Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/70P6ibnJ8-bgtrmvGdLTwLNGJbs.roa
File: 70P6ibnJ8-bgtrmvGdLTwLNGJbs.roa (raw, json)
Hash identifier: 7owgLUPFjrSQmPymmJ6aC8AMgrdyfMWpvus1VbOo6no=
Subject key identifier: EF:43:FA:89:B9:C9:F3:E6:E0:B6:B9:AF:19:D2:D3:C0:B3:46:25:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5117
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/70P6ibnJ8-bgtrmvGdLTwLNGJbs.roa
Signing time: Mon 06 May 2024 16:53:51 +0000
ROA not before: Mon 06 May 2024 16:53:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20759 (0x5117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 16:53:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF43FA89B9C9F3E6E0B6B9AF19D2D3C0B34625BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:64:e7:f4:87:c8:63:c9:e3:c2:e8:50:72:
bd:11:ef:17:ce:d6:e8:f0:51:6d:d6:49:8c:8c:bb:
83:3d:c2:7f:7e:21:f1:9f:ff:ae:76:f0:a9:c8:b7:
94:eb:1a:a1:f9:18:62:3b:55:d1:d0:f9:db:7b:ec:
7c:fb:f2:44:ce:d0:e9:aa:5a:38:f0:2e:7b:fe:90:
b4:69:e9:32:66:1b:00:25:b4:b8:96:7f:59:af:3e:
8a:36:d2:af:71:e3:d9:a2:3c:04:a1:c2:10:89:8f:
be:d5:12:a8:93:03:fd:0f:09:da:ac:be:e6:5d:ff:
5c:58:a2:34:70:0d:89:cb:7b:27:4f:aa:13:9c:ee:
3c:ab:d7:c1:05:1c:a3:50:19:6b:a1:9b:68:61:c3:
07:15:7e:ee:98:48:1a:6d:c7:4a:ae:1e:64:01:0c:
5b:d5:b2:99:72:0f:45:2a:35:9d:f3:f4:5f:a6:31:
af:11:12:16:2e:ec:48:f7:1e:53:a1:c8:8c:f8:1b:
cd:ad:11:87:18:5e:3d:ab:b6:69:8f:8b:93:57:c9:
c1:8f:f4:65:5e:ce:0f:8c:18:fa:05:35:71:2e:a7:
8a:7d:f6:88:d3:40:3c:78:53:23:ca:68:35:bf:11:
bc:f1:b0:16:94:3b:31:3f:1e:34:ba:83:48:1b:b2:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:FA:89:B9:C9:F3:E6:E0:B6:B9:AF:19:D2:D3:C0:B3:46:25:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/70P6ibnJ8-bgtrmvGdLTwLNGJbs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
39:1d:ab:09:a6:15:2d:79:4f:68:87:da:6c:e3:2e:2d:84:38:
57:45:09:e4:f5:d0:97:5f:5e:bc:4e:87:8a:aa:ed:7d:a8:a5:
2e:4b:70:3c:cc:a4:47:22:80:ca:b1:f2:d8:cb:a5:fe:7c:52:
83:a1:32:fc:23:5e:45:19:c5:07:a7:02:b8:e0:08:a3:a1:fb:
3d:b7:ca:64:ce:71:bb:95:56:fd:d9:92:b4:2c:ac:39:dc:1f:
ee:86:bf:39:75:05:4c:20:6d:b4:c1:fa:87:36:21:6e:ca:37:
a3:bc:f9:01:7b:e9:ab:5e:a1:f4:e3:8d:3f:fc:f5:92:21:8f:
33:bc:a8:51:90:6b:ec:33:83:b1:99:70:3f:aa:bf:a9:8f:ab:
43:7b:0b:5f:c8:2e:6b:c4:dc:8f:01:c0:ec:fb:22:a6:35:6e:
81:30:8e:94:90:46:a9:77:19:b4:69:17:7e:2d:f8:79:f6:b6:
90:ed:65:54:36:45:4a:51:72:84:23:fd:a5:46:f6:23:ae:b9:
e5:e2:e4:04:96:7f:ac:79:85:48:49:91:4e:4d:74:fb:0c:28:
8c:56:99:3a:16:9c:cd:56:dc:0f:ec:06:44:2e:59:4a:21:1e:
df:43:48:a6:17:d7:df:7b:d8:2e:60:6a:e9:97:ca:d3:48:15:
21:d5:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org