Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ha6B6_RRUFaTs-HPrfDtzobC6JE.roa
File: Ha6B6_RRUFaTs-HPrfDtzobC6JE.roa (raw, json)
Hash identifier: NqAnUZCOggYGxbhyLRsHxqK8SLVNMr+uiysPU+3WuZQ=
Subject key identifier: 1D:AE:81:EB:F4:51:50:56:93:B3:E1:CF:AD:F0:ED:CE:86:C2:E8:91
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B23
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ha6B6_RRUFaTs-HPrfDtzobC6JE.roa
Signing time: Sun 28 Apr 2024 18:23:48 +0000
ROA not before: Sun 28 Apr 2024 18:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19235 (0x4b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 18:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1DAE81EBF451505693B3E1CFADF0EDCE86C2E891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:6d:2b:25:7d:10:64:ba:bb:be:54:d8:6d:
69:f7:b6:d9:cd:8e:6b:bf:97:2f:12:71:a3:95:59:
13:bd:91:3a:d9:04:eb:4c:be:b0:00:a1:86:fa:ff:
31:0d:9d:cc:2f:88:63:4a:93:69:40:e1:37:ee:cc:
3c:2c:61:3d:e8:17:5a:88:49:36:ca:38:78:59:60:
5e:69:c4:4e:dd:37:68:f0:fc:74:9c:ae:a5:2f:77:
8f:d1:c6:64:36:26:d0:c3:03:4e:31:51:fd:e3:e0:
f9:07:ea:30:1f:8c:4b:a5:f6:62:07:ef:10:3b:31:
81:1d:91:85:92:37:a7:b4:cb:5d:70:63:cc:2d:a5:
9d:ae:c0:d3:fd:42:75:aa:a3:10:2a:6e:d6:a3:f4:
81:12:0c:9b:75:a4:6f:34:34:ab:26:50:bd:9a:bb:
3e:58:07:9a:74:00:fc:55:f8:fc:1b:1a:4a:78:56:
1b:e6:9f:bf:8b:17:65:4b:b3:32:b4:04:37:fc:6c:
80:f2:02:b4:a2:0e:af:3c:17:bd:33:49:74:7f:f1:
3a:54:b7:df:1c:36:e6:aa:80:55:64:86:0c:95:31:
45:08:5a:2b:1f:1a:5a:c2:f6:ed:bc:3e:92:88:a8:
83:56:ec:d6:a9:1f:7a:e2:2d:34:42:7b:51:93:46:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:81:EB:F4:51:50:56:93:B3:E1:CF:AD:F0:ED:CE:86:C2:E8:91
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ha6B6_RRUFaTs-HPrfDtzobC6JE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
70:65:e7:76:2c:b7:46:70:69:1d:cf:97:30:e8:1c:e0:65:26:
07:b9:31:03:16:1a:34:b1:7f:a1:d2:3b:b3:98:24:7f:20:6a:
df:8d:b7:68:6d:97:64:83:84:ee:5e:02:20:d3:b6:a7:95:5f:
82:98:fb:f7:36:0f:83:1c:fe:9a:99:51:26:0c:68:27:f3:3e:
3f:2e:ec:91:40:83:61:3e:12:81:0e:57:72:0e:e9:2f:ac:5a:
98:ea:c7:da:db:99:1b:9f:46:d7:35:2d:78:e4:e0:bf:32:84:
c1:b2:db:a8:15:bb:31:0e:80:4e:fe:a8:1e:ae:e9:e3:2b:98:
1f:93:6c:18:bc:93:2c:44:13:fc:52:8d:a0:71:82:94:03:c7:
dc:3d:7f:24:3d:f2:e1:aa:40:cc:be:34:11:3b:09:e8:d0:07:
fa:58:56:9a:cc:76:f1:a6:3a:b6:1b:35:ce:39:bb:b5:e1:21:
66:5b:2c:6d:c6:1a:4d:98:08:a1:23:17:fd:cd:e7:b6:a4:2a:
a5:08:a1:c2:aa:58:69:d9:df:b3:f8:d0:ec:d9:04:5b:ed:ee:
45:48:1a:71:e3:51:7f:7c:5a:3f:1e:5a:0b:ac:b9:40:cd:54:
e1:d3:b7:67:64:65:ae:26:52:d7:50:c0:d0:10:aa:91:1c:19:
61:48:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:29 2024 by rpki-client on console-ams.rpki-client.org