Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M1M36oYTNbWAuJ0RtmPFu3wct3o.roa
File: M1M36oYTNbWAuJ0RtmPFu3wct3o.roa (raw, json)
Hash identifier: LyzNWWTsHacIcwWelcGcVI775hCvuNpDdmudKbTwdMc=
Subject key identifier: 33:53:37:EA:86:13:35:B5:80:B8:9D:11:B6:63:C5:BB:7C:1C:B7:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38A7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M1M36oYTNbWAuJ0RtmPFu3wct3o.roa
Signing time: Thu 04 Apr 2024 02:52:18 +0000
ROA not before: Thu 04 Apr 2024 02:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14503 (0x38a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 02:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=335337EA861335B580B89D11B663C5BB7C1CB77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:94:a4:d7:6d:b0:6a:4c:fe:5f:0b:c5:d7:
59:02:4e:17:69:e5:ac:a8:cb:33:b7:80:05:61:6d:
eb:1c:87:7f:6b:4c:4a:40:f9:31:67:f5:8d:3b:4c:
ca:fb:b7:3d:68:19:3a:1b:7f:69:68:43:53:64:06:
95:0e:c5:65:7c:d1:23:85:7f:7f:79:8a:47:4e:b2:
21:a7:27:2f:ae:2e:87:82:a4:84:53:53:4f:f7:e3:
8e:0e:01:55:29:2f:ce:82:cc:69:66:f0:ec:68:95:
22:10:5d:41:fe:9e:43:e9:e1:b3:24:c5:72:0d:2e:
ec:f6:da:e4:b4:3d:39:0e:ba:63:95:a6:31:b7:02:
7a:ab:d1:57:3c:d9:71:e3:b5:db:3b:a0:d1:36:e0:
c0:46:03:18:bb:6b:da:87:bc:40:42:9f:d9:e0:57:
87:11:b0:af:fe:d0:ce:c6:b3:99:ed:05:ec:46:64:
39:5f:51:ee:5b:48:7c:74:96:40:aa:87:a9:d3:b4:
5f:3a:62:7e:94:3a:3e:f0:ce:61:99:df:b6:80:cc:
f8:c9:b4:b5:df:4f:48:75:5a:cd:c4:fb:63:42:26:
cc:00:a6:97:1f:f7:77:a2:df:8d:e2:bd:af:42:9d:
8e:31:a2:c8:af:db:7e:04:38:b5:24:0f:ed:1b:91:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:37:EA:86:13:35:B5:80:B8:9D:11:B6:63:C5:BB:7C:1C:B7:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M1M36oYTNbWAuJ0RtmPFu3wct3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
68:23:28:10:32:34:96:a6:34:0e:2a:67:b7:49:19:3a:e5:34:
b8:87:a0:ec:b4:b8:e1:1a:5b:ca:94:80:f2:42:b6:d9:18:74:
ea:ce:eb:01:3b:87:6c:a7:15:eb:6d:da:26:91:25:52:ad:11:
bb:dc:56:57:de:ae:04:dc:94:5c:b7:72:52:23:92:f2:8a:14:
a4:8f:04:c4:d1:68:af:5f:aa:5d:aa:19:33:9b:74:d9:3c:6e:
b7:85:c1:0e:c5:f2:29:22:9d:5c:ff:06:06:fa:b5:0b:32:87:
9e:71:d6:83:79:c5:47:ad:70:25:7f:10:7e:b2:77:11:77:a1:
e2:45:83:f7:d6:d5:22:74:8a:7f:1b:6f:d0:f7:da:fa:a3:2e:
a2:99:23:0d:ca:68:19:2a:94:4e:35:cf:2c:a5:17:e1:11:48:
52:e5:28:af:ab:e1:4b:cc:91:f4:f8:c1:f3:30:3b:89:af:b5:
b0:db:d7:2b:ac:0a:3f:c1:a7:0d:09:3e:0d:36:52:36:27:d7:
a8:b7:0a:0a:a3:80:f9:bb:11:07:a7:d7:0f:99:56:25:c9:31:
30:ee:da:87:f9:7d:b9:82:8d:9c:73:ff:7d:2e:cc:e7:67:f7:
e2:74:84:c1:56:16:c3:05:de:ce:6a:91:70:35:5c:b6:b4:da:
5b:94:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org