Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8jeNy-8UMOFWaWH_g7RVntsBuqg.roa
File: 8jeNy-8UMOFWaWH_g7RVntsBuqg.roa (raw, json)
Hash identifier: yynOYA81WeCXWdN/d4ihA28PwKj0HubU4TADZeslLX4=
Subject key identifier: F2:37:8D:CB:EF:14:30:E1:56:69:61:FF:83:B4:55:9E:DB:01:BA:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C0F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8jeNy-8UMOFWaWH_g7RVntsBuqg.roa
Signing time: Mon 29 Apr 2024 23:53:31 +0000
ROA not before: Mon 29 Apr 2024 23:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19471 (0x4c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 23:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2378DCBEF1430E1566961FF83B4559EDB01BAA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:93:84:2f:34:19:3e:7f:e7:70:7b:1c:0b:
08:e0:42:23:54:03:a6:25:b2:3d:d3:06:58:49:53:
bf:14:8b:55:ad:c8:e6:0a:3f:4b:b8:42:cb:a5:f9:
30:b2:2e:04:27:bc:8b:35:ee:ac:6f:05:b0:bc:be:
cb:30:85:d9:13:87:15:b9:31:06:1e:50:ab:7c:7a:
3b:6f:2b:29:18:c3:43:37:9c:2a:0a:a0:3b:f4:03:
a5:94:f7:77:99:2a:3c:67:26:1d:32:27:18:3a:58:
f6:2a:82:6d:df:68:fb:8f:e4:0a:28:12:f5:93:06:
62:6d:2f:c4:dc:16:a6:d6:68:03:98:b4:b5:7d:fe:
29:3d:6a:b9:d7:11:0b:8b:25:59:ec:e5:b2:af:8f:
40:0d:a6:6a:c5:49:92:ca:30:46:50:40:43:19:fa:
86:ef:33:5f:a0:ef:44:26:79:f9:0c:ff:c9:70:03:
7c:00:1a:cf:68:f2:b3:58:f5:b7:a3:77:2d:bf:27:
20:2b:d2:8a:0d:60:99:93:9f:61:f4:19:04:03:0d:
9c:8f:b9:d1:71:ce:d3:7e:29:6b:24:6b:7d:21:f6:
26:03:fc:55:37:1e:a3:68:4d:2d:a3:7d:2e:7c:5a:
e2:c5:81:af:45:19:1d:04:dd:ef:c4:94:c2:79:54:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:37:8D:CB:EF:14:30:E1:56:69:61:FF:83:B4:55:9E:DB:01:BA:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8jeNy-8UMOFWaWH_g7RVntsBuqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:e3:2b:57:44:26:75:17:5f:a7:52:77:95:58:59:7d:f4:10:
cd:32:83:1d:8f:e7:67:d1:60:d7:07:42:fd:9c:c3:af:00:2f:
13:d6:01:9c:17:d1:4f:80:72:be:e4:8a:6f:ad:5f:fc:c7:b2:
63:89:d4:d2:ab:b8:06:0e:ed:8e:2b:09:30:23:e2:cd:e2:ba:
f3:50:de:28:29:ae:03:21:17:94:88:e4:c7:a1:2a:c7:98:6e:
d3:d1:ed:aa:fb:52:95:53:ab:ab:07:fb:9c:bd:6a:54:2a:0e:
5e:e4:cc:d3:eb:fa:5b:76:d7:d3:48:4c:c1:39:06:3b:83:76:
83:d5:a4:cc:c8:e3:64:a5:91:ea:6f:10:99:ce:db:1e:43:e2:
89:35:c6:f1:52:99:4a:87:30:0f:ff:7b:e9:14:c9:90:f2:b7:
d2:ab:c0:12:ae:7b:26:85:f8:56:8e:78:43:a6:59:36:3a:df:
b3:f0:6e:66:db:b4:dc:95:09:26:8c:b1:06:40:fa:d8:06:0b:
d7:22:49:3c:3d:72:fc:68:5b:49:63:33:eb:27:de:f9:67:15:
c3:f7:2e:ac:24:f6:08:07:6d:d5:bc:3d:bf:23:04:d6:35:c9:
ab:18:16:12:ba:0e:df:8f:21:90:08:b3:b1:44:e1:28:c4:cb:
a4:5d:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org