Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BTxTEjL4QQWzixBy7nsUmFAXeus.roa
File: BTxTEjL4QQWzixBy7nsUmFAXeus.roa (raw, json)
Hash identifier: jhbVJ0EFpJUZC5FFOl8SaqzCWGcOwdK+GRqw1II5aMU=
Subject key identifier: 05:3C:53:12:32:F8:41:05:B3:8B:10:72:EE:7B:14:98:50:17:7A:EB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 373F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BTxTEjL4QQWzixBy7nsUmFAXeus.roa
Signing time: Tue 02 Apr 2024 05:52:17 +0000
ROA not before: Tue 02 Apr 2024 05:52:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14143 (0x373f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 05:52:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=053C531232F84105B38B1072EE7B149850177AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:d1:47:b2:b2:f2:1f:40:8d:c7:2c:0f:6c:
05:66:bc:af:74:0d:12:bf:e9:38:51:ee:00:a8:fb:
a7:e3:4f:3e:57:c1:0f:47:73:1e:97:34:17:19:f8:
16:38:bb:48:b2:3f:bc:bf:f1:9a:2d:0e:25:dd:e3:
ad:62:4e:13:25:8c:26:59:b5:a9:72:7a:32:36:f9:
8a:11:40:56:f2:be:d4:84:91:17:ca:c4:a6:70:70:
91:95:38:5d:55:e6:e7:1d:e3:b0:40:1c:c4:ea:fc:
2f:e8:78:7a:d4:07:1e:88:9e:58:61:4c:6c:e5:12:
14:4a:a6:68:d3:b6:19:81:17:c7:86:90:2f:bc:14:
10:79:aa:2e:76:69:07:31:ec:40:f8:a8:ff:17:83:
3d:a9:7c:21:5f:5f:f4:c0:7a:34:66:a4:07:37:93:
f5:25:ab:ba:3b:fd:b2:2c:02:23:86:a6:77:3e:02:
55:19:40:84:7d:92:ec:65:35:c0:50:60:30:c9:94:
9d:c5:37:bc:d2:48:9b:a4:e9:de:1a:0e:c5:1d:a6:
6b:02:cb:83:1b:b8:7d:03:73:79:e6:85:b7:5e:46:
1c:77:b4:df:06:57:c7:14:bc:08:2e:cb:d0:4f:a0:
4d:d0:72:0e:17:9f:5d:fc:1d:3c:65:cc:dc:6d:a1:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:53:12:32:F8:41:05:B3:8B:10:72:EE:7B:14:98:50:17:7A:EB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BTxTEjL4QQWzixBy7nsUmFAXeus.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:1a:8e:b5:0e:d3:26:ed:d2:65:b6:77:f9:82:85:ad:b2:6d:
bd:dd:ab:89:bc:2f:e1:c2:71:5c:6e:99:36:db:b5:62:9d:be:
4d:f2:70:91:e3:76:de:28:69:f4:ac:59:0e:43:2d:22:f8:ab:
82:1b:6c:02:6c:2c:43:63:df:ea:3c:bf:dc:6a:02:64:76:b7:
fd:18:eb:e7:50:71:76:17:ed:f3:31:40:b6:a9:ae:3c:bf:f3:
f5:88:d5:0f:e9:ab:a7:c7:be:4c:39:f1:85:c6:af:a4:65:13:
c1:fe:b0:6c:b2:27:7a:84:26:6f:e3:2a:6f:21:77:47:d0:f8:
85:d2:e4:12:23:35:7e:b3:56:49:75:f1:0d:c8:73:ae:a1:e2:
f8:1e:24:43:1a:f6:93:6a:1c:5d:3a:f0:dd:0d:65:5d:51:5c:
c2:3c:83:d8:10:db:97:ca:62:31:36:28:cc:9e:74:5e:3a:b8:
2a:43:c6:ec:f0:c9:d2:5c:97:77:a4:06:77:ea:14:cf:ae:b9:
02:c6:9c:cb:3a:d5:07:8d:cd:ff:91:d5:87:70:ae:61:c8:10:
69:ce:b1:cc:2d:86:43:92:29:ae:77:71:02:8e:77:ad:68:2e:
6d:74:a6:38:0c:85:bc:68:90:6d:f7:21:d0:e9:a3:c5:c8:2d:
89:da:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:22 2024 by rpki-client on console-ams.rpki-client.org