Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Js-UZ4diaIwegc2xW_2y0qdTBfE.roa
File: Js-UZ4diaIwegc2xW_2y0qdTBfE.roa (raw, json)
Hash identifier: vV/x+B32f0pHnyJhSgd4ST+f52yRe8eFxehGL+oWyxA=
Subject key identifier: 26:CF:94:67:87:62:68:8C:1E:81:CD:B1:5B:FD:B2:D2:A7:53:05:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51DB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Js-UZ4diaIwegc2xW_2y0qdTBfE.roa
Signing time: Tue 07 May 2024 17:23:56 +0000
ROA not before: Tue 07 May 2024 17:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20955 (0x51db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 17:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26CF94678762688C1E81CDB15BFDB2D2A75305F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:16:1c:2d:98:24:09:67:e1:4c:b3:a7:91:
61:3d:88:3d:bf:73:6d:90:b6:a2:73:a7:f2:c0:cb:
6a:69:26:1b:f1:75:9a:b8:ba:57:e5:99:ba:01:c2:
14:88:e7:17:72:9f:b9:e3:5d:d1:8a:17:71:c4:e7:
c4:57:e8:55:f7:df:c8:10:79:e9:a8:31:ec:42:e8:
7f:5e:c9:41:71:7e:40:5e:1c:83:a2:31:cf:af:1b:
c4:74:d0:3b:34:0f:c3:dc:e7:29:88:e4:ea:36:fd:
43:1d:bc:16:96:ac:6b:00:d4:a5:ee:6f:b2:52:bd:
04:88:e4:f1:a0:c6:74:de:ac:bd:af:28:15:35:5e:
1f:5c:d0:33:ec:4d:42:10:d5:e1:7d:a4:db:78:44:
e8:ca:e2:f4:95:80:e3:ed:23:ce:0b:ed:58:10:61:
07:81:86:cf:11:79:d0:e8:40:dd:8b:f1:47:83:77:
3f:fd:b5:18:91:f6:4c:b0:49:d5:be:02:b3:43:d6:
dd:4c:5d:e8:42:29:d9:c9:f4:c5:89:33:a4:51:07:
10:c8:aa:29:5d:4c:f5:e8:63:63:e9:e3:df:f9:cf:
32:84:35:9c:bd:f0:95:7e:7b:4f:e8:d8:2b:d1:dd:
af:df:71:04:7e:ca:6d:92:27:35:dc:c0:12:17:98:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CF:94:67:87:62:68:8C:1E:81:CD:B1:5B:FD:B2:D2:A7:53:05:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Js-UZ4diaIwegc2xW_2y0qdTBfE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:16:1b:8c:34:6f:cc:c1:d0:19:59:87:95:31:a6:9a:0d:6d:
c2:8c:e6:ea:e5:b9:78:58:7e:bb:c0:5f:8f:94:2e:4e:33:75:
9c:36:d4:a6:5d:3a:6b:7d:7b:94:ef:ae:a6:70:1a:f7:8e:d0:
12:cc:e5:02:68:14:07:6c:23:e6:c0:d6:5d:cb:c9:d9:f7:3d:
18:af:4b:9b:3f:a9:ad:a1:09:60:c2:37:85:3a:19:70:38:64:
06:2c:5b:a4:80:03:4d:73:29:55:dc:80:3c:ca:0e:c0:0e:2c:
4f:9c:87:3f:3c:49:77:5b:e4:d6:e1:4a:78:73:8e:0d:7a:47:
31:47:2c:13:b9:ca:f9:25:6a:a0:f3:7e:ee:a4:20:70:7d:f4:
ef:ce:ed:d4:d8:e5:61:19:e7:e6:98:a7:bc:64:2a:ff:5b:83:
bb:6a:e2:0e:ba:84:ad:75:df:52:e3:4f:66:5a:b7:a2:7f:98:
b4:9f:6a:5e:b9:61:14:1b:aa:bb:4b:b0:aa:4c:31:d6:b4:aa:
24:89:93:f1:8e:04:70:ea:4c:bd:51:c3:b6:03:25:3f:40:05:
3d:2a:bb:64:7b:db:2d:c4:33:5d:25:e5:1a:e1:33:cc:cc:8f:
8c:8b:48:2c:8b:bd:9e:c1:b0:e2:be:ff:04:87:d8:ce:05:27:
c5:7b:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org