Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BU-s8xAdhRsVBx0cvVXhFVxIUYE.roa
File: BU-s8xAdhRsVBx0cvVXhFVxIUYE.roa (raw, json)
Hash identifier: uokanEhUnjkDUwa/P/deHKkwbC1aP37xq7zUUlm7QfU=
Subject key identifier: 05:4F:AC:F3:10:1D:85:1B:15:07:1D:1C:BD:55:E1:15:5C:48:51:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37FB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BU-s8xAdhRsVBx0cvVXhFVxIUYE.roa
Signing time: Wed 03 Apr 2024 05:22:22 +0000
ROA not before: Wed 03 Apr 2024 05:22:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14331 (0x37fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 05:22:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=054FACF3101D851B15071D1CBD55E1155C485181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:91:ca:05:47:1d:e4:91:86:8e:e0:98:43:
fc:3f:c3:1d:6a:7e:a0:7a:a0:cb:9e:9b:22:4f:62:
0d:84:5c:41:04:b6:92:a6:38:f1:a2:29:9c:26:72:
fd:69:ab:b7:a3:fc:a4:62:a2:bf:b7:c9:ed:86:e4:
6e:71:40:01:1b:24:2d:36:ae:4f:81:b3:a4:78:ee:
e9:a9:af:73:59:08:cd:de:27:3b:43:4a:15:ea:c5:
27:8e:fd:e7:de:9c:b2:47:fe:f3:ec:63:c2:e2:c5:
d8:14:a6:d4:5e:84:b1:2f:34:08:9c:df:33:0c:61:
ad:b6:10:62:7d:60:fe:bf:a2:53:c1:6e:43:83:22:
29:e5:a7:7a:4a:50:c1:d4:92:d9:37:98:a1:c0:f8:
14:c6:91:f3:04:fe:27:c5:3e:2b:9d:55:6d:3d:af:
c9:d4:99:68:a7:6f:9d:7f:e7:d1:99:cc:0c:0e:f5:
9c:c8:d3:95:a0:c0:33:57:ae:d4:d2:50:54:39:c3:
98:cd:6e:7a:1f:17:06:52:ba:a2:ca:52:9b:7a:ce:
ec:f4:83:29:f7:13:08:80:63:47:85:4f:9d:57:b0:
4a:04:e4:09:62:70:de:35:07:0c:cb:c9:35:14:d2:
a6:08:f5:6f:59:8f:72:12:86:1d:ac:1c:26:4c:8a:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:AC:F3:10:1D:85:1B:15:07:1D:1C:BD:55:E1:15:5C:48:51:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BU-s8xAdhRsVBx0cvVXhFVxIUYE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:ce:e6:8c:bd:c4:69:47:33:cc:ad:67:c8:5e:1b:04:cb:aa:
86:00:b2:e9:83:c9:31:c2:ca:b6:11:7c:6f:46:f0:6d:01:0d:
bf:45:48:78:a5:25:b4:41:9e:7f:23:bf:3a:f6:50:1c:41:63:
f9:56:87:96:e5:79:27:b9:3a:1e:46:b1:1e:1a:b8:2f:7b:00:
1b:b9:f4:6c:fd:8c:6e:f0:aa:6c:22:48:6f:1f:8a:a9:3f:54:
a0:ce:29:74:6d:9d:6c:14:63:12:65:a7:5e:bb:d2:eb:d5:4d:
a1:da:24:1c:2f:ca:de:f6:1c:a6:e5:94:04:b3:22:c8:4f:6d:
89:de:0e:b8:15:ea:f1:d1:b3:ed:14:9d:59:6a:4c:b0:d9:e2:
9a:a4:a5:c7:be:1a:61:62:21:71:35:2d:4f:9e:2e:b6:0b:c2:
72:e1:19:63:96:10:f3:c9:41:15:94:de:f5:88:1d:fb:e3:46:
b6:7d:f5:b3:f5:53:29:7e:6f:a3:06:8d:7d:21:5c:fe:1c:dd:
05:f9:96:04:0d:62:1a:64:8d:a3:9f:83:92:79:bc:bf:60:9b:
ab:9f:88:4f:45:9a:bc:76:a9:d6:28:54:59:13:48:6e:95:a0:
14:2c:f2:64:7a:23:21:f8:88:bf:fa:55:53:06:ab:c6:4c:82:
fc:b2:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org