Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/94dVAkDtmxB9vLpauKSQ47yO3DQ.roa
File: 94dVAkDtmxB9vLpauKSQ47yO3DQ.roa (raw, json)
Hash identifier: /a3tsIDqM9fmPt3DvGr21snvMVuIZQwhX2ZTpkFYWJg=
Subject key identifier: F7:87:55:02:40:ED:9B:10:7D:BC:BA:5A:B8:A4:90:E3:BC:8E:DC:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5383
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/94dVAkDtmxB9vLpauKSQ47yO3DQ.roa
Signing time: Thu 09 May 2024 22:24:00 +0000
ROA not before: Thu 09 May 2024 22:24:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21379 (0x5383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 22:24:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F787550240ED9B107DBCBA5AB8A490E3BC8EDC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:63:cd:b7:8f:51:95:15:3a:81:e9:30:90:
5a:df:26:f7:a9:ad:ae:2e:04:8d:65:fc:52:b3:65:
9d:c5:b2:3b:68:9b:46:ee:ae:9f:71:f4:66:db:b0:
b9:17:ab:ce:ec:80:5a:f4:a3:c8:20:8c:c5:32:fa:
da:01:9e:65:cf:3b:7b:90:5a:1e:ee:27:4f:5c:05:
d9:eb:c1:76:f5:59:b1:d2:08:c4:90:fd:0a:dd:df:
05:d2:16:e1:93:20:85:e8:ce:f3:00:a2:a7:5e:73:
7d:d5:76:cd:e6:2a:85:a3:ef:d5:a1:a4:36:79:ee:
7c:43:fe:df:de:67:61:ab:37:82:e7:2c:81:61:0c:
63:80:47:3d:45:23:77:ca:4f:3a:09:98:17:9c:51:
5d:7d:a6:73:f1:e5:77:ba:32:69:0f:64:be:3c:d7:
ab:19:6a:01:49:72:59:30:cf:62:74:21:52:08:51:
ab:8b:7c:dd:fc:2a:0d:51:9b:67:97:56:36:7e:41:
3e:dc:4e:43:be:53:93:03:dc:75:00:5b:b3:74:1d:
a6:df:97:24:94:6d:60:b3:a8:51:49:97:d8:e7:b8:
3e:c0:8d:6e:2b:ff:13:14:57:d2:d5:6c:31:c5:ea:
fe:01:73:7c:d3:60:22:fc:17:47:a5:2d:dc:fe:13:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:55:02:40:ED:9B:10:7D:BC:BA:5A:B8:A4:90:E3:BC:8E:DC:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/94dVAkDtmxB9vLpauKSQ47yO3DQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:e3:73:0e:b8:45:88:7c:f1:f2:29:fd:53:42:42:e6:cc:5d:
51:74:cd:6a:0e:fe:f6:23:0c:ab:e9:c5:1d:5d:09:94:92:43:
d1:ec:3b:0c:c1:51:a3:c8:b6:19:ed:58:17:0f:fa:29:3a:f0:
f2:14:b2:a4:45:00:91:9d:ec:7c:1e:57:3a:dd:c7:e2:c9:52:
5b:9f:44:e6:fd:da:af:b9:08:33:1d:33:05:2e:23:08:59:8b:
35:59:53:62:bc:4a:6d:2a:d4:3a:ba:25:7d:a9:e2:bd:52:f8:
cb:63:c8:dc:80:ca:cf:84:1c:35:a7:15:43:85:5e:b2:64:4f:
a0:89:f9:0a:87:74:7f:e9:4d:bb:15:d2:0e:5c:f4:4b:0c:ba:
04:83:64:8d:b1:6a:63:f5:fb:f8:42:1f:1f:c1:ec:a9:7e:08:
72:15:c5:98:cf:c6:02:66:44:89:e3:2a:dc:f7:6c:8c:c2:5f:
ec:a2:09:74:e8:50:58:49:8d:a6:34:07:53:7b:60:5d:13:13:
ba:87:e9:4b:08:18:ab:01:62:77:9e:87:be:ad:72:50:cd:eb:
58:f0:b4:17:80:0b:b8:b1:64:c7:43:59:6b:5e:db:64:e1:be:
dc:87:ec:7d:79:df:aa:bd:11:87:08:fb:1f:40:5a:4b:16:4b:
25:1f:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-ams.rpki-client.org