Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Cj3zPk8pNKc20ZZFQf6h2bgrsVI.roa
File: Cj3zPk8pNKc20ZZFQf6h2bgrsVI.roa (raw, json)
Hash identifier: CZ5fs1mXTjSFoF528M88ZeCuH7HnN74U3qwYTsN2gK4=
Subject key identifier: 0A:3D:F3:3E:4F:29:34:A7:36:D1:96:45:41:FE:A1:D9:B8:2B:B1:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CA3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Cj3zPk8pNKc20ZZFQf6h2bgrsVI.roa
Signing time: Tue 30 Apr 2024 18:23:55 +0000
ROA not before: Tue 30 Apr 2024 18:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19619 (0x4ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 18:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A3DF33E4F2934A736D1964541FEA1D9B82BB152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3f:86:d5:5d:23:01:ac:81:73:b9:41:ce:11:
f9:a4:b1:f7:82:c3:38:8e:d3:7f:eb:35:c0:66:8a:
c2:42:9a:e8:59:32:b9:37:ca:1e:82:5f:c6:2f:f7:
1f:cc:38:ea:ce:a9:c2:22:63:0b:4c:88:9c:27:7a:
fb:55:fe:c4:d2:77:ea:e4:09:87:36:a5:4c:c3:8d:
e4:61:e8:c6:40:bf:74:10:48:f2:a9:fb:80:31:14:
c3:2c:b0:12:54:e1:8b:53:22:d5:f9:48:17:2e:07:
ba:15:3a:fb:28:7b:51:3a:06:f7:05:27:93:50:03:
86:b0:ba:c4:5e:c3:f4:71:a7:cb:a0:5b:01:4c:01:
ef:0f:2f:05:07:36:f4:b9:0f:57:f8:84:98:fe:dd:
ef:90:cc:84:33:b1:2c:f3:0c:69:e3:9e:56:02:e1:
52:12:65:05:68:20:1e:46:e0:e2:40:79:57:d2:57:
d6:34:18:d8:ea:63:24:73:e1:a5:fb:2d:d9:eb:9b:
fe:3f:eb:00:af:1f:fe:2a:f9:64:35:2e:3d:1c:cd:
e0:83:8d:24:87:d3:f9:4b:10:a4:38:59:05:ab:56:
f6:4c:f8:64:dd:d1:91:77:a6:19:07:66:0a:82:40:
eb:6e:b4:dc:03:6b:59:fa:9e:a5:d1:3e:6b:ec:6f:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:F3:3E:4F:29:34:A7:36:D1:96:45:41:FE:A1:D9:B8:2B:B1:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Cj3zPk8pNKc20ZZFQf6h2bgrsVI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:ec:e9:6b:95:1b:d4:b3:da:8e:48:7e:a2:f0:eb:1c:b9:51:
64:65:5c:12:49:ea:72:96:ea:1a:c7:18:5b:ef:ea:01:c4:68:
bd:6c:48:6d:03:09:84:9d:bb:a8:07:7f:ad:05:6e:3f:e5:ba:
30:c7:86:f6:97:4b:24:b0:2e:81:d0:c5:3e:c1:43:02:2a:1f:
ca:bb:35:4d:b5:62:df:92:7a:59:2f:c2:34:eb:f7:8c:78:50:
ec:13:1a:a9:83:76:de:c8:9b:e6:7f:4a:9f:ae:63:32:27:db:
9f:42:6a:29:e6:e7:72:af:3f:5e:fd:bb:b1:fb:f3:f5:18:94:
55:1c:76:05:5e:aa:cf:29:1e:95:b2:47:47:9d:63:68:17:25:
24:fe:8a:b6:23:21:27:0d:5e:d0:04:ad:de:d9:73:63:b9:58:
ea:65:fa:60:a9:fa:0d:01:d4:ea:b4:d7:a6:95:a7:c3:95:07:
2f:ec:bf:fa:6d:26:6e:a2:45:a0:8d:9f:54:1b:93:1f:a3:d7:
55:ef:ef:6a:b0:65:34:f5:9d:b4:9c:5a:cc:d7:e1:b3:3e:96:
29:96:64:b4:ed:02:69:85:fd:86:85:7e:ee:ee:92:e4:dc:4d:
0d:70:25:fa:d5:3d:2a:aa:27:ed:dc:7f:81:87:d0:d0:ae:80:
ef:89:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org