Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3T8crZwpMjiLbYk-Ch2hj38_dyM.roa
File: 3T8crZwpMjiLbYk-Ch2hj38_dyM.roa (raw, json)
Hash identifier: tDvszpgL9CS+eRffNbZh2OhCV1s66KyeTElLsR/3t7U=
Subject key identifier: DD:3F:1C:AD:9C:29:32:38:8B:6D:89:3E:0A:1D:A1:8F:7F:3F:77:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 365B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3T8crZwpMjiLbYk-Ch2hj38_dyM.roa
Signing time: Mon 01 Apr 2024 01:22:16 +0000
ROA not before: Mon 01 Apr 2024 01:22:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13915 (0x365b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 01:22:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DD3F1CAD9C2932388B6D893E0A1DA18F7F3F7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:a9:39:e5:d1:09:a1:c4:50:20:47:9e:a1:
1c:53:33:de:d2:0d:3b:db:99:6d:d4:f4:09:52:da:
79:22:d2:60:41:d8:e9:f8:ea:c3:90:71:3e:ff:84:
be:7b:fe:7f:72:aa:73:78:6f:ef:29:ef:27:2c:3e:
b0:23:ef:30:7a:37:f2:d4:8f:ed:8e:28:53:05:3f:
03:06:6e:b6:ac:51:ad:b5:90:cb:d3:27:81:c2:e6:
cf:3d:eb:47:01:4c:aa:1c:17:55:3d:c9:5e:c0:67:
4d:ee:72:1a:c2:6e:83:06:b0:8a:2d:8c:67:4c:f9:
2a:13:36:d7:67:96:16:6a:3e:4a:9b:9b:4f:07:17:
2f:10:01:43:6a:08:d3:39:7d:31:7c:3d:7b:83:0c:
26:47:bb:56:4a:1e:50:1a:5a:22:58:2a:34:f0:e9:
13:60:b8:71:54:98:0f:9e:4b:c5:77:da:88:1d:80:
e1:17:c9:7d:8b:dc:69:25:4c:09:3c:00:59:3b:73:
3e:a1:f3:cd:7d:9a:55:75:95:95:9e:69:ad:e0:57:
1e:bc:c7:d8:94:25:7a:84:70:47:8e:e9:aa:3e:4d:
03:0f:97:6e:e5:35:bf:d2:60:ca:d8:57:7f:13:f9:
6e:6e:05:64:1c:ca:8e:18:df:d6:f8:8a:58:3c:f5:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:1C:AD:9C:29:32:38:8B:6D:89:3E:0A:1D:A1:8F:7F:3F:77:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3T8crZwpMjiLbYk-Ch2hj38_dyM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:5d:7d:25:01:51:52:a7:d8:2e:d7:6d:ea:15:0d:bb:c3:1d:
b7:33:95:e1:a9:7a:32:7c:0c:09:32:a3:e9:a6:e0:e7:ca:f5:
2f:27:99:f4:db:83:75:20:67:11:f3:1e:78:40:b4:e6:85:84:
7f:f7:cb:9d:7e:fb:d2:6a:3d:16:e6:5a:22:05:12:e4:70:4d:
e5:59:a2:d5:0e:1c:fe:3c:dd:d1:26:42:75:37:62:a6:38:b8:
d4:73:53:24:9f:4b:ca:d7:bf:4a:5c:15:ac:07:ee:ca:aa:63:
ee:42:c9:83:b2:e4:83:45:dd:ca:b3:16:6e:e4:a0:e1:a1:94:
6e:5b:09:b1:7a:14:68:e2:0e:5f:5d:13:c5:30:e9:cf:31:df:
cf:5c:35:79:6a:f5:19:02:05:e1:00:82:be:8e:86:c3:bb:52:
45:a7:60:93:9c:98:1b:4c:c8:e6:69:9b:08:f7:84:ef:a8:1c:
d8:fb:dd:fc:40:8d:66:eb:a0:f5:7e:4d:d0:15:bb:af:ee:61:
53:7b:84:20:3d:93:32:26:13:31:fe:0b:af:50:ca:2d:1d:b1:
2a:f6:99:cb:4c:a6:ac:d7:c6:97:70:f3:b1:86:f7:e4:c7:ad:
85:10:c3:d9:95:59:a6:53:55:96:0b:ea:27:74:89:7f:c2:c0:
04:44:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:12 2024 by rpki-client on console-ams.rpki-client.org