Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9fQBD9wCMqUwAEYzzCHFo0E45Wc.roa
File: 9fQBD9wCMqUwAEYzzCHFo0E45Wc.roa (raw, json)
Hash identifier: Agkp3BAb0W0EDCz0nlaOEiQ89uVK1FHdAV+UEamX6uU=
Subject key identifier: F5:F4:01:0F:DC:02:32:A5:30:00:46:33:CC:21:C5:A3:41:38:E5:67
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EFB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9fQBD9wCMqUwAEYzzCHFo0E45Wc.roa
Signing time: Fri 03 May 2024 21:23:50 +0000
ROA not before: Fri 03 May 2024 21:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20219 (0x4efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 21:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5F4010FDC0232A530004633CC21C5A34138E567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:9b:bb:0c:05:45:f1:96:71:8b:48:fc:33:
8e:88:3d:b5:d4:9c:ea:95:3f:17:04:b7:cd:e0:91:
f7:96:4a:ca:3d:44:8a:3a:ae:cd:65:c7:7b:e1:f1:
cf:b8:62:1d:05:a7:b9:35:66:b4:c4:de:ab:f7:2c:
35:e0:b4:4d:25:65:b1:ca:46:ae:c4:70:8b:a3:c9:
ad:ff:35:b9:6e:cd:22:ec:b1:31:f8:41:9b:d9:20:
ca:fc:50:b8:02:af:9e:f9:ae:e5:24:7d:f8:26:33:
4c:bf:3f:f4:c8:9f:8f:b5:f0:ca:70:2b:3e:c1:20:
84:f1:53:8b:b9:85:50:fd:6b:9b:4d:a8:5f:ed:51:
53:1a:c2:25:83:3d:c7:93:87:99:7c:ec:3b:d0:63:
e2:36:4c:9e:d2:03:19:30:b0:cf:36:1f:69:28:1e:
8f:30:ef:a0:84:c5:04:28:d6:8c:d8:b4:01:71:7e:
d8:03:eb:02:6c:ac:1b:26:f6:78:4a:18:ff:c6:64:
3d:7f:cc:9d:b5:05:a3:ed:29:42:5d:63:8f:ab:02:
df:be:97:d6:a7:e0:2c:0a:c9:a4:19:84:42:c8:64:
74:1a:a1:13:06:b5:8a:49:8e:2d:ff:b1:4c:43:d7:
75:64:5e:ce:df:4c:d1:a3:3f:54:9a:b1:1e:d6:f4:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:01:0F:DC:02:32:A5:30:00:46:33:CC:21:C5:A3:41:38:E5:67
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9fQBD9wCMqUwAEYzzCHFo0E45Wc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:a1:f1:bc:13:ad:c9:1d:24:1f:1b:d9:e4:b6:2c:a2:5f:a4:
a5:69:e0:93:c1:ee:24:8a:93:9d:d6:e7:96:2b:d3:58:25:a9:
0d:fc:f2:5c:a4:8d:44:82:0f:9b:ad:41:ca:9c:7a:68:c4:51:
45:0d:f9:36:05:bb:a1:7d:4c:66:6b:46:bc:c4:60:50:dd:a9:
fc:51:d2:c3:0a:c7:44:c5:e8:9d:47:41:ef:1c:d2:25:30:0a:
6b:02:24:68:d6:d6:37:d2:b9:26:df:d9:e8:c5:df:9a:ab:12:
a9:a7:54:56:29:12:ea:92:4d:b4:ae:1b:83:83:c1:04:46:e7:
f6:bd:d3:cf:03:7d:85:b6:44:fe:84:da:00:b3:ab:ed:4b:6b:
2c:4a:47:cb:aa:73:cc:09:80:7f:dd:ce:b6:40:40:d3:13:2c:
b8:11:d6:d1:cb:e7:48:9f:49:9b:cb:4a:63:a4:5f:c6:55:59:
6e:a4:43:ce:81:25:40:ae:24:cb:30:7a:81:42:22:f5:e1:40:
12:15:a7:56:d8:46:b6:b3:23:a0:89:b2:e4:5d:c7:bc:12:46:
6b:0b:86:2f:22:78:5c:71:b8:a4:7b:ba:9d:da:6b:ff:86:93:
9e:1d:50:4a:8a:fe:39:52:43:19:85:62:c0:4c:ea:61:cf:9c:
d9:19:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:10 2024 by rpki-client on console-fra.rpki-client.org