Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/68xq-ZV1eVnblLgnq0j4y_wcEkk.roa
File: 68xq-ZV1eVnblLgnq0j4y_wcEkk.roa (raw, json)
Hash identifier: yGjTeEAInoMgK8s8q0qpnKcELdFA4lSxdW9iWcJcffQ=
Subject key identifier: EB:CC:6A:F9:95:75:79:59:DB:94:B8:27:AB:48:F8:CB:FC:1C:12:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3673
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/68xq-ZV1eVnblLgnq0j4y_wcEkk.roa
Signing time: Mon 01 Apr 2024 04:22:17 +0000
ROA not before: Mon 01 Apr 2024 04:22:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13939 (0x3673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 04:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBCC6AF995757959DB94B827AB48F8CBFC1C1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:a2:22:57:00:64:c8:8a:0c:2e:03:3f:7b:
48:8c:d4:d0:51:5f:a0:d8:61:e1:a5:f3:f5:3a:27:
d1:c1:b2:12:6d:a3:54:29:48:ce:2b:d7:e4:60:db:
ef:67:19:dc:aa:83:bc:08:53:77:0b:8e:1f:18:f5:
a3:80:5e:a3:b1:e7:a4:48:3e:33:28:02:39:9d:6b:
78:ec:1d:6c:23:fb:33:2d:a9:03:fe:fc:9a:2b:9f:
00:e5:f2:dd:6a:7e:95:f5:d4:23:7b:85:2f:3e:ac:
37:6e:df:a0:a7:99:b7:85:82:33:a6:13:55:e5:ba:
a6:89:1d:c4:49:28:88:1d:28:86:56:16:57:07:22:
d2:38:c4:a2:12:c8:92:20:46:dc:9d:18:96:65:d3:
c5:3f:0b:a8:5e:55:44:3c:a5:5c:03:26:b4:f1:a8:
2a:51:2e:27:46:5c:98:e1:85:3d:a4:10:bd:1e:73:
17:e4:b6:be:a2:53:63:f5:ae:ce:68:5b:9b:79:52:
37:6a:fe:f1:26:c2:da:c2:13:36:12:69:1f:4d:a6:
58:b5:71:e2:00:cf:33:1d:be:10:00:ad:5e:bf:3e:
f9:aa:af:38:f8:e3:85:05:5b:e8:fa:47:b4:33:60:
79:88:df:0e:bf:ec:32:62:4a:ff:b4:5a:14:35:04:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:6A:F9:95:75:79:59:DB:94:B8:27:AB:48:F8:CB:FC:1C:12:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/68xq-ZV1eVnblLgnq0j4y_wcEkk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:2a:ba:ef:7d:3e:2a:53:d3:88:6c:8f:ad:30:c0:ff:d6:3f:
62:cb:8e:cd:7a:bf:dc:8c:4f:ef:9d:2f:59:ab:15:10:ef:c0:
cf:da:ab:41:34:22:47:78:da:f4:50:9b:2e:02:53:fa:67:a4:
f5:5c:37:0e:35:4b:03:c6:a2:2d:6d:50:3a:3d:50:6e:dd:4b:
bf:9e:27:d4:f8:83:9c:94:f3:15:96:2a:24:e8:7c:fd:d2:9f:
a7:2b:ff:c9:22:06:60:c3:34:eb:f3:55:23:63:df:d3:13:aa:
9e:d6:84:09:62:53:02:48:ed:7b:8b:05:b3:54:95:31:7b:b9:
a5:ba:33:96:c9:f7:1f:95:b0:98:94:d8:ba:81:2f:28:c6:2a:
e5:f7:cd:d1:22:3f:20:45:54:4e:6a:1b:b3:9c:3e:ab:02:1d:
49:7d:dd:d0:f6:c1:d8:51:9c:32:78:08:49:06:60:43:81:4c:
70:8b:a6:28:54:ca:67:3e:62:9c:29:99:b3:5a:e3:6c:71:d4:
75:2f:9d:81:2b:88:cb:14:f5:83:ef:8d:84:bf:62:49:d5:72:
6b:90:19:4d:ed:5b:69:15:7a:fb:7f:3f:4f:3b:4f:35:93:c3:
1b:5b:16:25:96:45:06:9a:79:6b:0a:6e:eb:4d:37:72:36:87:
d5:5f:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org