Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1G3GC28ctir_gI_4AAfiSGAzYwk.roa
File: 1G3GC28ctir_gI_4AAfiSGAzYwk.roa (raw, json)
Hash identifier: jiwrjC5h8xiqA0fvwlcLqJtpvjq0BpkXvuZTa0aJpI0=
Subject key identifier: D4:6D:C6:0B:6F:1C:B6:2A:FF:80:8F:F8:00:07:E2:48:60:33:63:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A2F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1G3GC28ctir_gI_4AAfiSGAzYwk.roa
Signing time: Sat 06 Apr 2024 03:52:27 +0000
ROA not before: Sat 06 Apr 2024 03:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14895 (0x3a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 03:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D46DC60B6F1CB62AFF808FF80007E24860336309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:24:90:72:eb:bb:48:f6:c9:da:a6:4f:46:
52:dc:5b:ad:75:f8:ca:cf:4d:ae:d2:22:f8:a9:c2:
8d:9f:87:aa:4e:19:ee:3a:f6:29:b7:93:a3:60:5a:
3b:52:03:bc:ad:06:38:4e:38:8a:df:6f:75:98:29:
79:92:6c:63:c1:ca:48:55:4c:8a:21:c2:d2:50:af:
5c:96:ff:59:6c:fc:1f:31:02:27:f9:c5:56:86:5b:
c9:39:a2:15:41:35:5f:bf:ca:28:a7:93:20:90:73:
78:79:51:42:db:28:d1:95:18:be:b4:f0:d6:aa:ae:
b9:d0:96:71:56:49:9b:71:8c:b2:c6:e5:ee:1f:5e:
e9:12:69:54:6c:0d:9d:8d:be:ec:e7:06:29:a4:f1:
d7:28:66:ae:f3:8d:a0:ff:6c:2c:5e:f8:d9:a5:74:
6c:b4:c6:a3:3c:ee:5f:77:e7:12:25:f9:f4:1b:ca:
91:ab:d9:78:89:0f:f2:ca:53:ed:06:f7:d0:1a:81:
4e:83:cc:d0:04:c2:80:a2:90:3e:87:40:cf:88:70:
35:08:09:90:09:91:4e:70:79:cf:95:e9:14:b0:26:
dd:37:8a:c5:1c:4a:35:d5:a6:30:b5:15:dd:b4:37:
d8:17:a1:3c:5d:38:b2:5a:bc:dc:16:12:b3:ab:33:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:C6:0B:6F:1C:B6:2A:FF:80:8F:F8:00:07:E2:48:60:33:63:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1G3GC28ctir_gI_4AAfiSGAzYwk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:cc:3b:34:9e:93:7a:b1:fc:83:e7:7f:c4:dd:a3:23:ed:b4:
54:a1:02:5f:6b:41:e0:56:f2:07:ed:0e:29:1f:a9:bd:9f:97:
46:ea:f6:cf:44:e2:36:79:9b:cd:cf:79:56:3f:da:78:92:1f:
15:9b:5e:87:5d:8a:c2:a1:00:7d:de:2c:bb:e2:fa:fa:0e:76:
fa:1e:6e:ee:49:78:d3:0e:f4:03:2d:24:1b:8b:e8:8d:06:b4:
64:cf:de:2f:6c:0c:2d:f8:20:0d:ce:8f:7b:80:35:89:11:bd:
ad:64:94:32:cb:97:89:91:08:f3:f2:f9:72:91:83:bb:7b:be:
52:4a:44:05:80:f8:0b:ff:f7:53:1a:ef:e0:ae:28:89:01:b3:
61:a9:83:a9:c6:c8:cb:fa:ff:b4:06:b7:08:27:f0:23:c9:47:
2e:bf:d4:91:bf:f6:b8:c0:ca:8b:80:77:d1:9d:22:5a:a5:7d:
bb:23:2c:2a:79:4e:cc:31:a1:f5:ff:f8:72:aa:07:8f:b9:9e:
67:27:02:8d:15:db:02:2a:99:86:cf:80:83:b0:97:29:db:19:
66:6f:a8:84:f4:2f:d9:7c:fb:82:e4:94:32:9f:04:f6:ef:2c:
45:bd:86:07:83:3f:12:b3:c6:fd:fa:58:bb:db:07:2d:81:df:
30:80:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:09 2024 by rpki-client on console-ams.rpki-client.org