ef:48:65:42:78:a6:b8:34:48:f3:99:29:
53:44:53:ed:ab:2c:26:45:4e:12:29:ef:8e:f1:f3:64:4d:00:
20:b2:66:c6:ed:4e:32:c7:1b:5e:1b:a0:64:da:35:21:17:2f:
a6:31:e5:59:dd:b0:c2:a2:29:33:bd:f2:99:5c:f5:fd:26:a7:
63:36:ec:6c:1d:03:19:ed:b2:ff:e2:4e:ea:cb:10:16:7d:cc:
ec:d6:6d:5f:7c:1c:fe:87:43:a0:a5:61:ca:fe:98:98:78:4c:
27:93:62:34
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICU38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDky
MTU0MjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJDMzU3NjdDOTNBMzM0
NDY0MzdFMEFGMDcwQjgxNTU1ODcwMDAwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQEtGZDehAqEDQ4uI7YTYJZqOtzaw+3LFiIEDrsh60yBTjOcHj
MIvQDpva+kHjhYGzni0sdAoJHEm4TPWynzBeY7Wb4aIN44BFV+OdvS0lN3BdLjYy
w79KlM2xj7tYQjA1b7eK7mMprNqLpOEo7ZESbSO2IIvNolKWVS5er+wYSg1cGcpU
PXrA3eEMMRFndbOICNYqqAAdS6pNKTZ+p+vOKowczPSeIOSZKCiDpBevrtH5Cl+O
MsXFRMd3b3wUNR2d3wK1mAI85u6Y1ukMt+2v7DK58KZW9EFLJ9YO5J2b1TW6c6aq
Zdd3PoztXijhbHx/hNvwm2Axuo0a1K3V47PvAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQULDV2fJOjNEZDfgrwcLgVVYcAABIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0xEVjJmSk9qTkVaRGZn
cndjTGdWVlljQUFCSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEjZ1yCFkFWT4hr9NM2hmKoy2XGHW+WQ
Gv8Zi0NNB/DyzeuP80jBc1cXvuZk4oDdOFffQqQyoa2qZmiEPX4TQ8sB9+PmLgKZ
4YJtAwD0NzSmXwubk2qz/SVe8kQWBALSQHvp25d02gtlQbXV6Ve3QEBPvFwVgnx9
7g1Cp3OjoZhHCkS8ipCb5OuJRa0ZFtAI7qaA+u5dPe9IZUJ4prg0SPOZKVNEU+2r
LCZFThIp747x82RNACCyZsbtTjLHG14boGTaNSEXL6Yx5VndsMKiKTO98plc9f0m
p2M27GwdAxntsv/iTurLEBZ9zOzWbV98HP6HQ6ClYcr+mJh4TCeTYjQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:35 2025 by rpki-client