Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6-Fgev9V9jCOy1MrOA-UETYWKGs.roa
File: 6-Fgev9V9jCOy1MrOA-UETYWKGs.roa (raw, json)
Hash identifier: LvFrvizSX/H5Y6QbjBQpQWZM2qvmXSt+h+qmmjEeF2I=
Subject key identifier: EB:E1:60:7A:FF:55:F6:30:8E:CB:53:2B:38:0F:94:11:36:16:28:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6-Fgev9V9jCOy1MrOA-UETYWKGs.roa
Signing time: Mon 29 Apr 2024 11:23:37 +0000
ROA not before: Mon 29 Apr 2024 11:23:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19371 (0x4bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 11:23:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBE1607AFF55F6308ECB532B380F94113616286B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:8b:66:36:e8:98:c3:b3:27:cd:e9:91:34:
d5:a9:76:f7:53:0d:5d:2f:e9:7b:92:fe:b7:26:87:
ea:bb:f4:06:98:3f:7d:04:08:b6:f2:77:70:a1:26:
f0:0d:2d:be:34:9a:a4:d8:38:9d:8f:77:94:2b:be:
b5:8a:95:86:12:66:42:f1:9a:02:84:6d:95:32:b4:
4e:c2:f3:70:b5:49:64:6b:09:ff:87:98:47:1e:d4:
d3:2f:c7:9a:02:74:19:c2:b1:26:26:17:eb:a3:d1:
90:cb:9e:c7:b8:46:ab:ce:91:45:5d:f0:56:8c:36:
da:a0:37:b1:72:b1:cf:7f:4e:17:3a:2c:f6:f9:3f:
ee:fe:0e:4a:c5:d8:2f:59:e4:e3:b0:a3:bf:67:84:
38:be:d7:c8:1c:02:bb:01:10:7a:5c:14:3e:76:47:
7a:38:23:7d:2c:85:af:28:ec:57:1c:81:32:bc:d1:
c5:3b:4e:47:94:52:12:b9:6d:07:a3:bd:69:2f:99:
15:92:b1:c5:cd:bc:c0:99:8b:e0:4f:77:6c:1b:87:
4e:ca:45:e6:3c:1d:63:cc:61:a6:60:00:e3:81:71:
66:5f:7d:39:55:8e:ce:91:95:9a:d3:f1:3f:32:e7:
7f:b3:7c:8f:0b:97:e0:d3:62:ba:59:d0:17:10:35:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:60:7A:FF:55:F6:30:8E:CB:53:2B:38:0F:94:11:36:16:28:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6-Fgev9V9jCOy1MrOA-UETYWKGs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:4f:84:97:a1:83:e9:ee:e9:66:a6:73:b0:96:13:9f:db:b4:
36:e6:86:ef:b8:30:26:d8:7a:c8:7c:05:24:3d:f0:6b:3b:b4:
e5:ef:93:31:8f:b8:0c:b6:01:84:4b:8e:50:98:bf:33:72:1f:
ef:66:39:ef:4e:8b:e3:4f:99:4b:e2:45:09:ff:60:d5:af:ba:
2d:57:84:31:6f:0e:19:78:7b:b2:ee:45:f7:72:20:5d:e0:b3:
fa:ae:1a:fa:78:ce:ed:25:7a:56:92:fd:1a:96:21:bb:9a:c1:
bf:65:a0:c7:34:6d:43:19:ae:8c:1c:5c:f9:cb:03:0d:c9:27:
33:15:3c:11:c5:41:d7:d4:ca:8e:ec:bc:16:5c:56:c8:52:34:
6f:e1:e7:d4:00:e1:1f:1a:bc:7c:80:eb:ce:71:7d:e1:10:66:
e6:e7:e0:a5:5b:0f:7f:3c:30:2b:42:48:cb:31:bf:8a:71:9e:
23:83:9b:18:db:ac:eb:2e:be:2c:25:52:ec:ba:2d:94:d4:50:
b4:e2:1c:d0:86:88:d2:df:3d:e5:7e:ee:a1:c1:a6:68:34:ab:
70:cc:4b:5a:84:79:b6:55:b1:d6:5a:a4:52:54:b9:79:0b:f6:
48:c2:4e:c2:95:f2:35:92:63:7a:9a:55:08:79:09:3e:07:79:
49:9a:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org