Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4TMxAwyE_awYp8ND8b8-15pK1so.roa
File: 4TMxAwyE_awYp8ND8b8-15pK1so.roa (raw, json)
Hash identifier: Tv7xmPGzU1LbUn4ePwPb6fBep+ecpSNayryIMOEYgiQ=
Subject key identifier: E1:33:31:03:0C:84:FD:AC:18:A7:C3:43:F1:BF:3E:D7:9A:4A:D6:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4443
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4TMxAwyE_awYp8ND8b8-15pK1so.roa
Signing time: Fri 19 Apr 2024 14:23:02 +0000
ROA not before: Fri 19 Apr 2024 14:23:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17475 (0x4443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 14:23:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E13331030C84FDAC18A7C343F1BF3ED79A4AD6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:31:0f:5b:ea:b9:4e:06:08:fc:60:64:8d:
36:2d:b8:d1:af:48:de:8a:79:83:4d:69:07:81:f1:
c0:16:16:9b:6a:bb:eb:bf:e5:26:21:28:74:db:a1:
cf:46:55:be:d2:19:14:ab:1f:42:45:98:03:09:de:
85:74:f7:2a:28:7e:b4:aa:bf:60:a2:36:76:fd:fa:
a2:6f:a4:df:83:31:e9:81:d4:c6:4d:75:11:95:0c:
84:8a:15:94:cf:61:46:57:f4:3c:a4:93:2f:db:3c:
85:ce:e9:47:df:ad:5a:a6:ff:b6:92:ee:63:9b:5b:
3d:a0:b1:60:88:c7:e7:a3:93:63:37:83:b0:3c:b9:
8b:a7:d0:94:65:a5:8d:4b:0f:ae:f1:14:8d:90:1e:
9e:25:d3:ad:43:06:97:72:f9:a9:bd:ce:c6:d1:9f:
fa:d2:8c:af:9e:e8:98:82:88:7d:58:44:3c:5f:2a:
2e:8f:e4:bb:62:bf:63:7e:62:a3:fb:81:56:a2:d0:
83:26:c0:2b:3b:ce:c2:6b:25:ec:7b:aa:24:30:5b:
d6:d3:0e:04:ae:40:f9:eb:e0:7b:fa:18:51:f8:64:
f1:00:2d:14:d5:45:55:1e:94:5a:31:03:18:2e:2a:
6e:ec:19:a8:6a:4f:70:73:71:0c:fd:36:93:53:9c:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:33:31:03:0C:84:FD:AC:18:A7:C3:43:F1:BF:3E:D7:9A:4A:D6:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4TMxAwyE_awYp8ND8b8-15pK1so.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:02:b3:0b:53:c7:f7:41:32:d0:44:4a:d2:fb:ec:fe:0e:02:
c5:66:22:a4:8e:20:6a:e2:a3:9f:b5:53:8d:51:31:bf:db:72:
25:55:7f:01:f9:82:0c:77:56:75:9e:2c:81:a2:79:9e:f0:83:
8c:91:12:21:89:19:d6:c0:f7:9d:77:47:09:34:e1:f4:4d:1f:
44:66:b3:9a:78:d3:51:0a:28:b6:b5:78:68:6d:b6:89:19:dc:
69:f5:27:29:76:e7:da:24:11:44:e3:32:d1:90:3f:0b:ca:81:
ce:88:15:2f:5d:cb:ea:57:38:12:a5:6c:03:55:b2:bf:f5:b5:
39:a9:cf:9c:a5:02:c4:c9:ae:01:a7:46:af:55:96:c5:ae:b6:
23:06:1f:5a:d5:7e:78:6f:8c:de:9c:10:ad:55:c6:1b:8d:d6:
5d:46:a9:7f:cb:ec:0d:0b:06:44:fd:d5:ee:58:c9:28:26:5c:
c9:6c:36:29:bf:3b:e0:fd:77:32:9b:4b:0a:91:d2:c5:c9:2f:
20:38:3d:74:6a:a4:e1:11:b8:d7:98:99:81:9c:07:1d:18:2c:
af:af:48:02:4b:2e:3e:86:a8:17:31:4c:0c:dc:52:9a:7a:43:
60:01:5a:5f:87:fb:fb:4f:cd:0f:56:1b:b9:02:73:20:ea:4d:
88:e7:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:05 2024 by rpki-client on console-fra.rpki-client.org