Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JNhjTrTETOvnAoshEiw-BxYbtaI.roa
File: JNhjTrTETOvnAoshEiw-BxYbtaI.roa (raw, json)
Hash identifier: fdkqQqmaWMHtodzGLsWmSDXepYUq5UfLL2D5BASOv0o=
Subject key identifier: 24:D8:63:4E:B4:C4:4C:EB:E7:02:8B:21:12:2C:3E:07:16:1B:B5:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A6F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNhjTrTETOvnAoshEiw-BxYbtaI.roa
Signing time: Sat 06 Apr 2024 11:52:28 +0000
ROA not before: Sat 06 Apr 2024 11:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14959 (0x3a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 11:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=24D8634EB4C44CEBE7028B21122C3E07161BB5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:37:28:56:e0:63:db:6f:74:b9:08:e7:fb:
32:2c:86:66:ac:27:f3:93:fe:35:2f:26:d7:5c:f8:
34:e0:cd:3c:79:c4:32:25:1a:ef:43:87:d0:92:0a:
54:0b:1d:74:6a:72:13:c0:a2:9b:4e:d3:8e:05:57:
2b:ec:bc:1f:1a:d9:12:5f:a0:3d:00:1c:b8:62:46:
ed:33:f2:90:f6:e0:12:66:aa:d7:2a:d0:a1:8e:a2:
72:50:21:cf:a5:5a:07:25:ff:92:ee:9c:2a:ba:52:
f4:20:72:c1:86:17:ff:d2:29:2f:b2:7f:c4:fa:1b:
77:fb:33:06:3c:d3:2e:8d:a0:cc:d3:68:f9:2c:98:
c1:a9:1c:40:70:34:c5:09:f1:18:6f:d6:42:c9:6a:
ac:b7:6d:7d:88:e1:75:69:b2:cc:33:9e:1b:70:ba:
83:2d:5b:db:75:58:e6:f0:6f:7c:0c:8b:70:18:51:
a4:72:de:b8:48:7a:7d:04:b5:39:77:e9:1d:5c:b9:
e3:aa:ec:9b:53:76:84:1e:d4:9a:72:6c:a7:56:13:
63:2d:6b:46:6e:db:da:df:a1:7d:a9:24:af:ec:3b:
85:fe:6d:5a:76:ac:8a:32:10:fd:6d:c8:4e:ae:4e:
ac:0e:42:20:1f:87:f5:ff:fc:f3:cd:86:81:0a:03:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:63:4E:B4:C4:4C:EB:E7:02:8B:21:12:2C:3E:07:16:1B:B5:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JNhjTrTETOvnAoshEiw-BxYbtaI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:e4:c2:16:f1:7d:f8:95:bd:3d:5f:de:20:cd:ab:95:19:3a:
13:60:47:2e:2a:da:44:26:c4:1a:96:1b:2f:57:c8:17:f4:65:
c8:63:11:bf:28:1e:a4:90:99:02:0d:22:d6:e9:de:a8:61:af:
db:34:3b:1e:6e:db:09:24:18:2c:73:29:2d:1c:a2:e1:3b:5e:
95:63:6f:ef:ca:4e:54:ea:c0:9d:a9:b8:9e:8e:21:13:84:b2:
ff:90:80:88:b8:c7:4f:b9:02:c3:6a:9d:dd:0a:89:8d:9b:95:
82:88:c6:be:64:06:de:e3:e9:b7:3e:65:81:06:06:f9:53:5c:
ec:cf:d0:d1:4b:69:92:69:bf:4e:db:2c:51:e0:f9:34:99:ee:
cf:52:12:9b:b9:4e:b0:87:5b:ec:7f:e0:97:97:61:e3:83:98:
8b:53:45:f6:dd:21:6f:38:65:e7:04:c8:0f:e8:f3:49:7b:b3:
c7:54:df:20:c2:f7:dd:34:cf:39:55:53:d3:d0:d6:a0:15:1c:
35:b9:1b:73:6f:be:26:75:de:ed:58:30:2e:34:73:75:dd:dd:
bc:79:8f:1c:10:75:e0:5c:32:20:bc:c5:e4:70:35:03:bc:66:
33:2a:c1:5a:6e:eb:88:27:a9:22:66:3f:c1:1a:41:be:49:7d:
2c:1e:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:31 2024 by rpki-client on console-ams.rpki-client.org