Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/01CFzMNNzOs__q_6PgHfbjeU_08.roa
File: 01CFzMNNzOs__q_6PgHfbjeU_08.roa (raw, json)
Hash identifier: 04K/C0VeAnrD233tbN3oQVAXGVpiYNoS+L+RxXUsPEw=
Subject key identifier: D3:50:85:CC:C3:4D:CC:EB:3F:FE:AF:FA:3E:01:DF:6E:37:94:FF:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E3F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/01CFzMNNzOs__q_6PgHfbjeU_08.roa
Signing time: Thu 11 Apr 2024 13:52:46 +0000
ROA not before: Thu 11 Apr 2024 13:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15935 (0x3e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 13:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D35085CCC34DCCEB3FFEAFFA3E01DF6E3794FF4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:54:5b:99:21:d4:34:80:28:42:fd:2b:c1:
a2:4c:db:58:59:73:d3:da:3d:10:10:30:6e:6c:60:
7d:43:9d:d3:21:10:36:73:85:5b:e5:11:a7:1c:cc:
89:46:a1:9c:89:9e:31:40:59:ff:9d:03:14:3e:fd:
9c:18:9f:d3:f7:01:ed:a0:6d:41:f3:b0:8a:54:5c:
dc:2c:3d:ee:34:42:a9:18:b6:be:f8:0d:e4:2c:90:
6a:f9:13:a0:0b:78:7c:06:65:19:f8:80:67:34:aa:
13:ae:74:90:aa:72:f5:29:33:13:15:ec:20:40:ae:
d0:dd:e6:da:8c:07:f8:7a:0f:88:d3:42:99:f0:c5:
c1:d5:0b:a1:f5:66:1a:3f:2d:db:1a:99:85:65:ca:
7a:2d:8e:0a:b7:de:a1:ec:0c:01:bd:8e:38:91:51:
11:57:67:9d:0c:4e:f2:eb:7a:02:d0:95:5f:9a:63:
2c:d5:30:90:6b:9e:3c:9f:91:c2:c1:db:26:73:2b:
42:f4:3d:6e:eb:c5:83:4f:8b:1b:13:db:17:f2:3e:
50:52:78:99:47:ee:29:fb:ed:e7:9a:4b:14:57:18:
3c:99:10:93:08:64:fc:6b:0a:20:5a:38:06:f4:b0:
e7:1b:95:b6:19:d1:9e:1c:87:3c:4e:2e:42:b3:40:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:85:CC:C3:4D:CC:EB:3F:FE:AF:FA:3E:01:DF:6E:37:94:FF:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/01CFzMNNzOs__q_6PgHfbjeU_08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:c8:3d:50:a6:ac:6f:fe:0a:02:0f:43:4a:c9:cd:49:d4:72:
59:40:a9:dd:75:8b:b4:05:83:0c:d8:d7:79:c6:4c:08:0b:23:
b5:92:b4:71:ac:f4:d2:f5:0b:a6:35:24:88:f3:2b:63:f6:e7:
7e:f5:73:12:5c:0e:97:d5:60:6b:76:d1:bd:75:1a:55:71:6a:
d1:1f:a6:d5:3b:1c:2b:f1:4c:ec:8e:8c:67:8c:51:1a:76:22:
61:6e:18:f7:e5:8a:39:9a:e0:47:60:c7:bc:e6:c5:c4:63:21:
9e:3a:fe:13:8e:e2:82:0c:b1:76:1f:2b:a0:de:56:6b:b4:20:
ba:10:2d:6a:ac:67:34:df:c9:4a:4c:9c:6f:9a:24:1d:9a:0e:
a2:47:c4:ab:0c:b5:bd:9c:ba:f3:60:a6:c2:b0:2c:7c:d5:70:
8a:2b:1c:6a:0b:0a:4f:2f:02:8f:9c:19:b9:84:4a:f0:d5:9d:
ce:6c:d4:40:5c:01:47:90:8f:35:81:77:a4:1f:cd:fb:72:0a:
ba:f5:cf:79:68:b3:72:3d:c7:2b:3f:8b:28:90:d6:7f:b4:f0:
d9:77:74:52:2c:e1:46:a9:20:5e:2b:88:8d:97:9e:5f:a4:b8:
8a:0d:cd:de:73:94:05:84:aa:93:ab:8c:f6:7f:0f:1e:e2:4f:
24:4b:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org