Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LRpkzMeHmEFV4pwf_m_ChwL1VmM.roa
File: LRpkzMeHmEFV4pwf_m_ChwL1VmM.roa (raw, json)
Hash identifier: /0722Gif3JhaUm1VH7GcEVoRvHvNwS+pljx68Ezyq54=
Subject key identifier: 2D:1A:64:CC:C7:87:98:41:55:E2:9C:1F:FE:6F:C2:87:02:F5:56:63
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3323
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LRpkzMeHmEFV4pwf_m_ChwL1VmM.roa
Signing time: Wed 27 Mar 2024 18:22:02 +0000
ROA not before: Wed 27 Mar 2024 18:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13091 (0x3323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 18:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2D1A64CCC787984155E29C1FFE6FC28702F55663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:99:57:9d:c8:19:a2:e4:e3:fb:4c:ac:c0:
61:7b:d0:61:4c:58:db:60:1c:bf:9d:ee:28:43:c5:
e9:c1:7b:2d:a9:9c:60:4a:d9:50:ca:ab:cd:f7:73:
b6:92:8b:b0:5f:6e:2b:c4:21:54:3f:df:0c:94:2f:
e6:33:66:9d:b7:0c:63:82:8f:76:8f:18:dc:a7:42:
86:96:0b:f0:d6:6f:37:d9:f1:03:18:48:48:7c:62:
5e:bf:c7:bf:08:7e:ab:8e:2d:17:d8:8c:5f:bb:f9:
60:bd:89:81:8b:6e:ac:53:9d:fc:0b:78:de:0e:b4:
03:fb:c9:bc:c7:59:f2:7d:11:8e:d3:d6:c7:2f:21:
1f:81:f4:0f:b8:f6:45:8c:e9:49:4b:53:ed:90:c5:
dc:37:94:d2:34:e5:a1:e1:83:cb:0a:88:5f:8a:f5:
ac:0b:67:3a:65:89:60:7c:f8:61:01:d6:6d:5c:ac:
40:d8:28:c7:85:3d:37:3a:49:ec:c1:f5:54:4e:8a:
f8:af:5a:41:fb:ad:2c:b2:c1:6e:5d:ee:6e:d9:cd:
20:90:8e:ef:43:f1:e8:61:e5:a5:b0:7a:a0:dd:9c:
ea:ba:d8:a5:5f:22:f1:ca:02:2b:0c:ba:59:ff:38:
4b:6b:0c:bf:17:b3:16:47:a4:86:bc:1e:96:1b:ca:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:64:CC:C7:87:98:41:55:E2:9C:1F:FE:6F:C2:87:02:F5:56:63
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LRpkzMeHmEFV4pwf_m_ChwL1VmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:0c:3e:90:d0:e5:50:10:d2:bf:71:c2:98:cc:dd:a3:f7:5f:
ba:ee:7e:3f:37:e5:17:2e:9d:6e:af:3e:b4:c8:db:20:6f:0f:
8b:88:42:a9:eb:ae:5e:03:81:ff:04:45:ee:75:42:56:7b:54:
19:6a:ca:2e:a7:fa:a6:97:88:c6:01:09:50:7d:37:a2:6d:db:
04:fa:ca:ae:b6:c7:e7:f1:cb:b6:6a:ae:f7:73:90:a6:58:bc:
8c:5f:6f:a2:e4:40:4c:6d:50:d7:4c:d5:2a:d6:0b:50:df:05:
df:2f:55:f5:9f:4c:b4:37:09:b3:67:de:52:cd:f1:01:b4:ce:
40:ca:8d:11:5f:9b:4e:54:22:b4:98:58:d0:9d:f5:41:0d:c1:
d0:a5:8f:bd:ef:5e:45:2e:e4:e7:84:66:03:dc:61:2e:c8:52:
8e:db:ec:1f:34:c1:7f:e8:f1:74:c8:96:f3:56:25:6b:1c:0f:
b3:d5:ad:6c:64:98:7b:7a:32:14:30:ca:8d:a1:85:63:53:81:
4a:c6:80:31:03:5d:dd:0a:e7:01:84:93:54:5c:55:5e:75:bc:
21:74:58:2d:0a:1e:b9:dc:76:e5:65:35:eb:54:37:23:73:44:
d5:24:05:58:57:2e:52:90:c3:6d:f0:c1:d6:2c:80:93:af:18:
b0:b6:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org