Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3JRSBZakQjMeLVro0cMtoH8ZPQA.roa
File: 3JRSBZakQjMeLVro0cMtoH8ZPQA.roa (raw, json)
Hash identifier: a9D7Bxu2jDqp/yudKlE84g3jqhBgLYrk7UBAiVWWYRI=
Subject key identifier: DC:94:52:05:96:A4:42:33:1E:2D:5A:E8:D1:C3:2D:A0:7F:19:3D:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3JRSBZakQjMeLVro0cMtoH8ZPQA.roa
Signing time: Sun 12 May 2024 22:54:11 +0000
ROA not before: Sun 12 May 2024 22:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21959 (0x55c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 22:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC94520596A442331E2D5AE8D1C32DA07F193D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:55:93:0a:48:38:f0:bb:6b:6d:18:c7:47:
54:22:ac:d5:40:49:f2:15:af:84:71:51:7d:9f:e4:
f4:80:28:57:a7:68:5c:bb:13:a9:11:49:61:c3:85:
98:5b:70:cc:e7:28:f3:5d:1e:4f:09:63:a3:4b:7a:
2a:4c:1d:34:c2:07:e0:0c:b2:26:1a:9e:eb:27:c8:
38:11:40:e6:56:77:ad:fc:e8:c9:76:79:a1:99:68:
c4:05:83:60:93:6d:62:55:72:5b:72:91:96:49:0d:
38:3a:4a:54:1f:cf:c3:dc:ac:69:15:18:a4:51:ae:
b5:3e:ad:ed:db:d2:07:eb:b9:a5:ed:b3:d3:d8:61:
53:b2:fc:c0:28:f2:a5:e3:9c:c8:a2:30:9f:75:8f:
5a:6b:c3:12:07:0c:8d:c6:ad:f0:c1:c2:56:30:2b:
cb:d7:b5:a6:f7:95:54:e4:3d:01:77:0d:2d:f2:a3:
f7:ce:7e:32:3d:db:7a:90:a5:87:08:dd:6f:66:a2:
b2:a7:c8:5f:0d:6d:a9:8d:33:57:c3:61:35:89:fa:
bb:ec:99:98:33:47:bb:fd:ac:45:b4:eb:b3:49:d9:
dc:22:9d:6d:0c:eb:86:29:ba:7c:77:d2:bb:2c:0f:
13:c9:a7:eb:d4:a4:80:79:e2:68:15:66:3d:7e:fd:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:52:05:96:A4:42:33:1E:2D:5A:E8:D1:C3:2D:A0:7F:19:3D:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3JRSBZakQjMeLVro0cMtoH8ZPQA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
67:3c:d5:a0:73:3d:f1:76:c9:2c:fd:38:e0:f2:0b:8c:e9:e7:
83:01:08:ac:88:c5:fa:f1:26:83:86:90:72:db:8d:5e:93:e0:
19:ff:d8:d8:73:92:28:93:98:74:25:ad:d8:65:91:d2:c8:d9:
0e:f5:0e:dc:1d:38:26:50:24:e3:19:43:d8:aa:ea:80:54:4c:
a1:bf:01:51:f9:38:12:b4:b3:f0:b7:5b:e0:1d:d0:62:d9:b7:
3a:a4:80:89:05:b9:a6:cb:f2:dd:95:74:87:c4:45:1f:b1:99:
e0:c5:94:8b:ed:ec:c0:27:7c:b1:fc:0c:21:46:1e:3e:88:15:
9f:37:3f:6f:46:37:63:be:62:11:90:09:69:bc:5c:82:2c:2c:
3a:4e:72:02:23:1a:bc:fb:95:72:92:11:1d:14:1b:7d:89:53:
07:b1:da:b9:f6:9c:2d:c8:e1:34:8a:a1:59:7b:f3:05:c9:ec:
90:80:c7:f3:b7:3f:01:f2:69:f6:dc:cd:f6:df:b8:14:51:82:
a0:7e:76:ae:9d:e6:bc:41:f6:9c:f1:72:fd:dd:ad:0f:2a:5f:
75:74:36:06:3c:d9:b1:07:cd:24:13:33:16:e1:4d:61:53:0c:
18:d5:51:27:27:4d:37:76:f0:19:bc:a8:04:b9:fe:7b:8a:4d:
2e:a6:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:12 2024 by rpki-client on console-ams.rpki-client.org