Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FpKg-69HQOZ1ZopkGTCI2FDWmcU.roa
File: FpKg-69HQOZ1ZopkGTCI2FDWmcU.roa (raw, json)
Hash identifier: QTA5jarZQzbKYAXC+a5fUOhAzo3Zcth2kwnbqnsNqJM=
Subject key identifier: 16:92:A0:FB:AF:47:40:E6:75:66:8A:64:19:30:88:D8:50:D6:99:C5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3447
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FpKg-69HQOZ1ZopkGTCI2FDWmcU.roa
Signing time: Fri 29 Mar 2024 06:52:05 +0000
ROA not before: Fri 29 Mar 2024 06:52:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 06:52:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1692A0FBAF4740E675668A64193088D850D699C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:7c:82:65:69:93:1f:6c:45:84:92:4d:6a:
c8:a5:a9:36:f4:9f:54:c2:4b:69:40:5e:4d:c4:67:
08:ad:71:02:34:1c:b7:11:a5:25:02:7c:24:05:bf:
54:b0:1b:07:9d:a5:8c:ef:a6:75:64:49:da:4c:5e:
cd:68:79:30:e8:05:46:15:87:e0:3f:53:ac:f7:70:
12:bd:95:d1:1d:00:b0:a1:ad:b4:48:5c:f5:8f:f9:
de:96:dd:4a:26:62:b7:41:1b:bb:55:0a:9c:15:98:
bb:d1:21:45:27:52:79:cf:53:9f:e8:d4:c0:ee:ce:
a0:1e:cd:d5:b0:a9:8e:1e:3d:6a:4d:17:af:56:e1:
e9:4c:15:ba:2f:35:96:06:97:ef:79:fc:2b:79:82:
69:85:43:1b:a0:be:d7:41:62:bd:65:55:bc:9f:a2:
c4:30:44:e5:75:b2:51:50:ce:23:42:b1:1e:35:6d:
61:ac:7b:06:56:fc:26:bc:cb:9c:94:83:b0:62:22:
d1:94:b2:95:1b:ad:f8:e4:cb:b6:b7:a2:b3:9d:a0:
b9:ec:2d:8a:67:ea:fe:88:b7:3f:c9:cc:a3:64:1d:
a9:c1:1c:53:b5:a0:36:93:fe:95:78:f6:b6:f0:00:
40:64:c1:30:d0:b9:2c:24:c3:43:ba:8a:58:0f:0c:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:A0:FB:AF:47:40:E6:75:66:8A:64:19:30:88:D8:50:D6:99:C5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FpKg-69HQOZ1ZopkGTCI2FDWmcU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
79:4a:ae:53:ab:6e:2e:b0:3f:22:b6:09:88:42:80:6e:5b:9d:
06:07:ad:80:3a:78:b5:97:e8:9d:43:40:29:e6:a8:66:88:e2:
18:03:96:87:40:9b:fb:ea:10:7a:f3:fe:21:74:9f:10:55:76:
e3:6f:10:d2:de:80:5c:1c:65:cc:25:2d:4c:dd:2d:8b:fe:87:
8a:61:08:ee:17:62:41:a2:6c:a5:6b:17:9b:2a:62:db:95:91:
3f:ac:b0:b5:8b:02:1a:cf:e5:00:c4:80:3e:13:40:4d:de:90:
0d:d6:94:e7:7e:fd:ea:45:75:0d:11:6e:d6:75:7e:b6:52:48:
50:a6:4a:15:cc:a5:20:2c:a0:09:33:1b:c8:34:09:54:3d:80:
63:a3:4d:89:2e:54:9a:59:e1:18:f5:3d:35:3b:62:38:32:79:
d9:53:ae:cd:55:98:04:12:59:30:bf:66:2f:9c:88:b0:a1:0b:
d4:de:cf:06:82:6e:5d:45:ad:00:14:08:4b:3c:07:89:bb:60:
e4:3b:24:ca:dc:17:81:be:16:f7:e8:9d:39:71:4d:9f:87:ed:
8e:f3:6e:45:c7:4d:ec:7d:e9:5b:18:8e:1e:e3:77:9f:6c:ee:
74:d2:5f:33:95:6a:89:ba:2b:fc:60:1e:84:a1:e3:d7:15:0b:
79:f0:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:15 2024 by rpki-client on console-fra.rpki-client.org