Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EKEwH9DnZ4pT3BFqtjCwwC0rR3U.roa
File: EKEwH9DnZ4pT3BFqtjCwwC0rR3U.roa (raw, json)
Hash identifier: I4ckHfrnhvrk421cbfbjvo1JwoiaxqgNShyF0tuRHK4=
Subject key identifier: 10:A1:30:1F:D0:E7:67:8A:53:DC:11:6A:B6:30:B0:C0:2D:2B:47:75
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3933
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EKEwH9DnZ4pT3BFqtjCwwC0rR3U.roa
Signing time: Thu 04 Apr 2024 20:22:23 +0000
ROA not before: Thu 04 Apr 2024 20:22:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14643 (0x3933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 20:22:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=10A1301FD0E7678A53DC116AB630B0C02D2B4775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:db:33:76:fe:0b:ba:52:0f:8f:80:f2:4c:
a0:6d:ba:29:4a:63:ec:1b:fb:f0:bf:65:cd:a5:30:
c6:43:fc:c8:ff:4b:dd:33:3e:d8:29:2e:a8:54:69:
a1:d6:24:9c:0c:a8:2f:59:4f:70:29:4a:af:1d:e8:
85:05:de:5c:14:a2:01:f5:69:88:66:6d:27:d7:5e:
f8:03:a8:ca:e0:75:06:ad:28:f4:f0:ca:7a:9e:a6:
8d:5f:4b:a3:78:bc:1b:55:18:ed:a6:ab:0a:0e:fb:
1f:18:62:8c:c1:3f:8b:18:be:0b:fd:59:e5:00:b1:
d8:25:43:6c:74:b1:33:33:8d:48:34:c1:97:7a:fb:
4c:e7:78:53:1e:c1:10:b9:3e:9f:52:53:e3:cb:6a:
cf:c1:c9:da:e7:fe:22:76:9a:01:8a:a9:84:bf:1f:
11:ef:f1:19:ee:e4:70:0c:84:6d:98:09:ba:71:47:
9a:5e:b5:2e:39:a1:3e:87:79:09:d1:02:e5:75:54:
4f:5b:da:de:28:09:a0:5d:c7:85:97:b6:24:98:38:
73:a5:a0:68:c6:16:4e:9f:41:0a:e7:05:7d:7c:0e:
c1:44:7e:93:ed:b8:ba:63:51:d4:ea:bb:60:87:09:
ee:d8:85:c7:b5:29:f3:47:2f:15:f0:44:15:fc:26:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:30:1F:D0:E7:67:8A:53:DC:11:6A:B6:30:B0:C0:2D:2B:47:75
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EKEwH9DnZ4pT3BFqtjCwwC0rR3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:3d:bf:a1:92:13:b2:0b:26:f5:37:e0:bf:ba:10:f5:40:e0:
a2:78:73:3a:9c:de:ba:f0:dd:c9:b6:c7:3d:47:6e:88:a9:b6:
b0:6b:11:9e:d9:b6:3a:3f:85:e1:06:16:96:c8:b3:c0:7c:70:
ef:f1:23:f9:c0:48:54:36:d8:fa:54:63:09:6a:5d:c4:dc:18:
64:7d:8e:7d:6d:b9:63:b2:43:e0:04:de:17:80:0b:f9:47:0b:
b7:e4:0a:aa:43:d7:e4:31:01:2a:9f:7d:f2:d0:d9:00:23:34:
36:ab:45:cd:c4:5a:3c:2d:e7:96:8b:82:fc:61:0d:de:e1:e9:
60:44:12:12:fb:2e:1e:58:e8:03:2f:92:e3:3b:08:d4:c2:91:
6b:f5:4f:e5:52:0c:72:fe:ca:d0:7b:69:2a:f0:c9:7e:f3:22:
b7:23:bc:f0:a0:f5:d1:25:a3:1d:a9:4e:37:8d:60:c9:96:28:
66:40:25:50:8b:3e:9b:91:69:45:d4:98:56:c0:ee:24:f2:83:
4c:be:3b:f4:30:15:7b:2b:e1:5b:db:72:36:c6:34:69:f0:5f:
9a:1c:cb:aa:c4:7a:c5:5b:b1:c7:52:46:27:eb:ae:c7:5e:27:
f7:bd:8a:bf:b4:70:c4:ae:43:c8:c3:df:46:c3:f9:9a:8c:32:
a3:b4:4d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:25 2024 by rpki-client on console-ams.rpki-client.org