Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M6SmO6niSdz-K5QXgjHpb-iaujQ.roa
File: M6SmO6niSdz-K5QXgjHpb-iaujQ.roa (raw, json)
Hash identifier: z8Ac9DNmBjPyQ6lUExYfXsBikjEyaIx3K8AJxM7TisU=
Subject key identifier: 33:A4:A6:3B:A9:E2:49:DC:FE:2B:94:17:82:31:E9:6F:E8:9A:BA:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EB3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M6SmO6niSdz-K5QXgjHpb-iaujQ.roa
Signing time: Fri 12 Apr 2024 04:22:52 +0000
ROA not before: Fri 12 Apr 2024 04:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16051 (0x3eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 04:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33A4A63BA9E249DCFE2B94178231E96FE89ABA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:dd:cf:ce:63:ad:8c:98:10:98:e2:a6:80:
bd:ee:16:7d:2f:ec:cf:13:99:f1:82:ed:0a:a1:be:
d0:81:83:a1:ae:07:71:b0:3d:58:f5:b5:8b:de:ad:
4a:1d:a0:d7:ff:87:06:19:05:92:1d:70:39:28:d7:
f5:b0:97:b5:ed:6c:4e:d2:91:66:b9:8e:9d:01:5e:
0f:ed:ca:92:a3:04:75:db:ed:c7:b9:7d:2a:1a:22:
31:30:fe:b6:95:56:7a:b8:83:35:53:03:b5:fa:10:
74:9c:a5:0c:a3:c4:10:6f:82:b5:74:99:00:50:bc:
0f:a0:5f:dd:7c:c9:62:94:22:e4:dd:6b:1b:12:58:
ba:46:69:52:55:29:b7:2c:48:06:e9:e8:a6:c1:e7:
06:c3:c0:68:4a:d9:24:99:42:a1:a1:5b:8d:11:4f:
bb:77:73:a0:44:b1:76:58:3d:08:59:e7:d1:d6:d1:
08:b7:f8:0d:6d:53:ce:1b:4c:c5:aa:c7:b9:b7:68:
68:96:c6:e9:44:5d:2f:71:2c:50:77:01:03:7e:af:
d5:0e:f9:e7:91:a9:07:3d:1b:c5:73:19:79:ed:ac:
fa:d2:b0:8b:0c:4e:b3:da:ab:8e:b4:01:eb:cf:fc:
c2:19:3e:a0:e2:04:7e:de:6c:33:80:7f:6e:2a:69:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A4:A6:3B:A9:E2:49:DC:FE:2B:94:17:82:31:E9:6F:E8:9A:BA:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M6SmO6niSdz-K5QXgjHpb-iaujQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:b7:92:9d:4f:79:b4:57:6b:e5:1b:0b:6e:86:53:a1:3e:0c:
13:de:36:82:24:50:b7:8f:1a:ea:a7:6c:53:2a:d3:ce:0c:9d:
cf:ce:0d:b0:98:6e:99:f7:f4:4e:8f:15:1d:2d:55:4d:97:fb:
c6:30:3e:db:ea:56:93:f9:32:95:78:79:0e:a5:bc:0b:6e:69:
c6:1a:ff:81:4c:56:39:95:b0:89:dc:ef:c8:cd:b6:8a:85:27:
52:93:8e:f9:63:c4:47:e2:f1:fc:2a:f1:3b:0e:9e:62:a0:c8:
b1:08:1c:d1:61:83:5a:ae:18:3f:29:92:ce:31:c0:34:a6:3c:
94:50:c9:14:89:a6:99:3c:46:69:56:cb:0f:d7:d6:bc:96:4e:
36:d1:a7:b1:91:2a:a1:d6:1c:fa:8f:02:0c:8d:8c:dc:ea:0b:
3e:7d:63:98:e5:04:83:14:4b:a3:4a:d8:c0:cd:6c:40:97:65:
45:19:ac:f8:fb:45:12:26:c9:ae:a4:f2:7c:5d:a7:fb:52:0b:
21:b3:73:f9:30:d4:03:be:a2:c6:2d:3e:eb:44:4c:48:c1:45:
67:39:3f:0b:2f:23:00:b8:b0:3f:a1:ea:1d:44:8d:5f:79:73:
97:7d:54:33:71:8f:af:4b:bc:71:26:32:66:87:58:7b:c0:c6:
4b:5b:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org