Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DGc5e2JkZgrGq1bQ4dI7llic9nI.roa
File: DGc5e2JkZgrGq1bQ4dI7llic9nI.roa (raw, json)
Hash identifier: rlaft+gcMLN5YqbqbHH+JCk92mK4/h3Gcdz7wxD3c4E=
Subject key identifier: 0C:67:39:7B:62:64:66:0A:C6:AB:56:D0:E1:D2:3B:96:58:9C:F6:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E43
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DGc5e2JkZgrGq1bQ4dI7llic9nI.roa
Signing time: Thu 02 May 2024 22:23:54 +0000
ROA not before: Thu 02 May 2024 22:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20035 (0x4e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 22:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0C67397B6264660AC6AB56D0E1D23B96589CF672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:0c:2b:62:49:b6:15:76:f9:45:da:ec:ea:
97:56:7c:25:67:56:9f:75:6f:d0:9b:f3:e6:e4:cb:
5d:fe:94:af:97:0d:90:bf:cf:bb:7c:42:23:57:65:
ed:40:48:dc:2d:13:04:7d:07:3c:7d:df:55:23:63:
aa:5d:ea:22:b0:20:8f:cf:2b:ce:fa:f1:fa:d7:bf:
7f:63:27:e5:5f:78:26:cc:6c:fc:f1:1c:1a:80:2a:
a4:7f:46:b2:de:4e:37:6b:58:0c:65:f5:ff:23:c1:
58:da:20:3e:4a:c5:3d:3f:92:6a:90:a6:0e:e7:c6:
49:c9:e6:b6:7d:12:2c:0a:c2:c1:9c:56:e1:f8:0d:
bf:86:37:38:44:fa:2c:e5:88:74:cd:23:20:4a:eb:
c6:0f:11:0c:fc:a4:01:a8:b9:50:f1:e6:d4:47:55:
b3:00:e1:d9:20:4d:fc:34:8c:81:11:92:1f:52:11:
4c:63:83:7b:09:9a:d8:c1:fc:d3:a8:96:9e:c5:b5:
aa:76:2d:f3:c7:26:3f:4f:e5:7b:6e:f9:48:04:86:
07:ac:75:d1:4f:71:11:2e:2a:d9:ba:bb:c5:66:67:
20:fd:66:6a:12:02:c7:c0:f3:2d:54:bb:f9:e4:39:
2f:9c:ae:91:a5:f4:e7:46:5a:ed:59:ea:a5:ec:48:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:39:7B:62:64:66:0A:C6:AB:56:D0:E1:D2:3B:96:58:9C:F6:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DGc5e2JkZgrGq1bQ4dI7llic9nI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:6f:af:60:d7:6e:0b:e1:41:ce:e3:d1:0e:a7:39:21:53:10:
ae:ce:ca:39:62:82:6b:b5:65:f3:be:d6:e0:8e:e2:be:1a:5c:
b4:a2:67:b3:60:50:62:93:30:63:60:65:08:07:a5:3a:3c:bd:
1b:60:f5:9c:2a:c0:7c:22:cb:7c:09:58:ed:02:9e:fc:6e:8a:
25:5b:a9:52:1b:6e:f2:b4:7a:46:0d:33:49:9c:82:6c:6a:2b:
2b:fe:a6:cf:ed:a0:52:8b:4b:12:ac:0a:dc:bb:c5:0d:35:1a:
bb:6c:14:e6:9e:7e:b8:a1:93:8d:b8:a0:54:4f:17:cd:9f:ea:
29:e2:4f:ce:d3:be:b1:a0:a8:20:59:7b:2c:be:e7:4e:62:a4:
94:4f:56:61:d4:c8:a1:aa:0d:08:53:2c:93:e4:a3:1c:77:b9:
78:84:38:cd:6f:9c:b6:72:41:86:4e:16:a2:7e:de:48:23:c4:
3a:49:4b:41:22:e1:06:00:bd:b8:2f:e6:1a:30:bb:43:06:07:
f6:0b:18:42:82:13:7f:83:99:ba:9f:db:cb:86:d5:cb:ff:f8:
e5:2b:7b:8c:a0:ba:62:dd:3f:5b:7f:90:ed:3a:0a:68:01:99:
a8:50:94:31:33:e1:8b:f1:30:00:54:ae:ac:2f:56:c4:8d:37:
bd:b7:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org