Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4xJYdkcmlmid_kpkRKozdrlJBFI.roa
File: 4xJYdkcmlmid_kpkRKozdrlJBFI.roa (raw, json)
Hash identifier: bVRUZWlwUNcJsyqQM/chlVb55wbWG/e+SGI/fwoXBWI=
Subject key identifier: E3:12:58:76:47:26:96:68:9D:FE:4A:64:44:AA:33:76:B9:49:04:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4xJYdkcmlmid_kpkRKozdrlJBFI.roa
Signing time: Sun 31 Mar 2024 11:22:11 +0000
ROA not before: Sun 31 Mar 2024 11:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13803 (0x35eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 11:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E3125876472696689DFE4A6444AA3376B9490452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:8b:56:2b:74:b7:d9:c5:30:65:c5:fd:3c:
99:03:29:2b:a9:73:f5:8d:ae:99:ca:0c:c8:50:1d:
5f:fd:d7:2f:44:84:b0:9a:a5:ec:1a:42:e5:cb:0d:
7e:a0:a2:97:a3:2a:c0:a9:e7:d4:e2:8e:86:76:11:
fe:6b:53:ba:3c:4e:9d:3a:65:85:42:a0:57:c2:5b:
5b:81:6a:52:23:96:1e:d1:5e:ec:17:4f:ae:ba:d5:
77:ad:ce:dc:df:c1:9a:a8:3d:32:6d:c6:08:d2:b9:
79:ca:40:6e:77:47:d9:f9:b6:24:79:ea:3d:d0:c8:
b9:5f:25:11:df:39:af:3f:02:7b:ce:f8:01:a7:d0:
10:0c:eb:85:6e:44:96:3f:95:06:51:0c:29:d1:29:
8e:55:e5:63:a0:10:b7:fd:d4:46:7a:1a:c5:2a:5d:
e7:eb:fb:e0:b5:b3:a0:2b:1b:57:3c:55:e4:43:f5:
8b:f0:fa:9d:d2:50:90:0c:41:af:d2:5d:fd:51:a5:
5b:52:3c:b6:51:30:8f:cd:4e:6c:b5:8a:a5:c3:3b:
3b:ba:5a:fe:51:a4:63:6d:ee:3a:50:b2:1e:4b:8a:
95:b4:28:28:ce:d0:5a:4c:4e:d7:5b:94:44:13:e9:
cc:c0:58:ff:63:d4:67:e3:39:17:66:7d:78:4f:74:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:58:76:47:26:96:68:9D:FE:4A:64:44:AA:33:76:B9:49:04:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4xJYdkcmlmid_kpkRKozdrlJBFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:27:7e:8c:3d:8a:50:03:d8:d6:d0:ce:2e:1b:b3:f1:14:f7:
45:31:b3:3f:8c:23:ae:05:bf:a4:61:3f:7a:09:c2:80:ba:87:
8a:9a:71:3f:2e:1d:2f:40:e0:2d:03:35:73:7a:54:f3:c8:91:
2b:c9:0d:af:dc:4e:89:e6:7d:3c:ab:f3:4a:a5:43:34:4a:8b:
5a:50:69:25:77:eb:a7:fa:af:15:68:ee:7a:25:43:93:fd:9e:
58:95:f1:3d:0c:10:8a:3f:23:6a:d8:d3:a1:a3:73:4b:6a:98:
8d:b0:95:db:1a:c4:1f:4d:bd:e7:96:c0:f2:c0:63:7d:fb:69:
9e:ec:2d:b1:45:66:a5:a7:06:21:8a:64:fa:38:37:a8:0d:8c:
c5:3c:a7:0b:c1:b3:e9:84:cb:9b:ae:66:f4:ef:37:e4:9f:fb:
bf:2d:9a:91:6e:9f:e7:b1:0f:66:87:76:a7:f3:f2:aa:c4:27:
ce:eb:b0:91:62:c8:78:4d:50:b4:17:89:89:71:35:6f:5c:cc:
c2:32:98:89:d0:ef:64:14:c3:84:77:d8:e1:21:8f:ff:50:6a:
a7:12:62:7d:37:88:91:da:48:12:0f:f0:98:a6:00:b6:64:51:
16:d0:15:87:b7:55:54:73:3f:da:68:9a:18:0e:8f:99:c7:db:
26:fd:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:14 2024 by rpki-client on console-ams.rpki-client.org