Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-pHkaC0SSJCYNy_HlrJQ7qKS8CI.roa
File: -pHkaC0SSJCYNy_HlrJQ7qKS8CI.roa (raw, json)
Hash identifier: Y6ZKDHKLnUWubOqhBURkw9extT2YDC2JOVUIT+yhL9E=
Subject key identifier: FA:91:E4:68:2D:12:48:90:98:37:2F:C7:96:B2:50:EE:A2:92:F0:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43E7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-pHkaC0SSJCYNy_HlrJQ7qKS8CI.roa
Signing time: Fri 19 Apr 2024 02:53:02 +0000
ROA not before: Fri 19 Apr 2024 02:53:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17383 (0x43e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 02:53:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FA91E4682D12489098372FC796B250EEA292F022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:4e:50:b8:1a:61:6d:e8:dd:c9:76:b9:f2:
27:d5:98:73:0b:5a:30:ce:e7:16:86:00:60:84:2a:
b6:72:4d:62:11:21:d9:c1:51:35:ee:c1:5f:2d:00:
71:f0:fb:a2:60:a3:db:d6:63:4b:cd:87:30:51:33:
12:2a:8c:cd:36:16:94:12:fd:f8:64:41:f0:3b:d7:
19:ae:3e:26:21:9e:57:97:33:64:c1:16:69:3f:6c:
1a:57:f7:d8:eb:d0:95:3d:6c:44:0a:69:d0:06:49:
6a:4a:73:6c:b9:a9:24:92:ee:78:37:5e:a1:00:68:
7f:d2:43:b1:ec:12:68:70:cf:ef:de:83:59:3d:03:
92:e9:14:05:d8:ab:48:55:2e:e1:53:36:c5:67:f7:
ab:d4:2e:c9:45:0d:e3:2b:29:9f:b1:57:1a:1d:ea:
be:a7:83:f5:af:dc:d2:d4:f5:22:8c:fe:bd:8a:b0:
59:e0:ab:6b:f9:ec:46:bc:85:47:5a:55:b1:01:a4:
89:10:a9:ae:38:6d:6f:3c:ec:77:03:8d:43:c6:43:
10:6b:bf:93:ef:80:15:28:60:9e:fd:07:8d:5d:b2:
99:48:4a:e3:6f:36:21:18:14:6e:af:a3:4a:d0:13:
d5:c7:96:44:b4:c7:95:83:ff:46:ea:ad:62:c0:a7:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:E4:68:2D:12:48:90:98:37:2F:C7:96:B2:50:EE:A2:92:F0:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-pHkaC0SSJCYNy_HlrJQ7qKS8CI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
26:8e:26:21:b3:e0:13:1b:51:09:5f:73:1f:09:f5:81:97:21:
a2:0f:a3:4d:91:02:b2:3e:bc:c1:d9:66:7a:83:c5:27:26:21:
e8:ca:a9:25:b2:3e:cd:2f:62:8b:37:4f:07:98:71:4d:2a:cd:
31:56:cf:02:3a:31:97:c4:df:84:22:2a:de:ea:56:f6:f6:9e:
29:3a:0f:cd:38:39:b2:d7:89:b7:c6:9f:f0:84:92:7b:c6:f5:
68:16:99:f8:c7:61:8c:cb:ad:12:db:2f:4d:3a:fa:bc:e7:da:
d9:3d:78:6b:14:cd:6e:15:fd:7e:da:b1:0d:cb:ca:c9:1d:9c:
01:2c:2f:24:de:2d:7f:35:69:08:26:1e:0f:5b:88:ef:29:29:
0f:02:18:c4:9a:41:b6:b9:6f:46:c3:97:32:76:ef:d5:9d:1c:
84:b3:95:76:1a:2a:73:66:33:a8:d0:62:e2:b6:37:0c:23:87:
4f:09:78:52:9c:c4:02:ee:94:dc:29:7d:0f:fd:8b:f0:b4:9d:
40:fa:04:a5:2c:4a:ca:96:ad:63:5a:2f:28:fa:4e:fc:83:01:
db:30:1d:06:f1:a9:8c:86:88:0f:bf:f9:7e:63:ce:17:3f:a4:
97:ba:24:b8:7b:bc:7d:1a:09:b8:6b:01:e2:34:a5:be:95:f5:
20:8a:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org