Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MDXTX5FNiefjwR7A8fm8YRh9lG4.roa
File: MDXTX5FNiefjwR7A8fm8YRh9lG4.roa (raw, json)
Hash identifier: gvEw4gE7z4q8cR3VbGWZkus+Gsx566S/BJjVhzqsMNk=
Subject key identifier: 30:35:D3:5F:91:4D:89:E7:E3:C1:1E:C0:F1:F9:BC:61:18:7D:94:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C1B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MDXTX5FNiefjwR7A8fm8YRh9lG4.roa
Signing time: Mon 08 Apr 2024 17:22:36 +0000
ROA not before: Mon 08 Apr 2024 17:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15387 (0x3c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 17:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3035D35F914D89E7E3C11EC0F1F9BC61187D946E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:30:c6:20:2f:b2:ae:97:dc:ff:72:2f:df:
22:7a:57:8b:e9:c9:d1:91:bf:9e:cb:da:02:60:e2:
d9:23:c8:42:51:f3:41:c3:db:e1:af:0c:03:f1:06:
03:0e:b7:54:0c:60:48:58:2d:f7:c3:ef:8d:06:44:
bc:05:ed:16:76:cd:d9:3f:65:76:98:75:4a:d8:f3:
44:b8:c4:c6:ad:e4:e1:90:f6:c1:a2:5e:f7:82:5c:
bd:e6:5e:40:1c:61:2f:8d:cb:e1:92:b7:0a:27:09:
3b:c6:6b:24:97:93:1e:de:a0:56:cd:5f:03:de:28:
88:cb:91:05:e4:6a:15:ca:d8:95:b1:38:4b:44:0b:
87:42:30:05:48:ef:ef:04:b3:92:05:9c:ee:02:89:
46:b1:1d:b7:11:70:b3:54:b0:bf:be:dc:ca:25:b0:
33:b0:55:1d:24:d0:77:cb:ed:f2:d8:39:57:e0:dd:
40:60:c3:14:24:6a:f8:9c:79:a0:32:0e:44:6f:d3:
7b:0a:2d:a1:0e:f1:a0:dc:19:8c:6c:f9:03:fa:f7:
44:64:9e:47:53:0f:ac:18:ec:6e:72:48:bf:7a:23:
f3:33:3b:df:b4:e1:ad:11:03:6d:09:b7:03:34:1f:
60:26:aa:bd:01:5c:3b:1e:b9:0a:fa:d4:d8:3c:06:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:D3:5F:91:4D:89:E7:E3:C1:1E:C0:F1:F9:BC:61:18:7D:94:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MDXTX5FNiefjwR7A8fm8YRh9lG4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
26:2f:d5:08:d9:9d:40:89:c6:69:84:57:19:be:d0:30:05:4b:
a0:d9:90:1b:44:42:ac:99:5f:55:73:03:03:48:52:af:33:75:
5a:90:c1:5b:a1:7c:13:75:0b:e8:71:90:b3:cf:54:3b:2f:c9:
48:4e:54:0a:97:dc:e8:54:1a:5c:b9:6c:a0:6b:f6:1e:35:9e:
53:35:0d:e7:de:f1:e7:90:1a:67:34:2e:40:18:68:9c:92:16:
d9:e8:a0:23:81:c5:57:e0:dc:ae:12:e6:8b:23:3c:d3:e5:da:
fb:4d:5a:15:bb:92:7f:ba:24:1f:31:92:78:d0:85:9e:b4:ee:
ad:0b:4d:1c:4b:61:6f:c8:c3:1c:d0:23:50:de:4c:fc:df:30:
24:bb:53:11:30:fb:0f:c4:25:62:02:cb:91:a0:e1:8e:38:b9:
7b:d6:aa:99:d8:e3:de:3e:3d:bd:30:a5:79:31:95:f8:a8:31:
34:1d:15:2b:d5:3a:91:b5:ec:9d:d1:ee:41:d2:3a:82:14:04:
5b:c2:8a:3c:95:c0:3f:de:84:a5:ba:c0:f6:8a:9c:e1:1c:0a:
17:45:2c:68:cc:c1:bd:bb:9a:c5:32:16:f9:6a:9d:6e:b0:f1:
b1:76:0d:98:1f:ef:e6:7c:81:02:2b:a0:63:d9:03:b6:9e:2f:
10:44:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org