Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6RLNpxa3OWywYmCorEOx8ho19-c.roa
File: 6RLNpxa3OWywYmCorEOx8ho19-c.roa (raw, json)
Hash identifier: UkRLsrEIG4pi0MyovuMeHOFExFjy4JGgRwsBaUcc92c=
Subject key identifier: E9:12:CD:A7:16:B7:39:6C:B0:62:60:A8:AC:43:B1:F2:1A:35:F7:E7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 342B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6RLNpxa3OWywYmCorEOx8ho19-c.roa
Signing time: Fri 29 Mar 2024 03:22:03 +0000
ROA not before: Fri 29 Mar 2024 03:22:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13355 (0x342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 03:22:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E912CDA716B7396CB06260A8AC43B1F21A35F7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:4c:dd:e7:bb:2a:d6:f1:fd:09:94:6c:2b:
90:67:ff:56:77:b4:f1:4a:9f:f3:e5:f4:3e:f1:b5:
7c:4e:93:b7:9b:6b:f6:61:c4:4e:19:8e:8c:f5:b9:
93:34:23:b3:b8:26:64:ea:08:97:29:8e:1c:b1:76:
71:a3:69:6a:ee:40:eb:ff:67:8b:89:90:93:d9:c4:
3a:67:ba:cd:70:43:9b:ac:2e:da:8d:42:7b:f2:0d:
03:17:67:05:fa:9c:42:52:e4:a7:58:b2:b5:7b:1b:
ee:58:56:36:1d:ea:60:aa:3a:a0:f7:f9:50:d8:1c:
fc:4a:0d:53:69:2e:59:f0:68:22:34:e9:33:35:15:
26:c0:81:83:4b:d5:66:51:f6:9e:5e:e0:04:68:bc:
b8:e1:59:f2:87:c6:96:da:d6:75:cb:ea:a7:8c:82:
9b:00:ba:db:6b:26:09:27:36:76:46:a4:9a:f9:3b:
99:30:ab:48:28:3a:5a:7c:36:b1:ac:e0:dc:a9:91:
e2:e6:95:26:4a:a2:70:d2:72:c2:d3:d2:dc:1a:2d:
22:27:df:ba:74:09:be:73:33:26:d8:01:c1:60:78:
c8:8f:c6:81:37:38:73:ba:ad:9d:c9:4b:78:81:a6:
1e:59:a2:41:56:1c:4a:2e:ad:42:74:f5:3b:e8:26:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:CD:A7:16:B7:39:6C:B0:62:60:A8:AC:43:B1:F2:1A:35:F7:E7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6RLNpxa3OWywYmCorEOx8ho19-c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:d0:76:16:c1:eb:fc:af:b3:91:5b:6e:3f:92:98:64:68:b5:
d8:a2:90:81:78:bf:fb:9b:02:c5:3a:eb:92:25:85:e1:7c:a6:
12:6b:23:86:81:85:1d:e2:76:b6:92:05:f7:2b:30:9e:18:48:
75:37:ae:b3:4e:8b:dd:d5:50:85:ef:4d:e8:0f:e7:d9:f9:d4:
11:8e:26:c7:85:6a:d9:02:b3:c7:9c:0c:bf:7b:d1:c3:7b:de:
a0:b7:ea:29:40:98:b8:37:af:e8:ff:7a:db:dd:9b:e0:c0:e5:
0a:f5:36:d1:33:47:4d:be:93:b5:2a:56:68:7a:3d:06:76:26:
6b:4d:fc:94:a0:0a:ba:c9:15:88:cf:4c:41:9c:95:16:94:c4:
54:31:17:00:eb:66:ce:f0:6f:aa:dd:9c:05:4b:f2:3f:f5:25:
95:f3:06:23:81:c0:28:58:a3:22:86:36:3a:12:87:ba:8f:85:
98:56:4a:a4:cd:61:90:fe:91:a0:f7:a0:7c:16:b6:27:7b:25:
2f:c1:e7:de:9e:20:24:ba:78:06:96:2e:c0:b1:91:62:ea:3c:
75:eb:83:a9:e7:e3:d3:fe:5c:1c:d5:36:a0:1b:94:ae:5d:90:
1b:e1:12:cb:b5:08:4b:02:56:8c:8b:ab:9f:3c:18:2b:6d:65:
a2:90:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org