Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6QXV-m-6Bf9VlLHFATEUSttEpGQ.roa
File: 6QXV-m-6Bf9VlLHFATEUSttEpGQ.roa (raw, json)
Hash identifier: BfnfCAQfuUfH8DKzL3ZX0c7196ygKHncDrNzahARrdE=
Subject key identifier: E9:05:D5:FA:6F:BA:05:FF:55:94:B1:C5:01:31:14:4A:DB:44:A4:64
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37F3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6QXV-m-6Bf9VlLHFATEUSttEpGQ.roa
Signing time: Wed 03 Apr 2024 04:22:18 +0000
ROA not before: Wed 03 Apr 2024 04:22:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14323 (0x37f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 04:22:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E905D5FA6FBA05FF5594B1C50131144ADB44A464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:53:e3:42:f8:d8:18:de:bd:9b:f8:21:e3:
ad:bb:b3:7e:9a:28:6b:7b:66:f7:88:e3:c3:a5:da:
99:b5:d9:88:02:c6:8c:9e:44:ad:14:20:1a:e5:e6:
02:1d:23:af:72:84:81:81:57:ae:45:dc:2f:67:03:
23:51:4d:56:15:f0:4b:97:c0:56:70:ed:92:13:dd:
45:95:04:cf:de:a2:49:43:cd:8e:44:63:90:41:87:
7a:cc:3f:5e:83:06:b5:f9:2a:6e:b4:d9:17:75:aa:
c7:47:e4:9f:f5:e6:3a:90:65:b1:e4:bb:7b:2c:90:
f4:72:c9:f8:8b:99:0c:28:0e:e8:61:7b:ad:6d:11:
52:9e:e0:e1:81:56:e7:80:63:d1:61:85:c7:c2:5b:
1a:56:5a:71:71:7f:c1:20:bc:fb:2e:d8:5f:99:b1:
60:df:2e:f2:a0:cf:8c:c2:44:0a:94:91:8c:3c:89:
cb:94:ac:74:c1:fc:22:b3:a0:61:55:64:e2:09:28:
ad:17:4b:65:3f:59:a3:6f:95:fa:2a:9e:e2:01:5c:
e9:d9:5a:b2:3f:1e:94:b1:19:49:56:29:c2:15:f6:
f3:01:8d:65:81:15:d4:60:f6:2c:87:05:e9:83:76:
29:90:38:a7:86:15:0a:b0:79:98:6c:c2:a4:4e:01:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:D5:FA:6F:BA:05:FF:55:94:B1:C5:01:31:14:4A:DB:44:A4:64
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6QXV-m-6Bf9VlLHFATEUSttEpGQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
05:a2:68:66:3d:d1:2a:41:08:9d:74:f3:59:08:bd:e5:f7:41:
2b:14:36:1f:d2:f6:ca:dd:66:79:1c:7c:f2:04:cf:4e:73:7e:
05:b6:46:8a:1b:3e:de:2d:fc:f4:8b:24:56:71:2e:1a:7c:17:
df:2d:94:e5:1b:ba:09:62:01:7b:92:90:37:4e:05:c9:e9:7e:
c4:3e:54:04:40:a8:9e:85:a8:c5:bf:7b:a8:96:cc:93:3e:e0:
44:f1:57:c8:04:ef:24:8d:ec:b5:1b:5e:95:11:b3:28:2b:4a:
13:e1:5f:52:7e:f0:4c:f2:a4:25:7b:f8:8b:fc:a7:35:4d:35:
70:01:99:6a:52:8b:44:2f:49:d2:e4:98:01:5f:94:45:a5:4e:
82:c0:94:87:09:36:4f:0d:de:bd:13:71:91:64:73:60:7a:ca:
a6:99:1a:ab:77:e4:1e:7f:42:62:2b:f0:b9:ba:fe:a7:fc:56:
8c:88:c9:11:42:da:e1:9c:f4:a1:71:bd:16:90:78:b3:0e:e0:
a8:46:0b:fa:1e:ab:2a:6c:1d:21:f1:03:c7:02:97:68:26:de:
44:39:41:eb:20:20:fe:4a:4f:9a:d7:18:0a:1c:66:4d:47:ca:
91:e0:f8:7f:57:d1:ee:b6:14:9d:19:eb:ab:ba:25:0e:49:d0:
57:31:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org