Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C0trnhlpiGaKyERMGTYCx7pHhHM.roa
File: C0trnhlpiGaKyERMGTYCx7pHhHM.roa (raw, json)
Hash identifier: SYASYhsAOTgdmRetwK2PiNHtiJ0AyDbcHykVC3d1TL4=
Subject key identifier: 0B:4B:6B:9E:19:69:88:66:8A:C8:44:4C:19:36:02:C7:BA:47:84:73
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 362F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C0trnhlpiGaKyERMGTYCx7pHhHM.roa
Signing time: Sun 31 Mar 2024 19:52:10 +0000
ROA not before: Sun 31 Mar 2024 19:52:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13871 (0x362f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 19:52:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0B4B6B9E196988668AC8444C193602C7BA478473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:57:97:2f:af:8d:e7:df:2d:46:ef:fc:02:
ec:72:dd:5f:fd:86:26:4e:9d:98:d3:e9:ad:5a:9f:
db:be:e6:6a:c4:95:3e:eb:df:8c:00:f0:13:6a:ff:
97:09:20:69:b6:9c:f6:df:d6:72:58:ca:f7:e0:a7:
82:4e:ca:69:30:a2:a4:ca:80:0a:7f:bf:a7:49:0e:
40:24:85:a0:22:aa:5f:1d:49:69:ea:86:b7:3d:98:
81:ef:f2:b1:0d:40:29:7f:d0:c3:70:f5:cc:f6:3e:
bc:84:ae:35:43:c3:42:e5:17:83:05:0b:70:06:94:
64:3f:a9:0b:f5:5b:e9:6b:d9:49:79:a1:a3:ab:b5:
8a:d6:8a:35:10:c4:ea:02:56:1a:2e:fd:15:c8:75:
61:7a:ac:1f:7e:5a:86:fc:bb:1f:f5:ac:2b:d4:7c:
a9:f7:28:88:00:02:63:76:8c:fe:42:1b:31:4e:37:
92:fd:80:00:8c:71:7e:ed:cb:0a:3b:d8:24:9b:57:
1e:a7:fe:86:a7:f0:04:8b:12:66:4f:e3:a7:36:a2:
77:08:bf:1f:e0:14:bf:2c:ed:53:e7:78:8e:20:2b:
71:59:a1:a2:86:94:6a:75:52:29:24:e6:0d:db:74:
a3:85:68:2e:ac:35:1d:f2:3c:e1:5b:9b:93:f7:d8:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:6B:9E:19:69:88:66:8A:C8:44:4C:19:36:02:C7:BA:47:84:73
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C0trnhlpiGaKyERMGTYCx7pHhHM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:5a:c2:8c:1c:d6:b0:34:39:23:25:ec:9c:cd:1d:6b:54:a6:
55:45:19:27:ef:4f:32:65:b4:fd:3d:4d:eb:5a:99:36:d5:df:
a1:f9:20:d8:92:ac:4c:ca:d1:df:42:b7:40:fc:0b:72:47:31:
81:fb:ac:0a:4e:c3:98:2c:f2:4e:a7:0a:c7:7a:0a:74:9c:c4:
22:66:b6:26:4c:42:19:1f:eb:87:c3:47:e8:07:67:24:38:0f:
3c:12:18:9b:69:e8:94:10:ad:99:2d:8e:b1:95:16:c8:21:0c:
4d:96:fa:1d:25:33:d8:5a:c0:63:13:e2:bd:1a:fd:a2:cf:cf:
2f:b0:0f:84:55:c1:fc:a6:33:3b:3c:e8:c0:61:e1:41:69:2c:
00:62:ff:f0:59:c8:73:ea:91:00:48:74:d4:a0:28:37:03:c7:
1b:d3:de:2a:6d:81:32:b2:af:83:72:35:e3:0e:16:5c:08:6a:
cd:5e:41:ad:ed:11:b0:7d:bb:3c:a2:d5:e8:d1:cc:6f:be:8c:
d9:68:fa:39:98:12:84:fc:36:2c:0c:62:3a:1e:4b:cf:d9:29:
f4:4e:ca:17:a5:8c:2e:f5:1b:b5:81:a2:6f:b0:d1:35:40:49:
5f:df:2b:5d:8c:35:17:4f:bd:40:9c:cf:21:e2:c1:cc:30:a9:
a7:19:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org