Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7rZHBtCy69gKrgiPQLbB5QVitcg.roa
File: 7rZHBtCy69gKrgiPQLbB5QVitcg.roa (raw, json)
Hash identifier: sbNrEX+ceHHsw/O1LvqpMF+OHQo2ShBboE2Z6idqask=
Subject key identifier: EE:B6:47:06:D0:B2:EB:D8:0A:AE:08:8F:40:B6:C1:E5:05:62:B5:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D53
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7rZHBtCy69gKrgiPQLbB5QVitcg.roa
Signing time: Wed 10 Apr 2024 08:22:41 +0000
ROA not before: Wed 10 Apr 2024 08:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15699 (0x3d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 08:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EEB64706D0B2EBD80AAE088F40B6C1E50562B5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:79:b5:02:57:ac:94:2e:eb:08:0e:2f:ef:
94:ac:f5:26:ad:7a:42:c0:7a:c7:43:b6:d0:67:c4:
e5:f5:74:55:8a:bb:9e:8c:28:16:59:e1:37:59:71:
07:3e:af:f7:94:61:a4:94:47:49:97:a0:02:1c:b6:
73:a4:45:be:94:66:4b:e7:24:9f:4d:01:14:e8:31:
23:61:06:92:09:19:cf:df:7a:2e:0c:10:95:b6:35:
8d:45:ca:03:87:87:2e:38:55:91:48:65:58:8e:8f:
73:1e:04:d7:49:cb:8a:ce:55:d1:23:18:0c:2e:cb:
d2:9c:a6:ae:de:5d:e6:0d:02:7c:ab:8c:6e:01:77:
c9:c5:e9:1f:59:41:a8:9b:cf:48:e1:40:97:2e:66:
6e:73:3c:5b:a8:73:ca:ff:f6:28:1e:9b:65:28:5c:
6e:05:ea:7c:3a:28:b7:5e:0e:25:b6:ba:dd:1c:27:
8e:09:c5:7f:52:c6:b2:06:e7:cd:9a:6a:d3:9b:f5:
5a:40:66:a0:06:4a:52:89:ce:cd:36:7c:48:c0:6d:
93:62:88:12:f3:42:c3:6d:c7:32:da:d6:b9:d4:e5:
9d:fe:6f:27:2c:9a:81:fd:59:2b:b1:00:16:2e:e1:
eb:21:eb:01:fe:2d:bf:8f:9b:68:ce:87:55:e3:8f:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:47:06:D0:B2:EB:D8:0A:AE:08:8F:40:B6:C1:E5:05:62:B5:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7rZHBtCy69gKrgiPQLbB5QVitcg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:7c:87:69:31:5c:58:aa:29:3c:63:84:3d:15:f6:e8:68:c7:
9f:4a:40:d0:c2:cf:9d:c5:72:5d:83:42:ef:fd:8d:12:d8:bc:
57:5f:97:0a:f0:83:5d:81:a3:67:b7:49:c9:b1:10:26:e4:16:
e5:b5:10:23:6a:d4:7c:15:14:d1:cd:cf:a5:89:70:39:52:3f:
cb:75:cd:55:81:db:77:7b:28:00:c7:fa:41:24:fc:72:64:3d:
3d:24:6c:9a:9b:a1:08:96:3c:eb:97:92:50:47:ad:3b:f9:fb:
11:be:2d:49:d1:f9:90:6c:29:27:e2:dc:c6:71:fe:50:b4:63:
a8:38:40:24:f7:d7:f5:15:7b:77:de:12:3a:4f:d3:4d:28:d0:
f2:9b:5f:b4:9c:38:9b:54:48:1c:c2:0c:a7:7d:c1:37:7e:32:
4b:54:fb:6b:40:4d:ed:dc:f3:9a:b8:41:28:7b:04:e1:b0:05:
b5:cb:57:b0:66:83:af:d2:40:02:18:5c:99:13:22:d6:05:f8:
ca:44:61:9d:74:50:e1:af:59:fd:5d:dc:a9:da:53:e4:e7:55:
37:ab:5c:fb:62:76:ed:7a:37:d5:e0:16:be:ce:67:4b:92:bb:
44:2c:2d:13:c8:78:1a:21:a0:62:10:eb:a4:4d:ec:c9:8e:49:
c6:75:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:18 2024 by rpki-client on console-ams.rpki-client.org