Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0aSCfs_487Eh5k06hPodNCcq8kw.roa
File: 0aSCfs_487Eh5k06hPodNCcq8kw.roa (raw, json)
Hash identifier: TGIp95c81r1+L6fCgCvFTAcqneYQQYZ+FW9CV84rorA=
Subject key identifier: D1:A4:82:7E:CF:F8:F3:B1:21:E6:4D:3A:84:FA:1D:34:27:2A:F2:4C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 389B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0aSCfs_487Eh5k06hPodNCcq8kw.roa
Signing time: Thu 04 Apr 2024 01:22:24 +0000
ROA not before: Thu 04 Apr 2024 01:22:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14491 (0x389b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 01:22:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1A4827ECFF8F3B121E64D3A84FA1D34272AF24C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:da:f0:5f:5d:b6:f8:b3:57:56:96:df:a8:
83:fb:ea:4b:b3:9b:77:21:d4:56:10:57:a0:79:77:
3a:7d:2e:53:c0:71:5e:8c:f6:a7:92:72:f3:d5:19:
6a:2b:a3:bb:8a:1d:34:a3:2f:91:5c:b1:65:39:50:
47:bb:37:f5:a9:0d:96:20:67:3d:7a:f9:e8:e5:ce:
08:b3:3a:ee:ad:c8:ab:86:fe:91:d4:86:62:f9:f2:
bb:e1:ec:83:0f:71:8b:41:db:f2:0d:c7:6b:e8:b6:
ea:a8:12:30:46:0f:c7:db:08:3a:5f:2d:9f:83:ae:
81:b3:5f:d0:1b:15:12:91:d2:db:5a:1a:4a:db:82:
1d:fc:82:1e:a8:06:25:26:5b:9a:d2:25:91:cc:ff:
85:f1:fb:c9:b4:0c:f0:65:d7:87:f8:06:23:e4:04:
59:59:ee:a9:ca:d4:a2:c3:7f:09:f0:f3:c8:a0:8e:
ee:09:77:99:a4:36:be:89:89:c7:ed:f8:c3:59:e3:
eb:57:78:b0:5e:f5:48:80:79:73:51:94:87:b2:1d:
29:0e:3c:dc:db:9a:e6:a7:2c:a3:0c:93:a2:6e:63:
53:0e:c2:c1:5a:e0:4e:4e:2b:0d:5e:aa:0a:0c:b8:
71:bf:e8:be:56:f8:3e:34:d9:bb:63:2c:34:bb:68:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:82:7E:CF:F8:F3:B1:21:E6:4D:3A:84:FA:1D:34:27:2A:F2:4C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0aSCfs_487Eh5k06hPodNCcq8kw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:87:ac:73:29:eb:7e:c1:0c:ae:42:9c:34:fd:c5:1f:be:15:
19:52:b0:72:16:84:87:f9:5f:4a:5f:35:4d:67:09:50:6b:89:
e2:b3:48:88:99:f7:a5:05:b7:2e:5a:1e:7b:dc:81:29:5a:6c:
71:9b:96:7c:21:fc:47:28:de:04:7b:50:e5:00:4f:54:a7:b4:
ad:48:5c:e7:6a:5d:15:5e:fb:54:a6:59:9e:87:9a:20:76:a4:
b1:c9:ea:a2:b9:10:75:e1:2f:e9:7b:50:66:57:55:c6:5c:2a:
d0:4f:c8:44:76:4b:14:e2:f9:15:b3:35:c2:1b:85:6b:33:31:
e1:61:49:c0:61:c7:70:e4:aa:c9:13:65:ff:53:99:0d:29:9f:
39:51:5c:05:a9:45:b9:3d:da:84:cd:31:58:11:d8:81:66:df:
ff:a3:53:9c:b2:4b:6d:81:10:ab:c7:fb:b0:d1:f3:92:8e:37:
73:f5:98:73:04:66:d2:9e:47:62:33:a5:db:45:94:e8:7b:a7:
66:d6:a8:e9:da:35:f2:83:8a:ad:c3:f0:e9:12:f8:ed:86:0d:
c1:53:a0:b9:23:d2:5f:d4:dd:27:52:90:34:e8:92:72:1b:f5:
93:d6:cc:62:e3:3e:29:11:87:70:c1:7d:82:7f:e4:83:cf:2f:
f7:55:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:08 2024 by rpki-client on console-ams.rpki-client.org