Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CsVms-2ZXi-9oJldNzH5E_Yzzgo.roa
File: CsVms-2ZXi-9oJldNzH5E_Yzzgo.roa (raw, json)
Hash identifier: Z36o65W9Y4ULeVpLnIpW3FvGz9CdFodoOX27mGD5a38=
Subject key identifier: 0A:C5:66:B3:ED:99:5E:2F:BD:A0:99:5D:37:31:F9:13:F6:33:CE:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4187
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CsVms-2ZXi-9oJldNzH5E_Yzzgo.roa
Signing time: Mon 15 Apr 2024 22:52:55 +0000
ROA not before: Mon 15 Apr 2024 22:52:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16775 (0x4187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 22:52:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0AC566B3ED995E2FBDA0995D3731F913F633CE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:4d:d2:f3:17:e9:e5:89:72:1d:b9:76:ed:
3c:16:7d:2f:8d:12:4d:1c:d2:7d:df:dd:52:83:17:
b4:93:95:af:18:79:26:9c:92:29:02:dd:71:5f:d5:
69:db:25:da:d2:84:d1:ab:06:65:48:e5:5a:a9:05:
48:9c:7d:11:1e:f5:e3:f2:30:32:6f:6e:1c:ee:63:
d1:0e:ed:51:e7:f3:b0:01:2a:3b:a5:25:60:42:b9:
1f:02:35:fd:52:3f:ff:ba:f0:f1:fd:3d:65:53:c0:
e3:59:2d:81:d6:7e:ff:33:7f:05:88:0d:9d:86:7a:
00:da:92:cc:ad:92:65:dc:7c:6c:54:e3:11:4a:b7:
fc:ec:97:2b:3a:97:b2:fa:f0:03:da:b6:e8:aa:ba:
32:52:80:f4:fa:d6:22:e8:6b:90:1b:b2:9b:8c:3e:
87:2b:84:1e:87:95:6f:cd:fe:f2:d6:7c:f4:32:15:
46:72:05:0b:eb:3a:3d:ac:f6:02:4a:64:25:9a:56:
e2:c2:62:c2:de:ed:d4:8b:bb:f5:68:f1:77:7c:f5:
0f:21:67:2f:a6:4f:50:50:1b:0d:a0:5c:3d:90:1c:
a2:bf:da:c6:f3:88:71:e9:64:18:cc:9f:37:7c:11:
af:2c:d8:e5:ae:9f:9c:9a:86:e2:01:d4:48:8b:e0:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:66:B3:ED:99:5E:2F:BD:A0:99:5D:37:31:F9:13:F6:33:CE:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CsVms-2ZXi-9oJldNzH5E_Yzzgo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:15:30:0b:7c:f4:65:62:a0:24:08:59:88:de:48:c4:01:6b:
0d:eb:34:83:e1:d1:72:51:ce:68:2a:77:06:b9:c2:f2:58:48:
23:88:ca:0c:0c:e5:d3:be:26:7b:45:0b:40:11:4e:98:d2:ad:
2c:fe:4b:f5:d5:81:3d:f3:ac:7f:d1:8d:5e:2f:6b:a5:9b:15:
10:47:b4:7b:31:99:d3:55:4c:d8:05:c4:20:c4:3e:7c:9f:d5:
2d:84:fb:55:b7:73:e6:0a:7a:c6:61:50:53:38:bd:1e:c4:63:
08:21:b9:3b:17:b5:67:c4:98:8a:ae:52:12:54:3e:1c:7b:76:
db:50:79:8a:8d:f0:00:e7:1d:1d:6b:86:03:03:82:64:b7:17:
8b:f5:b9:fc:f0:94:0a:eb:d9:a9:b8:b6:c0:42:ab:d7:13:06:
af:7b:04:82:13:d6:da:a5:9c:a7:b0:14:6b:56:f7:36:f7:ea:
e8:50:4b:2d:5c:29:2e:01:69:ca:21:50:1c:34:f8:14:88:70:
5c:70:54:08:d1:5d:6d:85:34:2a:f6:82:66:fb:4b:0c:7b:24:
f9:8c:96:a4:30:46:a6:0b:3b:b8:47:7b:91:51:4f:96:35:ca:
35:d4:ae:e4:e9:01:74:da:31:a3:c3:4c:45:26:15:22:a6:44:
e3:a5:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:24 2024 by rpki-client on console-ams.rpki-client.org