Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Jkf3HvR8W5YYExJJxMtUolQFtQ0.roa
File: Jkf3HvR8W5YYExJJxMtUolQFtQ0.roa (raw, json)
Hash identifier: BPUJgr2sFi+JyXDsvwEKYkBVtCVQ8HN0N5BTUpd4aVw=
Subject key identifier: 26:47:F7:1E:F4:7C:5B:96:18:13:12:49:C4:CB:54:A2:54:05:B5:0D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 515B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jkf3HvR8W5YYExJJxMtUolQFtQ0.roa
Signing time: Tue 07 May 2024 01:24:09 +0000
ROA not before: Tue 07 May 2024 01:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20827 (0x515b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 01:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2647F71EF47C5B9618131249C4CB54A25405B50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:c1:a8:d7:75:9d:38:76:4d:3f:12:26:e2:
5d:b1:ef:7e:c0:fe:e0:73:9a:4b:aa:84:6f:6b:73:
ad:26:ea:75:55:de:d2:e7:b6:44:88:2d:c8:45:47:
ce:54:47:86:f6:53:f7:cd:ed:6f:4a:77:e7:03:5f:
26:dc:2b:47:66:32:48:24:db:ff:51:d5:0e:67:56:
65:31:96:87:17:c1:d4:43:2e:b5:f0:aa:a5:7f:58:
0b:81:60:d6:e3:a7:f9:e2:ba:75:13:7f:f0:2d:9f:
57:1e:f9:40:dd:9c:aa:85:07:71:f9:52:54:b6:d9:
72:1c:2e:10:4b:cb:8a:c5:4e:ce:21:5a:5e:e3:a7:
5a:a4:1f:4a:7a:0c:48:28:e4:15:37:d9:4e:2f:7d:
b5:19:f5:40:03:07:14:ae:1b:48:08:85:5a:f5:5a:
70:7b:bb:68:c8:6a:30:66:46:be:c4:d3:71:fb:42:
40:be:13:96:a9:a0:48:79:d9:e0:14:49:70:eb:cf:
e1:06:1c:58:78:aa:9f:98:ce:4b:7a:dd:47:16:3b:
2e:68:3f:2c:23:c8:c8:38:25:14:d0:d5:21:e5:7b:
ed:01:fd:b5:ce:8e:00:eb:cc:ef:53:d5:f5:cd:c3:
ad:2d:e5:21:80:e5:38:f1:59:08:0f:a4:60:3f:c9:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:F7:1E:F4:7C:5B:96:18:13:12:49:C4:CB:54:A2:54:05:B5:0D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jkf3HvR8W5YYExJJxMtUolQFtQ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:fb:ed:89:5e:30:29:60:e7:c8:fc:c8:11:69:48:13:c6:eb:
2e:5f:ba:2e:06:0f:16:12:d6:a2:15:34:99:1c:0e:bb:6b:61:
dd:7c:8b:13:c6:e7:a5:5b:df:65:7c:8a:17:0d:a6:26:cd:10:
c2:3b:88:b2:c1:e6:da:63:07:60:29:e8:99:e2:f9:47:65:ce:
e5:c4:e8:1b:ef:b9:b3:15:0e:f3:16:36:e9:92:08:27:87:b7:
62:3d:dd:2f:df:72:01:f1:21:b1:39:80:cf:30:f4:56:ec:74:
44:25:49:61:f3:1c:f5:22:97:98:78:ff:f7:35:80:36:18:ef:
62:33:a9:34:ca:90:a4:71:6b:7e:df:ec:20:d6:96:40:62:c3:
b2:8b:c1:f5:a6:23:4e:6e:f3:3c:61:6e:d0:fb:7b:ef:41:4c:
ef:c7:7e:68:c3:f8:25:07:7c:3d:6c:66:dc:70:2e:df:05:72:
b5:ec:70:66:52:7a:20:4a:ac:73:a0:44:d6:6c:68:6e:06:61:
39:bf:5a:79:c2:14:79:cc:d1:9e:65:2b:d4:ab:8e:29:32:d6:
fd:32:35:fb:d1:bb:ee:76:06:2b:b9:a6:6f:70:e5:74:b2:d1:
62:57:a2:34:ca:b8:61:b5:54:f7:9a:4d:b3:53:27:92:2d:e7:
7e:cf:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org