Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/53Tc8MPZwDpXblSZDVrBj4IGYgE.roa
File: 53Tc8MPZwDpXblSZDVrBj4IGYgE.roa (raw, json)
Hash identifier: qTeXaVHgx0Yh66QrQnQ6MS3OXwV2n2Qi03G149k+Adg=
Subject key identifier: E7:74:DC:F0:C3:D9:C0:3A:57:6E:54:99:0D:5A:C1:8F:82:06:62:01
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 433F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/53Tc8MPZwDpXblSZDVrBj4IGYgE.roa
Signing time: Thu 18 Apr 2024 05:53:01 +0000
ROA not before: Thu 18 Apr 2024 05:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17215 (0x433f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 05:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E774DCF0C3D9C03A576E54990D5AC18F82066201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:fd:29:d1:10:28:b5:eb:b7:7e:bf:3e:81:
49:ec:c0:9b:7d:11:5b:52:bd:91:48:c5:4c:25:ae:
39:61:a4:e3:e3:48:ed:15:ac:3a:3e:e3:57:76:2d:
2f:6f:1a:cb:e5:b7:4f:d7:2b:11:83:9e:1d:20:ff:
c1:29:47:1e:38:f6:9d:3b:d3:0b:36:f2:e0:69:ea:
85:a7:1f:ba:a8:e5:47:62:2e:ff:62:c4:58:6c:90:
86:2b:31:6f:5f:65:19:9d:53:d0:27:83:ca:31:fc:
1e:83:83:c0:93:3c:0a:f2:96:b8:93:e2:96:ba:80:
7b:bc:d2:d3:f0:33:76:89:3e:39:31:bb:5e:c1:f1:
25:ae:e4:38:48:be:af:c9:91:e7:af:e7:39:d8:8e:
ec:b8:21:2d:0d:56:49:0d:23:2a:01:8c:ea:af:cd:
89:49:3c:92:bf:b2:1a:b1:1f:cc:dc:e7:bf:d1:9e:
99:d7:7b:cc:cb:e8:1d:81:21:94:27:a7:e4:64:d7:
59:2f:2e:e5:e4:a9:f3:f4:15:fa:9c:60:14:36:ba:
0e:4f:c6:8a:15:0b:d2:e9:dd:32:5b:2f:d8:9f:5d:
ce:49:dd:24:fb:26:1f:6a:c6:8f:dc:6c:73:e8:c7:
cf:49:24:7b:bd:83:b4:f3:8f:fa:8e:07:54:a4:29:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:DC:F0:C3:D9:C0:3A:57:6E:54:99:0D:5A:C1:8F:82:06:62:01
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/53Tc8MPZwDpXblSZDVrBj4IGYgE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:dc:8b:31:73:a6:14:0a:32:3a:f0:8b:32:d0:1a:2e:f5:a5:
ea:68:45:2e:26:47:6b:2a:f7:18:84:8b:40:16:aa:65:c5:40:
31:7e:a6:88:18:e1:72:4b:43:61:dd:5c:48:2f:ff:01:5a:96:
c3:e3:54:21:e3:87:e3:47:4c:48:2d:6a:41:84:6d:58:ad:33:
c9:84:30:23:d2:c6:53:2f:83:19:46:44:e9:a1:34:40:28:a0:
eb:c6:ec:f2:47:5e:ac:77:98:40:b5:56:5c:84:24:24:60:af:
f6:42:4b:d3:0a:cf:de:ed:3f:a8:ac:9b:32:55:4f:ea:a2:64:
e1:23:25:96:95:0f:73:62:e5:95:c0:4d:aa:fa:24:15:fc:96:
2b:15:0d:13:96:2b:38:ab:2a:08:f7:da:d0:84:ba:f4:7a:ff:
c8:41:1c:b9:23:d2:8b:82:2c:86:54:ef:82:54:dc:f1:11:77:
f6:30:b7:b2:19:6b:97:6c:a1:7f:cd:24:52:a3:83:ea:a0:70:
5e:49:1c:74:c8:25:f6:08:d0:25:76:33:e4:bd:40:32:61:2e:
15:2e:5f:20:6c:a4:72:b0:70:74:fc:c5:c8:4f:30:8b:7a:fc:
1c:1a:76:4a:34:53:cd:be:dc:70:25:9a:34:a2:4f:b6:c4:5e:
f4:76:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:14 2024 by rpki-client on console-ams.rpki-client.org