Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IfDNKsmv9yxqO8qh8u9d3om-uNk.roa
File: IfDNKsmv9yxqO8qh8u9d3om-uNk.roa (raw, json)
Hash identifier: XIoiD2kyAhH7T1/QUknEDlCUgALD9ijS7WKWiLVcOnY=
Subject key identifier: 21:F0:CD:2A:C9:AF:F7:2C:6A:3B:CA:A1:F2:EF:5D:DE:89:BE:B8:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 569B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IfDNKsmv9yxqO8qh8u9d3om-uNk.roa
Signing time: Tue 14 May 2024 01:24:13 +0000
ROA not before: Tue 14 May 2024 01:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22171 (0x569b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 01:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=21F0CD2AC9AFF72C6A3BCAA1F2EF5DDE89BEB8D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:46:1c:a5:36:9c:d4:66:f3:b8:4d:c2:0f:
16:50:b2:c5:08:ed:09:0f:96:31:fa:06:e3:1c:25:
df:37:5b:68:b0:ee:5f:6e:c2:24:71:fd:9e:18:a6:
1a:8e:c5:1c:e5:33:9e:8b:b9:70:5b:04:f4:33:85:
aa:bb:03:42:81:44:0d:59:1e:6c:0a:e1:ab:53:67:
b3:de:11:8d:b9:9e:7c:75:31:83:23:05:73:7c:53:
af:f6:22:7e:e3:49:19:82:8c:1e:6f:a9:ef:3e:9e:
d7:d5:bf:fb:15:a6:1a:75:3c:89:6d:bb:7a:68:eb:
c3:15:ee:75:da:a7:16:25:e7:eb:67:3d:a1:97:88:
39:19:c2:26:0f:50:2d:e7:cd:8c:cd:51:89:34:6e:
65:c5:fd:17:36:38:1e:0f:b9:1f:10:09:85:b1:a5:
b9:e1:fe:7c:19:36:bd:17:ec:85:0e:d5:f6:31:16:
27:d6:02:32:3d:0f:d9:a4:d6:36:e6:de:37:8f:b8:
cf:aa:c4:a2:68:a9:5f:e6:95:b7:2c:dd:8b:31:d0:
60:d2:21:64:a0:84:97:46:fe:06:8e:f3:95:3f:fd:
f6:b8:7e:51:6d:47:b8:fd:c5:37:be:3a:df:0b:72:
20:c8:94:d0:b1:88:e1:aa:43:71:14:37:9c:7a:28:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:CD:2A:C9:AF:F7:2C:6A:3B:CA:A1:F2:EF:5D:DE:89:BE:B8:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IfDNKsmv9yxqO8qh8u9d3om-uNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:18:ca:dc:05:cd:c5:32:96:0a:74:57:95:33:d6:90:64:c9:
e8:65:d9:31:f5:70:4d:12:ba:38:b3:ca:b6:ec:13:f4:81:33:
62:de:cb:ba:80:be:00:d3:0f:b2:33:30:16:a0:cd:6d:a9:df:
40:30:bf:96:d5:0f:79:5d:0f:ab:48:71:94:38:92:a5:85:bf:
fa:36:8a:d9:25:60:fc:1d:21:52:ad:5a:ff:e7:f5:6b:43:74:
dd:37:5e:f5:66:32:14:3e:2f:2b:d5:40:96:5d:ae:9f:87:ff:
81:b9:72:b3:f3:bd:50:b6:81:72:6e:80:4f:f9:81:18:05:b6:
f4:6e:1c:b2:a3:aa:8b:e6:a6:08:33:4a:ee:9f:85:3e:95:44:
bf:fd:92:59:2c:c3:17:ed:be:3c:31:88:51:cf:f2:19:90:3a:
16:e5:dd:d7:88:87:df:93:c2:2a:f1:ec:aa:81:e2:8d:f7:46:
7e:a8:a9:39:a7:10:a7:7d:12:e7:1e:5d:de:22:87:3c:87:04:
1a:e1:a9:74:ed:6c:f7:be:97:5a:89:7d:66:29:86:e8:53:e9:
10:6b:cf:47:31:71:2d:79:0c:07:3e:09:ef:a7:49:88:17:f2:
c9:a5:c1:41:d3:24:d2:ff:f5:75:fd:46:11:c6:e6:e4:5c:bb:
05:02:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:30 2024 by rpki-client on console-ams.rpki-client.org