Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DihKaRzFVN6H3rGLIcnLAhzLcZU.roa
File: DihKaRzFVN6H3rGLIcnLAhzLcZU.roa (raw, json)
Hash identifier: xvM3Q+Q31vECcEq5mNJ9YvjYKVDQ9L9Rn/dp5rhlx9U=
Subject key identifier: 0E:28:4A:69:1C:C5:54:DE:87:DE:B1:8B:21:C9:CB:02:1C:CB:71:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E7F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DihKaRzFVN6H3rGLIcnLAhzLcZU.roa
Signing time: Fri 03 May 2024 05:53:44 +0000
ROA not before: Fri 03 May 2024 05:53:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20095 (0x4e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 05:53:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0E284A691CC554DE87DEB18B21C9CB021CCB7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:df:c3:ef:2a:38:90:ac:d8:0e:83:24:bb:
40:c7:5c:ab:b9:82:45:a1:56:b9:21:88:06:94:34:
e8:46:19:2a:f8:14:26:a4:72:5d:96:e4:93:74:a9:
c9:c9:88:2f:87:06:bf:81:8b:f3:1f:63:b7:69:bf:
28:a4:9e:fa:ec:8d:2a:cf:15:de:b6:7b:67:4b:d6:
3a:f1:10:13:f6:73:df:6f:36:1d:69:8e:7f:3e:86:
28:d0:e9:3b:9a:f7:47:40:57:7e:d1:52:bb:52:4e:
32:12:dc:1f:b7:73:5a:b2:fd:a3:d5:ed:c0:ef:13:
af:ea:70:03:18:7b:52:c4:de:10:6e:ce:c6:4d:ad:
18:e8:f8:14:d7:d1:d8:ed:01:3f:a5:8b:17:0a:f1:
42:49:01:c3:2c:fb:c6:f2:62:b8:dd:3f:ed:e1:da:
b3:39:04:6c:73:f2:b0:b0:9e:cf:6f:91:6b:1d:3a:
fb:1d:db:2c:a6:54:c4:15:e2:33:53:d5:04:61:a3:
e9:e7:d4:13:0c:4c:d2:44:0e:3a:a1:3c:09:b4:ec:
80:63:db:9b:56:91:f9:5a:64:a3:ab:72:92:6a:1e:
45:38:ec:56:69:84:3f:e2:43:ce:1d:63:df:28:74:
ea:31:20:85:c7:d7:2e:99:01:d6:d3:af:1d:52:f4:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:4A:69:1C:C5:54:DE:87:DE:B1:8B:21:C9:CB:02:1C:CB:71:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DihKaRzFVN6H3rGLIcnLAhzLcZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3d:8b:40:d4:d8:d4:14:2a:72:16:32:6b:c0:bc:22:b2:c2:97:
8c:69:9e:92:28:c4:ff:6a:88:29:83:d6:93:e7:fd:64:bc:2f:
a8:6e:5f:29:62:33:86:e5:7e:0d:5a:94:87:8c:1e:1d:60:c8:
98:65:67:a2:f3:44:de:43:f2:32:0e:cf:db:b0:d6:b4:5a:47:
49:9a:8d:f9:e4:3e:15:d7:13:9a:cb:29:4b:4a:87:b1:21:72:
0b:05:d9:f5:71:d6:24:1f:d4:fd:56:ef:a4:15:97:0e:c0:b6:
01:08:b6:a6:4c:b8:8d:54:00:94:b5:2b:5f:d6:07:33:b0:aa:
0f:2c:41:35:32:38:47:3e:56:50:0d:a1:89:2e:98:da:b7:9b:
76:3b:13:fc:8a:81:aa:c9:43:77:25:87:8e:38:a1:15:15:65:
50:aa:69:20:a0:fb:d1:ba:87:43:7a:e2:bc:fc:66:c7:3e:79:
21:fc:b4:c2:14:0a:a9:90:56:6a:d3:dc:d8:e7:95:67:54:d5:
10:2e:a4:c3:f6:e7:bf:58:ff:51:9f:5a:68:f7:74:a9:20:a3:
59:3d:31:05:41:c4:c6:73:fb:b8:2a:f7:f7:b9:a0:2b:a2:5d:
02:56:f7:9e:9e:47:82:79:a5:d9:cf:5a:0c:e6:99:fd:41:0f:
61:e8:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:25 2024 by rpki-client on console-ams.rpki-client.org