Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Fnz9VDRn1DZmxngD_adR7-4U9h4.roa
File: Fnz9VDRn1DZmxngD_adR7-4U9h4.roa (raw, json)
Hash identifier: uEj7TT0Wx7Ktfs7Pnnyw1Sl/erdCVbuTAffwLm8Msds=
Subject key identifier: 16:7C:FD:54:34:67:D4:36:66:C6:78:03:FD:A7:51:EF:EE:14:F6:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F37
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Fnz9VDRn1DZmxngD_adR7-4U9h4.roa
Signing time: Sat 04 May 2024 04:54:03 +0000
ROA not before: Sat 04 May 2024 04:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20279 (0x4f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 04:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=167CFD543467D43666C67803FDA751EFEE14F61E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:b0:6b:62:e2:81:67:ca:c8:67:f2:f4:44:
99:09:f4:3b:1a:fa:06:09:df:f1:b8:05:da:7f:26:
45:26:5b:f7:ed:a2:9c:4f:36:d3:9d:f6:7b:21:27:
34:4b:9d:1c:ab:52:b5:d2:74:c4:ae:32:ef:fa:a4:
f9:ee:69:13:23:07:95:cd:d0:8c:45:bf:3f:ff:c2:
2b:cd:7f:8d:66:d6:15:10:79:06:43:49:b5:22:35:
61:4a:86:79:44:0d:00:c9:ed:a9:9a:dd:21:68:4b:
b9:f1:a5:4c:24:9c:6f:ff:bd:54:4c:b4:5a:72:b4:
22:5a:b1:68:d1:d0:2a:b0:3d:5b:2e:76:5f:46:04:
df:12:b7:aa:d7:eb:e6:3f:7e:ae:4d:5e:de:50:f2:
1f:59:14:41:52:c9:e3:0c:da:7d:c6:1d:63:bf:45:
ca:45:1b:a2:09:90:a1:a2:6b:40:f9:70:ae:f8:8c:
74:1a:44:fc:f4:21:91:62:41:64:7a:1b:2c:69:7b:
cd:27:64:e8:0a:de:ea:cb:0b:d0:cc:09:76:68:67:
25:70:db:72:05:d7:df:08:91:15:91:cc:a9:bd:7c:
93:6e:27:9f:a2:63:5e:c2:8c:fc:b1:57:e7:af:97:
ec:d6:e3:6f:1c:fa:a3:8d:0f:14:a3:37:49:d3:5e:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:FD:54:34:67:D4:36:66:C6:78:03:FD:A7:51:EF:EE:14:F6:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Fnz9VDRn1DZmxngD_adR7-4U9h4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:46:03:b4:51:46:78:9a:8c:3a:c1:3d:49:7c:e9:1e:b9:2c:
e9:c4:38:89:c9:b4:7a:fe:9f:52:5b:84:a8:93:44:76:4e:ed:
84:e8:da:aa:8e:3e:6a:d7:c9:73:00:f7:c1:54:12:ad:42:04:
99:ef:e8:c2:17:43:94:11:70:cf:4b:59:41:48:be:7a:ca:14:
91:64:ca:bc:8c:27:2c:0e:e1:c1:43:ba:c6:a2:63:d1:a5:1f:
fb:62:c0:96:1e:3c:fe:78:f5:7c:26:12:74:04:50:6b:ae:6b:
fa:ea:07:a0:8c:80:99:5d:35:81:d0:22:e2:46:d8:41:ae:5e:
a8:74:60:c8:ad:cc:92:f0:a2:d8:4e:aa:a9:42:0c:33:f7:9b:
d7:d4:4b:6c:08:5d:16:76:c2:d9:83:34:3f:af:a5:1b:f7:af:
73:b0:76:3e:c5:58:b5:0d:d9:4b:5d:28:48:70:dd:2a:fa:cf:
c0:d6:87:39:a7:19:b8:46:da:e3:61:5d:92:7c:dd:c3:88:f1:
0a:7d:7b:ee:74:9d:e4:5c:af:60:b6:d8:a0:34:f9:73:34:da:
eb:4a:89:37:b7:5a:ff:16:92:78:4d:6b:19:50:7f:cc:da:4e:
fc:17:f3:e1:c3:b0:ae:98:04:92:0e:4f:62:6b:37:d9:a2:04:
d7:62:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:26 2024 by rpki-client on console-ams.rpki-client.org