Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1l9ZMD3b510PWktpnItW4gwiFug.roa
File: 1l9ZMD3b510PWktpnItW4gwiFug.roa (raw, json)
Hash identifier: WZE176Er0qq2vAK6FAf525LHig7JT5dSyFhKQH2nfrg=
Subject key identifier: D6:5F:59:30:3D:DB:E7:5D:0F:5A:4B:69:9C:8B:56:E2:0C:22:16:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C6B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1l9ZMD3b510PWktpnItW4gwiFug.roa
Signing time: Tue 09 Apr 2024 03:22:36 +0000
ROA not before: Tue 09 Apr 2024 03:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15467 (0x3c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 03:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D65F59303DDBE75D0F5A4B699C8B56E20C2216E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:c9:7b:27:e1:f9:91:1c:9b:74:e6:d6:f3:
b8:b0:8a:04:42:fb:88:82:d3:1f:b2:56:d8:aa:a1:
cf:e7:b2:c2:d8:db:5e:91:37:3b:6d:4b:6d:75:d4:
32:a8:b7:8a:c6:00:2e:99:a1:fc:7a:2a:f1:0d:4f:
5a:61:d7:2b:9e:44:e5:e5:c8:bf:9a:bb:4b:c5:d9:
06:bc:eb:73:cf:fb:ec:70:b3:7e:79:2a:36:0b:c1:
10:cb:f4:bd:71:12:eb:38:79:ea:4c:1e:a2:e4:b8:
d7:1f:7e:76:5a:91:dd:29:c6:5f:9e:a7:4c:fb:30:
8f:a0:a7:ef:09:43:55:b5:e2:df:50:08:8c:bd:bc:
8a:b0:ba:89:57:04:98:ae:79:0d:fb:da:a9:e9:22:
a4:fe:db:13:c2:2f:99:23:60:f1:16:14:54:c6:80:
fb:f9:bc:00:a6:a2:da:14:91:da:7f:70:ad:27:8d:
38:7f:a6:9f:79:e9:c8:32:be:82:f4:86:0b:74:ed:
f8:d6:ff:90:ba:bb:d2:1a:a6:cf:e5:e1:51:ca:5c:
ed:78:28:85:16:5f:d4:98:04:2d:46:a7:7b:8b:e3:
ce:7b:08:e8:0d:a2:26:79:d6:66:94:12:ab:07:5c:
22:03:5e:9b:7e:d5:e1:e9:01:a1:14:c1:14:90:6d:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:59:30:3D:DB:E7:5D:0F:5A:4B:69:9C:8B:56:E2:0C:22:16:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1l9ZMD3b510PWktpnItW4gwiFug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:e7:5a:af:83:e9:8c:9c:55:ff:87:01:dd:7c:cc:f2:bd:ae:
f2:a0:80:47:52:58:07:b6:0b:7c:91:ff:e0:1d:0a:1e:f3:31:
a0:6c:2a:91:af:63:e8:55:49:43:fc:95:19:b8:c2:ff:ae:8e:
2b:92:0c:bf:a3:98:0a:2a:40:5f:27:84:a0:f1:3f:a5:af:82:
cb:a7:3d:14:36:43:fb:e0:b1:07:cb:2c:b5:32:68:74:84:69:
fb:73:7f:de:f2:7d:8c:1c:87:b3:40:2b:67:67:76:63:48:3e:
31:cc:97:0a:86:8b:c8:8c:48:57:d4:ae:3b:6c:34:d0:d3:09:
b2:d0:4f:47:e9:fb:c7:97:2b:df:05:d2:c4:5a:ed:00:01:fa:
ca:8c:64:10:4c:78:7a:4d:6a:f4:6f:81:af:70:2d:7c:82:32:
54:df:8d:9d:44:fd:1e:22:9c:75:66:80:77:80:43:a1:2f:dc:
c5:68:bc:c9:02:db:45:d2:1a:89:3b:b1:6c:b3:ed:bf:2e:d2:
2a:32:7b:34:a4:83:25:0d:54:fd:be:a4:9d:ee:1d:67:bf:45:
7a:79:f5:d8:76:f8:60:ad:d0:b6:20:cc:a4:ef:56:67:b9:66:
ac:0f:d0:57:4f:09:bc:3c:37:98:c3:ad:39:06:13:ef:bb:1b:
ae:37:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org