Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3qgFH3pDmeBdqDYzpOVwxm2H4OE.roa
File: 3qgFH3pDmeBdqDYzpOVwxm2H4OE.roa (raw, json)
Hash identifier: 7v/79feW6OsEoPH4fcnyREAu67t5zMaTw1ict0ciRfU=
Subject key identifier: DE:A8:05:1F:7A:43:99:E0:5D:A8:36:33:A4:E5:70:C6:6D:87:E0:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F73
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3qgFH3pDmeBdqDYzpOVwxm2H4OE.roa
Signing time: Sat 04 May 2024 12:23:53 +0000
ROA not before: Sat 04 May 2024 12:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20339 (0x4f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 12:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DEA8051F7A4399E05DA83633A4E570C66D87E0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:e9:25:73:cc:1c:64:b4:a4:57:af:cd:9d:
fb:44:f6:a7:5a:20:7a:74:3c:e5:55:ce:bc:7a:33:
fd:34:48:fa:79:a4:3c:2c:a3:46:a0:b1:54:af:1f:
75:19:d7:0f:89:71:b9:32:3a:ae:b9:9f:a8:13:1d:
d9:b0:8a:5b:c7:e4:23:e8:78:f0:b0:7d:8f:9f:99:
79:27:df:38:3d:67:80:a5:2a:fc:84:d7:32:d2:7d:
60:e4:10:73:27:83:c4:e7:71:4f:96:8c:6e:d6:e4:
4f:78:cd:ff:29:76:32:b7:d6:a3:93:c5:03:ff:7a:
24:ec:8a:92:46:c9:72:53:4e:39:12:ed:a0:94:b2:
c2:57:bd:25:8e:65:1c:cb:28:32:5a:3f:b0:60:6a:
40:22:a5:94:b6:22:b8:4a:b5:d6:c9:09:c9:eb:db:
37:c8:d4:b0:bb:7d:61:e2:90:c1:87:76:e5:25:75:
1d:15:67:25:62:0b:ea:92:8d:ea:5e:3d:cc:01:13:
14:86:f5:f0:0b:29:82:78:95:76:50:b4:7f:80:fe:
a2:b0:88:64:f2:a3:27:0e:db:77:74:bd:f7:11:00:
95:8f:2c:74:04:c9:23:6b:8e:e4:ac:fa:21:a3:33:
46:8e:1d:0f:f5:2f:c7:d6:f8:aa:41:72:5a:b3:00:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:05:1F:7A:43:99:E0:5D:A8:36:33:A4:E5:70:C6:6D:87:E0:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3qgFH3pDmeBdqDYzpOVwxm2H4OE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:75:58:6d:b5:3d:32:e8:83:a8:1a:af:a3:74:e0:7e:b5:56:
55:df:a2:6f:d1:51:35:88:12:57:fd:41:50:06:c7:7d:4d:36:
e9:74:93:18:b0:8b:cb:4d:dd:1b:fb:a6:b7:09:ca:d7:e1:65:
e8:62:04:b5:e2:da:ac:6e:fd:fb:73:6b:a2:c8:8c:90:6b:33:
13:2e:46:06:f0:13:69:1d:d3:23:ac:c5:63:37:ad:83:6a:fb:
93:a0:91:bf:92:e7:b7:c8:2e:bc:2a:f7:29:f9:a5:b4:b0:7b:
9d:df:71:49:8c:cd:19:03:6f:32:ae:6a:07:a7:57:b4:00:51:
a1:43:cb:1f:e6:10:53:1b:95:ab:b6:d0:3d:72:cc:97:f3:3f:
00:c8:77:f2:ff:8f:43:33:f0:d2:8b:38:eb:1f:0c:f2:a3:33:
2b:1b:c0:e2:58:5c:e8:1e:79:d1:f2:8d:1d:47:11:86:92:63:
3b:d1:a1:13:1b:89:4b:6c:91:7c:a0:92:63:3e:db:58:a8:d4:
e6:59:fe:64:44:62:26:9f:54:5d:2a:48:ba:f2:d6:b5:95:57:
be:73:12:30:b4:e0:68:16:03:12:41:49:41:d8:c8:5f:2d:b9:
20:8f:58:78:1a:dc:4f:d6:c2:ee:41:4a:e2:cd:79:8c:6c:91:
b9:ea:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org