Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4qo-c8evA3zIKC_l_PVGpGwD0u8.roa
File: 4qo-c8evA3zIKC_l_PVGpGwD0u8.roa (raw, json)
Hash identifier: s5DeZSoyR9MHu7XVBZp8S25vGgb+xVaG4azkPiVXZ8E=
Subject key identifier: E2:AA:3E:73:C7:AF:03:7C:C8:28:2F:E5:FC:F5:46:A4:6C:03:D2:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FEF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4qo-c8evA3zIKC_l_PVGpGwD0u8.roa
Signing time: Sun 05 May 2024 03:54:01 +0000
ROA not before: Sun 05 May 2024 03:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20463 (0x4fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 03:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E2AA3E73C7AF037CC8282FE5FCF546A46C03D2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:8a:d0:be:17:72:7b:55:13:91:9a:78:d6:
43:9b:5e:10:d7:d3:1e:a6:5c:43:60:99:1c:92:cd:
1c:a6:08:a8:04:c6:0d:1d:c3:81:f0:0d:a0:2a:e3:
12:4e:d9:05:3c:e9:b4:01:2f:d9:bb:82:96:47:65:
68:22:7d:88:b4:98:bc:06:91:f1:5b:cf:04:36:de:
3e:ce:12:5d:65:fb:dc:a4:98:1a:5c:9e:af:0e:bf:
1f:7a:6b:cd:e9:a3:db:58:23:83:c1:f3:12:f5:60:
6c:53:66:a4:16:f0:2a:21:81:21:87:2a:e5:a9:ab:
5c:89:04:74:98:fd:86:22:7d:1f:e3:33:10:bc:26:
99:a1:9a:a6:19:23:d2:38:e7:dd:ea:e3:f6:13:34:
0d:cc:de:af:27:9a:41:0c:42:73:ce:6b:f0:a3:16:
12:6a:31:ff:b6:9b:4f:6a:0b:3e:52:a6:d4:37:ab:
a8:25:5b:04:1d:76:ff:94:3a:88:72:94:ce:b1:9d:
6e:29:2a:9e:60:62:51:e9:16:7c:15:97:10:1c:a6:
10:7c:14:c7:15:b1:e7:ff:8f:f2:50:96:a2:ed:a4:
bb:b6:88:f5:21:c4:8a:8f:cb:67:3e:17:e1:95:64:
60:e6:4d:78:d4:43:63:f4:8f:f7:fc:ea:cb:5b:06:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:3E:73:C7:AF:03:7C:C8:28:2F:E5:FC:F5:46:A4:6C:03:D2:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4qo-c8evA3zIKC_l_PVGpGwD0u8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:8d:f8:92:91:4e:5a:dc:59:08:a4:30:d4:f6:4f:90:8f:e4:
d7:a7:19:a7:2d:43:76:21:51:23:6e:63:28:e8:bf:e5:20:8f:
82:d6:c7:23:19:25:52:57:b3:f5:6b:b7:f6:8a:78:38:9f:fa:
0b:86:5a:30:40:11:28:71:48:de:06:52:92:7d:95:d9:ce:9a:
cd:d3:3a:2a:2a:f2:85:03:50:c5:d8:18:12:ce:10:b4:b1:40:
d8:fe:82:ca:e7:fa:85:b8:63:11:9f:1a:68:9f:d3:da:22:af:
6c:23:32:ee:3f:50:56:b2:f6:01:39:bc:97:eb:65:5d:50:06:
47:08:b0:29:3f:ff:d5:5f:5d:9e:5c:46:75:48:04:a2:72:77:
85:a8:29:32:72:d7:89:cc:df:05:77:6b:b3:6b:38:41:30:04:
2c:84:a0:48:8d:bf:3c:8a:4b:9c:65:10:9a:11:1a:85:95:3b:
3e:1e:d4:17:f5:4d:00:4b:1b:6d:2b:2b:13:8b:e1:df:05:2f:
36:42:2f:0d:4b:0a:9f:c5:8e:a8:5d:90:a7:1a:52:b3:b7:ad:
03:c2:d8:d4:3f:d7:d0:c2:13:f5:27:a6:0c:17:00:35:f9:3c:
c0:db:05:50:1a:a5:45:0d:e2:43:5d:57:49:22:cc:4b:7f:ea:
78:05:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:14 2024 by rpki-client on console-ams.rpki-client.org