Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7FUc9-858ppMoxijbUZ8zuXnfNg.roa
File: 7FUc9-858ppMoxijbUZ8zuXnfNg.roa (raw, json)
Hash identifier: Or/els80JGMJXmPnmCuUQcSrCvyxILCQ5qrJczLctII=
Subject key identifier: EC:55:1C:F7:EF:39:F2:9A:4C:A3:18:A3:6D:46:7C:CE:E5:E7:7C:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7FUc9-858ppMoxijbUZ8zuXnfNg.roa
Signing time: Mon 06 May 2024 02:24:00 +0000
ROA not before: Mon 06 May 2024 02:24:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20643 (0x50a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 02:24:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC551CF7EF39F29A4CA318A36D467CCEE5E77CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:88:cf:b6:91:90:df:91:57:98:ed:44:37:
f5:1e:c5:2a:b5:35:78:47:32:d7:d6:09:8e:98:14:
fe:86:e9:03:eb:2f:5d:4c:63:1c:03:44:7c:f8:9d:
f9:f2:49:3b:7d:53:e7:d6:c8:83:bc:f1:2c:59:a8:
db:c0:69:97:e8:0e:00:1a:b7:0e:fe:8e:8b:cd:10:
f5:00:14:96:00:c6:4c:63:31:a4:db:7c:e5:0d:a2:
f5:76:b2:be:af:06:e8:c0:7c:be:09:5b:26:43:26:
7e:60:79:62:28:16:4b:5b:29:60:7d:5a:01:f4:c6:
09:93:35:0d:bc:d0:04:b4:c4:1c:24:4f:4e:9b:b5:
3e:df:51:74:89:ae:fd:b6:96:64:10:53:1c:89:a7:
a7:e1:cb:28:e7:b8:0e:44:8d:20:ff:0c:46:0f:4d:
78:56:df:07:56:b2:33:4d:77:f4:9a:62:79:af:0f:
24:d8:73:70:e4:1f:5e:38:9d:cb:90:98:d5:99:dd:
9e:2c:bb:66:eb:bc:2c:0e:d3:d5:be:ed:22:1d:0b:
5e:cb:b9:01:5f:eb:37:64:e1:c6:53:10:5c:2f:f0:
68:a5:6a:9a:73:b5:2d:06:45:03:f4:59:00:12:64:
30:98:65:38:b6:85:d3:91:a0:25:d0:ec:09:94:a3:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:1C:F7:EF:39:F2:9A:4C:A3:18:A3:6D:46:7C:CE:E5:E7:7C:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7FUc9-858ppMoxijbUZ8zuXnfNg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:1a:04:54:43:61:69:bf:51:59:bb:12:85:61:d3:90:03:0b:
e4:7f:3e:45:b8:1d:27:7d:22:f3:1a:83:13:e6:b3:6e:ae:b3:
1a:71:3a:af:8b:ca:6a:7c:59:e1:50:a2:e5:7e:8a:bd:70:d1:
9d:e8:e3:af:70:b3:39:37:9f:59:5a:88:25:72:b9:b3:3f:76:
c1:a4:ac:26:a2:22:3d:89:7d:3e:74:29:26:80:33:5f:ab:43:
07:d5:74:67:47:64:f3:fb:44:98:33:5b:de:11:ff:8e:a3:3e:
57:66:d4:9f:44:45:a2:f2:a4:b0:12:6a:50:63:4e:f2:41:dc:
fd:b5:40:7f:fa:d7:e5:7b:b8:aa:0d:ad:48:1f:b5:4a:84:54:
42:b9:c8:bf:4e:1a:3f:10:eb:8f:4b:0d:ae:ef:66:4c:51:fb:
2c:81:27:ff:28:71:e8:3f:15:bf:4d:f0:84:e3:e7:16:87:74:
35:9a:15:96:fb:a6:e8:8a:0e:79:d1:2e:6f:17:3e:7c:cd:09:
a9:cc:94:4e:0a:00:69:21:98:96:8b:be:d5:8e:ae:ae:ac:54:
91:d5:8f:52:06:27:7a:c4:bc:6c:30:15:24:6c:c4:3c:3f:ee:
b1:5e:af:c4:c5:fd:e2:12:53:eb:ef:21:3d:17:b1:f0:e2:81:
ae:47:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org