Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6Jz9gDDxOSatLm7iZ9pJWB0hQUU.roa
File: 6Jz9gDDxOSatLm7iZ9pJWB0hQUU.roa (raw, json)
Hash identifier: d/ju5acDm7Y6tuLzI4OghaIGt+s5/IGMCXCfdP4PHMA=
Subject key identifier: E8:9C:FD:80:30:F1:39:26:AD:2E:6E:E2:67:DA:49:58:1D:21:41:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4777
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Jz9gDDxOSatLm7iZ9pJWB0hQUU.roa
Signing time: Tue 23 Apr 2024 20:53:31 +0000
ROA not before: Tue 23 Apr 2024 20:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18295 (0x4777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 20:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E89CFD8030F13926AD2E6EE267DA49581D214145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:0e:ab:b7:48:65:00:bc:9d:ca:9f:99:b0:
97:64:b0:65:4e:7a:92:53:b9:f1:79:13:86:82:5a:
9a:35:26:e7:f8:1a:3a:02:9a:02:7d:b8:37:02:b8:
6d:a4:55:e6:58:59:e1:18:8d:e7:fb:73:26:26:dc:
a5:ff:48:6d:19:60:e5:6c:1e:88:de:0a:79:5a:11:
ad:8a:c8:88:17:d2:b7:7f:7b:ee:7d:53:bb:64:5a:
6f:41:ee:04:a3:bf:d4:50:a8:7f:25:8a:a9:c6:c4:
32:9d:46:a7:e8:47:8d:bb:64:46:00:11:ca:8a:88:
ff:94:eb:e2:07:3b:4c:11:a2:c3:08:d2:a8:65:80:
9e:c6:fa:06:db:f8:83:a8:31:af:20:93:3f:a8:1f:
c0:56:91:06:8a:1c:13:58:30:82:80:e1:31:b2:6b:
2f:db:be:00:9e:07:ba:13:58:6e:4c:1e:0d:b8:76:
62:a4:a0:17:2c:f1:4e:cd:05:dc:02:1b:44:e4:d0:
29:24:06:3c:54:5b:54:16:ed:0e:40:ce:c6:64:ae:
7d:0d:38:63:f8:0c:54:f3:6a:52:d8:6f:83:1f:5e:
d3:27:c3:43:83:41:4d:c6:c3:1d:d2:40:c3:8e:63:
e0:4d:e7:45:49:8f:cf:f4:0a:47:d4:60:f5:7c:36:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:FD:80:30:F1:39:26:AD:2E:6E:E2:67:DA:49:58:1D:21:41:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Jz9gDDxOSatLm7iZ9pJWB0hQUU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:65:1c:aa:bd:e1:87:49:f9:7c:bf:2f:11:b2:ce:7f:51:9d:
c9:e5:6e:0b:57:02:7d:b8:4e:ab:22:39:d0:5f:3c:96:f5:3e:
05:e5:48:18:8f:b0:61:8b:1f:73:57:88:59:fb:7c:ce:cb:5c:
eb:a1:c7:3e:de:ff:df:f1:8b:dc:3e:ee:5d:7e:a8:7f:fc:c8:
6e:7d:af:59:cb:c5:9b:56:cc:de:d9:70:e1:92:46:6e:ce:fd:
71:a1:63:8d:12:77:f7:ec:09:90:7e:7b:ba:fb:27:12:c0:2c:
84:06:56:b0:16:d3:be:bf:09:5d:b5:56:40:ce:e5:04:a5:0a:
86:3b:02:13:03:53:25:0f:5f:10:12:bf:5d:06:4b:17:2b:7f:
8e:b0:7a:b8:3f:f6:1f:27:9a:30:18:b8:3a:ed:27:84:76:e2:
42:72:a0:21:9b:bd:94:70:95:21:e6:69:3b:c9:8b:3e:3f:8c:
53:12:1d:d8:5d:bb:bf:5e:d9:11:c5:6e:e7:4a:48:f6:49:e3:
e9:14:1d:54:5c:8e:c8:92:96:fa:de:91:f0:f1:02:bf:77:ca:
2d:1a:70:7b:fe:82:f8:b9:7a:1b:7d:9a:63:d7:75:3f:08:ff:
83:58:ed:49:bf:bb:9c:b4:72:86:59:10:4d:9d:f3:1e:ed:a0:
b9:a1:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org