Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/J7v92cd92WxY1HJE7voh2cPtipo.roa
File: J7v92cd92WxY1HJE7voh2cPtipo.roa (raw, json)
Hash identifier: dtv21lhf3uKcxAOfaRFNEluV0akOeEb6JpAL1o6PATs=
Subject key identifier: 27:BB:FD:D9:C7:7D:D9:6C:58:D4:72:44:EE:FA:21:D9:C3:ED:8A:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 343B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J7v92cd92WxY1HJE7voh2cPtipo.roa
Signing time: Fri 29 Mar 2024 05:22:09 +0000
ROA not before: Fri 29 Mar 2024 05:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13371 (0x343b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 05:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27BBFDD9C77DD96C58D47244EEFA21D9C3ED8A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:5b:8d:73:3e:cd:e8:7d:06:85:93:8e:78:
91:9c:9c:a1:63:f3:3f:cd:a4:06:14:11:9a:20:9b:
df:51:b3:be:bb:73:5e:a1:85:55:72:ca:b2:e9:db:
fe:e0:27:a2:5c:d5:56:3e:7a:e0:e1:62:39:7f:7b:
11:f2:ee:5c:82:52:06:c9:32:af:39:e2:b3:c0:4f:
9f:88:87:6f:3d:8b:a8:28:a0:11:fe:86:5d:b4:75:
51:33:8b:e3:73:11:2e:74:88:1e:b0:b3:55:aa:4c:
be:40:ab:64:93:38:39:71:fc:fd:f2:f3:d4:40:6f:
e1:58:5f:6d:7e:64:79:56:bf:ed:44:ca:34:90:4f:
72:67:fe:56:9c:0d:a3:2d:7d:ec:cb:95:08:c4:34:
fa:82:95:7d:c3:b3:70:bb:93:e6:c2:26:07:75:71:
85:ca:11:54:3b:6a:6b:40:95:e3:ff:c7:95:34:81:
21:60:39:43:1a:0a:60:d5:5c:02:f7:ce:dd:7e:02:
9f:03:c9:2a:e6:38:28:a4:48:3f:cd:0e:88:73:73:
cf:04:0a:f5:2e:bd:a1:fe:14:cf:87:31:dd:2a:47:
c8:ea:3d:9e:59:92:8d:b2:3e:27:ae:3a:e6:e4:29:
03:ae:82:86:f0:e8:6f:76:55:87:45:ab:0c:dd:54:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:FD:D9:C7:7D:D9:6C:58:D4:72:44:EE:FA:21:D9:C3:ED:8A:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/J7v92cd92WxY1HJE7voh2cPtipo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:3e:8d:fb:fc:80:2c:68:81:39:54:a5:6f:26:0d:de:64:af:
07:3a:ae:a9:37:7e:48:2c:a5:ae:8d:62:ed:97:d4:8a:f9:00:
c1:60:43:99:b6:71:d0:cd:7f:7a:75:74:f7:15:aa:db:39:70:
c9:62:5b:0a:16:99:c1:c2:27:7a:61:50:bd:2c:07:55:8e:38:
29:f4:e9:d1:98:96:6d:76:6a:40:ce:54:7e:6a:ad:81:92:3d:
e8:20:a7:97:cb:1e:80:d0:82:11:1f:24:5d:78:e4:52:fb:d6:
73:5b:6e:0b:29:9f:73:da:c9:d1:14:47:20:eb:76:d1:b6:0f:
29:90:32:9a:22:00:ba:a8:e3:7b:12:27:2d:3d:0f:0e:23:85:
a0:69:ac:06:eb:10:91:0b:7f:0b:13:a7:cd:20:da:00:0e:0f:
8c:1c:73:61:7b:da:7d:1b:5f:2b:90:c9:41:19:40:05:0a:b5:
1f:e0:cd:cf:a6:21:28:b3:a0:6a:f5:7d:49:02:35:cb:a9:53:
5c:80:e3:d2:7e:46:b8:7e:a7:0e:47:79:d9:8e:0d:61:b3:9f:
31:6b:6f:fc:19:5f:7d:dc:50:69:8c:1c:12:1f:f9:76:bd:5f:
17:07:8a:64:e6:ba:2f:92:43:e3:76:73:cb:d8:94:dc:9e:2c:
62:94:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:30 2024 by rpki-client on console-ams.rpki-client.org