Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DLQq3sFHngnQ4rXrzV56Ycdngoc.roa
File: DLQq3sFHngnQ4rXrzV56Ycdngoc.roa (raw, json)
Hash identifier: wuPbUUmAt9BIBFhyPY1xbe04TSf8QQy4sO0QEK55O54=
Subject key identifier: 0C:B4:2A:DE:C1:47:9E:09:D0:E2:B5:EB:CD:5E:7A:61:C7:67:82:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4527
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DLQq3sFHngnQ4rXrzV56Ycdngoc.roa
Signing time: Sat 20 Apr 2024 18:53:29 +0000
ROA not before: Sat 20 Apr 2024 18:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17703 (0x4527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 18:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0CB42ADEC1479E09D0E2B5EBCD5E7A61C7678287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:0c:7f:13:03:ef:ae:00:64:26:9d:eb:8d:
98:10:35:32:80:09:78:5e:84:17:a5:c4:d9:6c:00:
0a:5b:a1:f2:d9:67:65:03:1b:22:b1:90:27:1c:b8:
3d:f3:83:e6:bf:7b:96:05:e3:91:8d:88:50:4f:1a:
af:cc:c7:5a:13:9b:f1:11:22:25:87:bc:ae:70:44:
c1:15:31:44:da:85:2c:e0:ac:e8:50:e1:82:ec:d4:
4f:23:62:ef:da:c0:d0:b3:0b:2b:27:b3:2a:4d:c5:
56:d3:c9:ec:2a:1d:70:04:73:f6:59:59:55:bf:86:
41:be:33:48:4c:f8:30:c8:af:8e:c4:4e:98:e5:19:
8c:c6:0d:ec:67:2a:60:79:86:a7:c3:1e:1d:c2:03:
2e:7e:1a:56:70:ff:0b:fe:4a:81:c9:7a:bf:a1:94:
23:fa:b6:45:2e:a7:34:06:58:ba:63:ba:3c:30:11:
46:cd:70:1f:c3:56:ed:d4:3d:e6:16:48:a1:ad:3a:
d0:1b:39:fd:93:d8:e9:bf:1f:cf:cc:2a:24:b3:4b:
d7:8b:8b:cb:81:e0:48:bf:03:14:00:df:1c:3a:04:
9d:90:18:fb:63:eb:00:a1:4e:0b:7c:28:dd:29:17:
e6:7d:34:3b:26:8e:6e:07:3c:32:84:af:ca:95:7c:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B4:2A:DE:C1:47:9E:09:D0:E2:B5:EB:CD:5E:7A:61:C7:67:82:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DLQq3sFHngnQ4rXrzV56Ycdngoc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:da:67:d4:ca:0f:b4:0e:4c:05:33:3f:61:4b:9b:9d:0f:97:
4d:56:fe:dd:db:a6:7e:1f:f2:d9:53:08:f4:53:bd:21:63:02:
dc:76:10:53:13:36:36:88:bd:1c:37:b2:66:3c:0b:40:53:74:
d9:b0:dc:6c:27:7b:2e:69:02:a9:fa:0f:81:b3:6a:35:7f:c9:
ed:a5:7c:43:9b:6b:68:5e:28:9a:76:03:ae:bc:98:11:c8:ac:
6a:3f:3e:14:8c:dc:fd:f6:a0:bd:db:7a:cf:aa:7e:23:7a:60:
38:af:7d:9d:0c:9a:30:97:6a:f4:a3:13:b0:0d:dd:df:3f:80:
2f:bf:a8:e1:17:35:0b:7a:df:85:ec:41:31:6b:b1:1a:c8:63:
51:13:f2:5b:50:64:eb:4b:56:b3:8e:70:d5:f0:54:c2:58:09:
e7:52:e9:a6:2a:4d:9a:75:3f:11:63:7c:73:a6:fc:a4:3d:09:
0c:e6:7b:e3:bd:10:b1:e2:0a:c8:87:29:43:43:b5:2a:33:fe:
22:0f:d0:5b:66:5b:e3:64:34:d3:14:52:7c:ab:49:06:17:b9:
70:66:db:31:12:87:f9:2e:d8:a2:ad:43:10:b6:04:7c:92:81:
11:2b:d7:a7:cf:d1:91:98:d2:c2:78:fb:de:87:b6:17:e4:1e:
7b:97:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org