Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Jh_nxnVXGdBof4UPklo90ysFwMY.roa
File: Jh_nxnVXGdBof4UPklo90ysFwMY.roa (raw, json)
Hash identifier: 6Yh/b0KMQSPD3LQNizE1yhvpA450hszn7bfr0SLuLvM=
Subject key identifier: 26:1F:E7:C6:75:57:19:D0:68:7F:85:0F:92:5A:3D:D3:2B:05:C0:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jh_nxnVXGdBof4UPklo90ysFwMY.roa
Signing time: Mon 15 Apr 2024 03:52:57 +0000
ROA not before: Mon 15 Apr 2024 03:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16623 (0x40ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 03:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=261FE7C6755719D0687F850F925A3DD32B05C0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:c2:17:04:d9:f9:50:1b:f1:fc:b2:22:cf:
d4:47:c9:15:09:be:e0:8e:ab:c9:47:3e:a8:57:c7:
5b:cb:3d:3e:f6:0b:1e:08:60:6d:fe:27:99:8e:81:
22:9a:cb:0b:31:5c:4c:56:8b:1d:3a:48:f7:79:3d:
2a:51:6b:45:6f:c0:88:07:ac:b0:48:a8:5e:3e:31:
3b:25:38:5b:3a:f1:c0:19:cd:64:53:d8:06:1f:12:
9f:69:e6:b4:2e:e5:85:32:de:1f:bc:93:ae:15:33:
27:ed:d6:b0:dc:95:a9:69:72:3b:da:64:61:81:28:
56:c7:fe:52:1f:e0:bf:08:46:ad:ba:c8:f2:05:fe:
90:ef:c2:01:89:42:c3:27:31:e1:05:86:0e:06:e1:
f4:26:2f:6d:60:19:44:99:e1:cb:fd:61:fa:3e:08:
61:3a:75:45:20:fb:3e:97:81:59:2f:24:71:46:9a:
8d:5f:08:3e:6c:29:9d:e4:60:02:80:0a:c1:fd:16:
42:a3:92:95:f7:15:50:4b:4d:63:f4:be:1f:3c:f8:
19:ee:2f:25:63:07:88:bf:fc:fc:06:5d:09:08:25:
56:24:3a:95:2c:db:1b:a6:ba:be:8d:69:5f:6b:1d:
b5:0c:ef:2b:18:c0:d2:2e:59:d1:86:73:63:f1:3c:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:E7:C6:75:57:19:D0:68:7F:85:0F:92:5A:3D:D3:2B:05:C0:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jh_nxnVXGdBof4UPklo90ysFwMY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:cf:38:c0:b7:98:bf:eb:4c:d5:2e:49:15:62:22:b2:b0:11:
1d:ad:95:4b:3a:44:8b:e0:1b:09:ca:f8:04:90:01:a9:e6:15:
ec:58:f0:e8:7a:5e:3d:36:ba:36:41:e0:1e:48:12:2a:ae:aa:
7b:05:89:cd:26:be:d1:1b:d2:69:88:f2:2f:8c:53:e2:f4:e3:
1c:a8:37:4b:3b:cf:51:8d:9b:fd:20:1c:3f:21:f6:c2:93:74:
a6:1a:c7:f4:2a:dd:2e:b8:1f:1d:f4:3c:eb:94:a1:fb:3e:4e:
c6:1d:ac:1f:6b:8b:0c:e9:77:43:1b:be:c9:36:7d:34:b1:c4:
32:b4:62:1e:fe:3c:34:e1:e6:22:e7:62:72:94:dd:41:a5:c3:
0a:5a:ef:9c:67:96:74:6c:24:4c:1a:f5:74:ae:b1:f6:ba:f5:
84:c5:9d:ce:25:36:d2:f7:a8:56:0d:dc:54:d8:b5:fc:41:8d:
e0:42:4b:7e:7a:bf:79:07:4e:79:00:6b:70:b9:6a:cb:4c:a8:
98:be:a7:4d:93:35:b8:76:a6:ea:00:6b:f8:5f:3e:ca:c9:66:
ad:57:ef:3c:3f:94:dc:6c:cc:57:b1:c1:69:8b:6d:3d:7a:9e:
ee:ec:70:04:da:66:72:4f:6c:42:3d:4d:20:b8:85:9f:4b:f6:
f1:12:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org