Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7aOKokIlMO-SLgCSzD5sG4Gnz0k.roa
File: 7aOKokIlMO-SLgCSzD5sG4Gnz0k.roa (raw, json)
Hash identifier: MQWCJdVNzg/xw7+VWXSOG4s1N5O5z87crkVBd+COFcc=
Subject key identifier: ED:A3:8A:A2:42:25:30:EF:92:2E:00:92:CC:3E:6C:1B:81:A7:CF:49
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 413B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7aOKokIlMO-SLgCSzD5sG4Gnz0k.roa
Signing time: Mon 15 Apr 2024 13:22:55 +0000
ROA not before: Mon 15 Apr 2024 13:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16699 (0x413b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 13:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EDA38AA2422530EF922E0092CC3E6C1B81A7CF49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:0c:17:ed:e5:08:45:77:fc:16:91:41:0a:
13:6b:b7:0a:f1:76:e9:23:cb:42:e3:20:a4:55:08:
90:55:5b:db:89:90:f4:11:9f:80:d5:a8:10:d1:85:
7e:6b:af:65:f2:6c:ac:aa:73:b0:b8:10:6c:a0:3f:
6d:11:f2:b2:69:96:cd:ad:61:5f:87:a3:aa:ab:2e:
37:12:e9:8b:80:49:30:82:2e:ae:2d:4d:09:03:62:
15:a2:77:a6:4f:09:fb:72:0e:ff:69:f7:a2:05:db:
db:4c:bb:2c:5b:a3:cd:3d:45:ba:02:6d:35:76:42:
d9:5f:d4:03:e1:2c:c3:0b:5f:ba:50:6e:36:18:27:
a4:13:67:ca:9d:ed:a6:5d:e3:be:9e:c6:93:cd:24:
1a:a7:35:ff:9e:55:18:47:f4:3a:0a:82:f2:70:83:
b4:09:fd:18:e7:05:f7:d0:b4:3b:71:c5:26:46:2f:
5f:3b:df:eb:7a:20:24:fd:15:15:fb:24:d4:b9:4a:
c9:b5:46:3b:8c:80:95:6a:bd:8d:87:d7:97:16:f0:
b3:b2:77:14:41:b4:04:28:02:5c:51:68:64:77:24:
ac:51:da:c5:26:5b:ba:e1:40:14:1e:38:7c:f1:e5:
a0:58:a0:4e:43:23:28:3e:8b:d2:72:ab:7a:53:30:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:8A:A2:42:25:30:EF:92:2E:00:92:CC:3E:6C:1B:81:A7:CF:49
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7aOKokIlMO-SLgCSzD5sG4Gnz0k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:37:fd:dc:40:29:59:2b:6b:4c:5f:75:c8:68:01:24:90:e5:
72:58:0b:e3:c1:87:6d:3f:8c:b2:ac:2d:9b:27:53:11:d5:30:
7f:a1:e0:17:51:55:71:71:a2:b1:83:2c:56:12:42:36:f8:cf:
c8:df:39:32:e3:5d:e1:fa:6f:ea:4f:6c:0e:4e:9e:e0:06:3a:
00:10:29:c1:87:98:bb:92:02:86:95:77:2a:cb:b4:db:ca:96:
9c:34:8d:67:67:a3:0b:d0:55:31:31:ea:3a:f2:94:62:59:50:
7d:98:f8:3d:9e:29:31:8f:1f:e8:a4:1f:ad:0f:19:b6:ec:d7:
b1:87:dd:5f:d6:36:f6:ae:a5:87:94:e3:56:29:bb:35:a2:87:
9b:1d:a1:51:fb:08:23:b6:57:fc:67:3e:99:46:d1:a6:25:11:
dc:cb:36:77:58:9e:ec:e2:68:32:c8:16:cf:0f:d0:2d:36:ff:
9e:60:56:cc:44:8e:60:02:d5:60:1e:1b:31:c8:7c:83:c9:c4:
75:89:49:76:7a:99:e7:57:ba:52:9c:ba:39:eb:df:9e:02:8e:
d0:5f:61:1b:65:47:4e:05:5a:af:dd:80:ca:56:a9:14:31:db:
a2:73:31:17:af:b5:ef:03:48:e9:83:60:d6:cc:5b:c8:8d:80:
11:7b:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org