Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/B_pTSJNGiBKGOc2N7MTKCZrqwEg.roa
File: B_pTSJNGiBKGOc2N7MTKCZrqwEg.roa (raw, json)
Hash identifier: MX7UXTmVFYf3YDXQk49PkYMnYKeJBvejmPs1EYR4Gfw=
Subject key identifier: 07:FA:53:48:93:46:88:12:86:39:CD:8D:EC:C4:CA:09:9A:EA:C0:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 417F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_pTSJNGiBKGOc2N7MTKCZrqwEg.roa
Signing time: Mon 15 Apr 2024 21:53:22 +0000
ROA not before: Mon 15 Apr 2024 21:53:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16767 (0x417f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 21:53:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=07FA5348934688128639CD8DECC4CA099AEAC048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:fd:05:5e:2e:45:12:8c:fe:d3:97:f8:d6:
c8:ea:00:b2:fb:c0:78:06:24:f8:a0:f3:73:bf:dc:
51:32:6a:3c:51:43:a4:fb:cc:51:ee:57:3c:2e:bd:
73:e5:78:ee:ed:39:b3:ba:00:6b:4f:7a:f2:33:25:
cb:f7:ca:44:2c:57:6e:58:4c:d5:8d:ca:07:61:1a:
90:43:e7:b0:9f:4c:6b:56:c0:6b:61:58:7f:52:70:
eb:3f:15:64:0e:eb:d0:41:b2:ae:79:90:1c:2a:c5:
ad:92:d0:88:70:9f:16:3f:65:14:1f:f4:1d:f0:40:
9b:b4:14:4b:72:c7:66:e7:96:14:84:44:30:24:9a:
ab:6e:23:7e:72:7a:9e:96:36:b0:b5:fc:91:d7:9e:
93:61:44:bc:99:b7:70:89:56:df:1c:49:43:f1:6d:
be:04:1f:08:a4:ce:50:97:f6:0a:1e:f5:27:e7:4c:
8a:f4:6a:12:da:c1:7c:8c:40:5e:66:d8:15:ec:23:
12:87:19:45:9c:87:f5:71:bc:67:1b:54:a7:b4:17:
55:41:1c:66:7d:18:16:ff:19:d0:3d:f7:13:6b:5f:
ec:4d:44:5a:42:9c:5e:e8:1c:45:a4:c6:5b:b4:1e:
fa:79:1e:26:05:59:7a:f7:0a:1d:6c:f3:fa:5e:0d:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:53:48:93:46:88:12:86:39:CD:8D:EC:C4:CA:09:9A:EA:C0:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/B_pTSJNGiBKGOc2N7MTKCZrqwEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:3f:97:e3:c4:62:41:1a:0d:c4:1a:6d:73:1a:d3:a8:b2:81:
e1:cb:cf:7a:0e:78:2a:ce:a8:4d:88:43:b3:7f:04:a5:8b:70:
e0:83:7e:cb:85:8b:e5:b6:5a:bf:e3:42:6e:1f:ec:15:cf:8c:
18:74:be:92:f4:b3:90:98:f6:99:96:0f:c7:df:ac:a9:29:72:
de:b6:c3:a4:e0:7c:3d:7e:c6:8b:5e:20:51:c7:f8:37:fb:42:
a7:cb:3b:24:05:1a:1a:78:ef:b6:60:04:ad:de:47:3f:ea:11:
21:fa:e8:59:1f:0f:9f:f5:c0:93:9f:24:b6:3b:f8:c0:1d:81:
83:02:3f:80:e6:85:4d:74:7e:f0:74:16:20:e2:97:ad:69:4e:
70:28:34:81:2a:c3:a7:52:42:3d:17:b4:46:de:b7:77:06:81:
e1:5a:cf:8c:ab:8a:d0:9e:a6:bd:6e:84:e3:50:00:a3:14:a8:
41:20:fc:e5:b4:b3:43:c8:cb:46:d2:3e:2e:4e:d4:fd:53:34:
7d:64:47:86:01:5c:fe:ad:d5:c8:e3:ad:04:c3:2c:7d:f5:2f:
38:0c:b4:4b:6e:20:8c:55:69:1a:76:9e:5b:11:64:ce:76:5b:
58:25:c9:35:02:4f:43:98:24:48:d1:13:dd:02:bd:9f:e1:63:
51:a3:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org