Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/23PclcOTrR_CqqYUShS3qq30bhM.roa
File: 23PclcOTrR_CqqYUShS3qq30bhM.roa (raw, json)
Hash identifier: LaYbrN0QQ8sBun9gK2KWxQViv9a6dgSZn5HdUnOXex4=
Subject key identifier: DB:73:DC:95:C3:93:AD:1F:C2:AA:A6:14:4A:14:B7:AA:AD:F4:6E:13
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FEB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/23PclcOTrR_CqqYUShS3qq30bhM.roa
Signing time: Sun 05 May 2024 03:23:49 +0000
ROA not before: Sun 05 May 2024 03:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20459 (0x4feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 03:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB73DC95C393AD1FC2AAA6144A14B7AAADF46E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:89:ad:b2:6f:94:ee:15:14:19:24:9d:e7:
57:7f:f2:77:e9:12:de:27:47:11:21:4e:b7:7b:e3:
be:da:7d:91:6e:2e:62:92:36:f6:f2:ee:74:56:19:
72:91:e3:92:ba:6a:01:e1:51:00:a3:9e:db:10:8d:
b8:37:89:4a:10:c5:e2:f1:5f:35:76:7c:aa:9c:e6:
76:c0:7c:1b:5e:83:82:fe:13:70:ce:06:71:44:1e:
fe:99:42:99:f9:d5:0d:cd:6e:91:54:04:c7:2b:2b:
34:f9:4a:67:a9:7d:46:59:e2:ca:b4:c1:92:5e:33:
8f:9b:0f:b9:fa:7c:38:10:78:3e:3c:b3:54:dc:1d:
47:e5:e4:c4:3b:e8:2d:2f:b5:b4:2e:3c:4e:cc:44:
3a:0e:af:5f:cb:09:01:0c:f6:30:7d:bb:9f:a3:e1:
b7:b9:f7:a0:a9:fc:4d:0f:d9:bb:ea:28:ab:67:6d:
9a:0b:66:7a:bc:fb:78:eb:c8:82:ab:ec:b8:0b:02:
77:46:af:97:f9:28:cb:1c:24:36:0e:72:dd:c3:ed:
61:e3:fc:2e:a1:83:1b:02:31:ca:bc:e1:62:5f:f1:
3f:da:0b:98:09:96:70:62:ac:ff:26:9b:a0:11:0c:
e1:67:ad:eb:ef:40:9f:fb:6f:d5:0c:f0:d6:6b:45:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:DC:95:C3:93:AD:1F:C2:AA:A6:14:4A:14:B7:AA:AD:F4:6E:13
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/23PclcOTrR_CqqYUShS3qq30bhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:c1:2a:63:0e:49:72:78:8a:08:1f:bc:b8:da:96:46:15:fa:
aa:db:9b:a6:f9:7d:2a:42:d2:80:be:73:29:05:cb:b2:5c:a9:
9b:4b:4b:dc:12:4c:99:3b:c9:74:26:d2:7c:75:a9:c1:a5:75:
ea:48:7b:01:36:a5:63:bc:e5:a0:62:5c:4d:93:11:80:08:69:
f8:9f:c2:90:59:05:8c:30:93:db:24:cc:ba:f7:8c:7b:90:a1:
d7:d3:e4:0c:4e:f9:f8:8f:16:c9:a8:c0:e7:ac:b9:0b:0e:37:
0f:cd:a3:f1:dc:3f:0d:8f:c1:72:7c:5e:3b:ad:e0:c6:61:25:
cb:18:ad:44:ac:3d:90:3f:24:9d:b9:44:46:49:0a:9b:7e:c3:
09:c7:4f:6f:14:73:eb:10:b1:02:41:37:55:a8:18:bd:e9:56:
c5:ae:98:b1:22:00:1b:45:9c:5c:3a:e4:87:87:b4:fe:21:87:
ef:19:1b:06:bc:10:1d:92:11:3f:ae:d7:38:ef:bd:5b:9c:15:
07:02:0d:69:fe:e5:03:17:a6:2b:d4:45:8d:ce:2a:d8:cb:ca:
30:f4:f2:2f:d9:d8:75:49:40:a1:ce:c3:5b:e4:2d:92:8b:99:
93:82:ff:46:33:3d:f3:48:90:2e:b0:32:5d:19:77:7c:76:e7:
42:0c:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:11 2024 by rpki-client on console-ams.rpki-client.org