Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AtsaDpfMqYEYHEKUrlU5-um-b7Y.roa
File: AtsaDpfMqYEYHEKUrlU5-um-b7Y.roa (raw, json)
Hash identifier: qRGW/uifqEtPww1Aa59l3LgBE0rVoxrAXYAcBoDey+I=
Subject key identifier: 02:DB:1A:0E:97:CC:A9:81:18:1C:42:94:AE:55:39:FA:E9:BE:6F:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4093
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AtsaDpfMqYEYHEKUrlU5-um-b7Y.roa
Signing time: Sun 14 Apr 2024 16:22:52 +0000
ROA not before: Sun 14 Apr 2024 16:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16531 (0x4093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 16:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=02DB1A0E97CCA981181C4294AE5539FAE9BE6FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:e3:cc:21:30:72:38:07:72:1c:44:02:8b:
f3:8b:b5:dc:ec:aa:e1:a8:c2:78:bd:db:b5:0d:fc:
d4:6f:30:62:3d:53:2c:2e:14:f8:66:cd:df:4b:20:
76:81:b5:d1:32:b8:d2:cf:fb:d9:09:a4:b7:33:6f:
cb:6b:c3:62:41:72:b0:58:ba:47:fb:e4:9d:0a:08:
e9:06:4f:94:49:45:66:4d:52:77:0e:4d:88:36:7e:
4a:cd:41:67:cb:91:26:8d:11:8e:bd:e7:a1:cd:93:
77:fe:62:4a:bd:b1:9c:5a:57:5b:a2:7e:53:19:a5:
e4:99:6e:86:f2:54:c5:98:88:89:82:b5:d0:15:42:
9f:40:f5:a2:85:73:8e:c2:7b:a4:a3:e6:b3:4c:9f:
ba:3b:ac:8e:af:88:99:00:5a:ee:25:3a:0f:a9:16:
e1:c3:09:c4:a9:fd:37:cd:07:ad:48:24:4f:9e:04:
98:b9:b1:58:ef:62:d2:59:ff:12:5c:0b:c9:c9:4f:
a9:fc:68:a9:b9:69:32:77:59:84:88:50:c4:48:d0:
b9:81:42:f6:5a:3f:bf:4a:6e:5d:e3:a1:17:f6:d7:
5d:e7:d8:0e:f9:a6:c3:db:64:e3:16:97:7f:cf:df:
92:eb:38:65:c4:7b:3b:b7:4f:a5:e1:8e:11:38:4d:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:1A:0E:97:CC:A9:81:18:1C:42:94:AE:55:39:FA:E9:BE:6F:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AtsaDpfMqYEYHEKUrlU5-um-b7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:63:fa:30:5d:7e:6f:e3:ae:13:8d:c4:a6:11:fc:59:93:7e:
d6:ea:26:85:af:71:62:e0:d5:82:a2:b3:30:ab:99:d3:b7:e8:
4b:1b:7d:8d:23:26:64:8d:ce:e9:f9:15:d8:e6:89:9e:41:95:
19:9c:81:6d:e9:64:c6:83:be:55:33:e0:b6:03:e4:a2:69:28:
7d:17:2a:6d:e1:4c:ce:67:6c:07:99:92:9e:5d:cf:3a:6e:0c:
8e:8a:3e:cf:d9:5d:8b:d9:a8:97:03:43:27:ed:55:3d:5f:c2:
20:4a:50:8e:bb:bf:e1:86:e9:cc:71:34:84:bb:ee:fc:7a:27:
6f:97:d6:3c:5a:4b:f5:12:b5:45:c8:cc:7b:4e:78:54:09:c7:
78:b1:98:d6:16:8e:97:2f:11:3a:78:f3:aa:0c:5c:de:ad:2b:
cc:ca:76:f1:18:e2:b0:67:de:a8:28:13:59:b8:20:6c:70:3a:
2f:cb:46:ba:29:2f:d3:3a:09:84:20:eb:8f:ca:57:6b:84:43:
10:6e:a0:07:3f:2a:67:ce:12:a2:2c:4f:3e:8a:aa:f4:43:59:
4b:e3:a6:53:18:97:94:12:16:01:c5:18:b0:1b:27:e0:08:62:
4c:cb:f5:67:00:11:e5:79:cb:3e:4f:88:23:c2:47:cf:c3:0a:
e9:f0:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:22 2024 by rpki-client on console-ams.rpki-client.org