Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AEe3SVfZX7JFZL_u2ui9Yk-MWyk.roa
File: AEe3SVfZX7JFZL_u2ui9Yk-MWyk.roa (raw, json)
Hash identifier: fcZBFkcW3NcBlXdubiZ/iP7S7kX/qKVqzbgCSDlC8VE=
Subject key identifier: 00:47:B7:49:57:D9:5F:B2:45:64:BF:EE:DA:E8:BD:62:4F:8C:5B:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AEe3SVfZX7JFZL_u2ui9Yk-MWyk.roa
Signing time: Tue 02 Apr 2024 23:52:17 +0000
ROA not before: Tue 02 Apr 2024 23:52:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14287 (0x37cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 23:52:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0047B74957D95FB24564BFEEDAE8BD624F8C5B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:71:cf:66:7e:3f:30:e9:e6:2c:d0:64:cd:
18:05:2a:10:60:e2:a1:a0:30:ca:33:c7:70:ee:79:
88:d6:f3:8f:ba:65:24:bf:d4:08:a4:6e:66:50:dc:
d6:c8:5d:39:27:2e:7b:98:cd:fe:b4:d7:57:12:b3:
c7:6c:53:56:e8:ba:4f:8b:81:d9:9e:f9:21:39:11:
cb:44:7b:16:be:0d:b1:18:1c:95:62:a5:d6:6c:b7:
1e:75:7d:33:58:f8:e5:28:d9:f8:06:f1:16:fe:34:
66:3e:03:aa:49:41:69:9e:3d:00:7f:2c:4d:c8:c6:
cd:64:54:54:aa:26:b4:bd:f8:2a:52:66:17:14:0d:
49:c1:b0:89:81:83:63:00:74:80:cf:56:70:e3:5e:
84:92:9e:b5:03:44:b8:3d:ab:ac:e3:ba:9c:be:2e:
f1:48:1a:7f:8b:4b:f7:32:db:45:89:8b:0b:13:bb:
a7:fc:1b:16:6b:cf:f2:5a:7a:a1:4b:c7:5d:54:9e:
09:37:82:e2:a2:6c:cf:f8:57:6c:b4:14:a0:4c:d9:
99:03:72:67:67:84:5c:5f:fe:fc:00:bf:9d:3c:a2:
3f:c0:dc:79:c5:20:2f:b9:22:0b:f0:fa:b3:aa:ed:
9b:88:05:0b:4c:d6:64:34:d2:2d:b7:82:0d:b5:0d:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:B7:49:57:D9:5F:B2:45:64:BF:EE:DA:E8:BD:62:4F:8C:5B:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AEe3SVfZX7JFZL_u2ui9Yk-MWyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:e7:42:de:63:8d:fd:cf:3d:dd:cb:59:fb:f8:3c:7a:8c:7a:
53:95:d9:7b:53:64:a1:26:16:28:a3:73:bd:8f:8d:25:eb:e5:
06:3f:2d:20:fb:7a:c6:f1:74:38:12:49:dc:cb:29:22:61:e6:
e3:39:69:37:a8:a6:a2:ca:c9:44:46:6e:80:c7:ff:e5:b8:ca:
4e:45:b7:58:8b:87:8b:c8:a8:ff:63:10:01:bb:ee:e1:43:8b:
3d:62:a3:8b:93:53:c1:f8:b8:7d:f3:fb:cf:2d:b2:0a:1c:fc:
46:df:ae:99:04:f1:30:2a:79:ab:91:ba:e4:28:30:7c:08:e6:
8b:b1:42:f2:d4:9c:07:8b:dd:54:87:50:39:f3:00:20:15:7b:
1f:72:31:7c:2d:5a:5b:ed:cd:70:ac:b7:6d:49:b3:43:1c:51:
b3:98:27:de:e3:50:78:aa:28:5c:1e:3a:b5:05:55:09:6c:bb:
88:07:c2:15:14:09:89:93:d9:a4:47:83:4d:90:07:e9:69:d8:
ca:27:ef:fc:0a:26:75:28:7c:de:34:ed:39:9d:34:62:79:6a:
f6:19:ac:a6:cc:74:77:92:79:07:61:ca:8e:19:b3:ac:df:0d:
ef:91:4e:92:76:a5:e1:6b:58:38:5b:c7:d9:80:fd:87:fd:c1:
ea:b1:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org