Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1qunZcoRfhJgZ_7yVtFhBOoXvU4.roa
File: 1qunZcoRfhJgZ_7yVtFhBOoXvU4.roa (raw, json)
Hash identifier: tc6F8v4XeY/NF5vrvdjTcHiuMx5gb+4qkFeDsvzYfcE=
Subject key identifier: D6:AB:A7:65:CA:11:7E:12:60:67:FE:F2:56:D1:61:04:EA:17:BD:4E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E4B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1qunZcoRfhJgZ_7yVtFhBOoXvU4.roa
Signing time: Thu 02 May 2024 23:23:47 +0000
ROA not before: Thu 02 May 2024 23:23:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20043 (0x4e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 23:23:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D6ABA765CA117E126067FEF256D16104EA17BD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:8f:23:90:0d:76:a8:07:29:66:a4:21:5d:
2d:fc:7d:5e:14:f8:c7:05:e7:0d:0b:63:f9:10:ff:
5a:12:46:3f:1a:a6:44:eb:68:63:27:ce:9d:a1:33:
13:91:40:d7:d0:38:cb:b4:f2:ad:ca:f0:18:38:ba:
b8:29:0e:65:ac:56:a8:75:6c:32:6d:37:9d:50:3e:
7c:12:37:fe:30:28:5f:10:25:6a:dc:eb:42:1a:33:
0f:08:ef:7d:1b:b7:b2:89:d7:b8:92:b5:a9:ef:cd:
68:e8:b0:09:b2:41:59:ac:ce:81:fe:4d:ea:22:fd:
b6:e2:06:38:9b:9b:3f:68:2e:7d:23:28:cc:22:4f:
5e:dc:0f:8c:54:48:4b:55:a1:67:47:f8:b1:51:e2:
1c:b6:25:3b:f7:0c:61:0d:63:de:20:67:bb:52:31:
48:7c:1c:e5:e4:de:07:89:e2:f5:9f:19:be:fc:c1:
61:6e:1c:90:74:53:54:12:8b:22:0e:5b:0c:ef:b9:
77:0f:f0:5c:d2:15:4a:19:30:93:ae:45:44:75:33:
db:ad:47:7b:fa:46:c9:f3:4a:cb:09:72:7a:23:33:
ed:c9:af:2b:1b:93:53:a8:03:43:ad:80:d8:dc:c4:
cf:ba:e2:26:a2:9d:16:b5:14:a3:80:a2:3b:06:b1:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:A7:65:CA:11:7E:12:60:67:FE:F2:56:D1:61:04:EA:17:BD:4E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1qunZcoRfhJgZ_7yVtFhBOoXvU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:64:9b:7f:15:a6:cc:78:4b:81:08:e1:62:d6:a3:11:a0:bc:
a8:a1:9b:b8:49:09:96:bc:67:85:46:6b:df:53:e0:7d:1b:c1:
b0:26:41:4a:2c:eb:c5:93:d2:4c:b8:93:53:7c:ee:5d:d6:89:
7e:3b:8f:0d:9e:67:8b:c2:97:24:ca:d3:af:d1:40:5e:ee:92:
19:b0:9c:c0:24:de:15:71:aa:ba:07:f9:c6:f1:cd:fd:99:8c:
a5:18:81:56:36:7f:4b:d6:67:77:95:f0:d2:e1:72:50:ba:55:
c1:39:62:61:3e:3a:07:2c:a2:ba:5d:8a:0b:f0:81:14:d9:90:
e0:fc:99:1c:ca:94:d4:1b:86:4d:4d:b0:2a:e5:f9:f7:35:f2:
71:44:3d:71:7a:8f:a8:32:55:ba:05:48:ee:eb:ae:26:4e:4e:
67:16:45:6b:43:d9:cd:7b:50:0c:d3:50:18:45:49:26:8c:75:
bc:da:e4:81:0c:7b:e8:23:9f:af:87:12:9f:01:40:80:c4:ee:
cf:59:e0:82:46:9c:be:fd:fe:ef:fe:3a:68:1a:8e:a4:b4:f0:
e2:7c:80:79:8f:ab:24:71:85:ae:4b:2c:b2:72:dd:26:21:4b:
9b:36:8a:12:bd:c7:c5:8e:45:9d:75:b5:b5:be:6d:b4:b6:4b:
af:f4:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:11 2024 by rpki-client on console-ams.rpki-client.org