Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MFBI7Kb1Z7pIXbeUaQjsrTbSU6c.roa
File: MFBI7Kb1Z7pIXbeUaQjsrTbSU6c.roa (raw, json)
Hash identifier: Gm2+COYPj4N9BHt9YCni2VTJJ2KhCBXDuI3U2QyDeII=
Subject key identifier: 30:50:48:EC:A6:F5:67:BA:48:5D:B7:94:69:08:EC:AD:36:D2:53:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4557
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MFBI7Kb1Z7pIXbeUaQjsrTbSU6c.roa
Signing time: Sun 21 Apr 2024 00:53:05 +0000
ROA not before: Sun 21 Apr 2024 00:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17751 (0x4557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 21 00:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=305048ECA6F567BA485DB7946908ECAD36D253A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:dc:7c:1c:df:ec:68:1f:22:6b:0b:6a:a4:
5e:74:55:3f:ac:0b:75:6e:57:36:3e:76:18:5d:58:
4b:c0:97:ef:a0:3d:9e:b2:15:6f:86:87:b8:33:e1:
16:f1:54:37:f1:38:c9:d3:15:ff:89:b9:36:af:ae:
bf:8f:3b:90:94:1d:ff:5a:28:91:64:5f:94:06:d4:
03:f8:48:07:58:cf:dc:f3:8b:5d:1c:c9:3e:67:08:
86:b3:c6:72:02:19:f8:49:80:a7:56:9e:5d:d1:42:
a0:e7:a3:ba:23:48:90:fe:e0:3e:d5:d2:ea:d1:d8:
84:92:08:d0:79:83:5f:3c:0a:5a:7a:ae:0b:8d:2c:
83:78:c0:95:b9:21:6e:73:1b:7d:b9:d0:d8:83:f1:
73:09:ba:78:28:53:84:c1:18:55:4d:30:4f:49:18:
95:bc:a6:8e:bd:f8:c9:1e:99:a1:de:41:ef:dd:26:
69:78:23:2a:7b:6e:b8:b0:99:2f:e0:51:b2:4b:0f:
60:25:87:85:bf:57:de:d4:f6:8f:8c:53:4e:5c:77:
2d:fa:db:e7:a4:a7:1a:9e:2c:27:99:ab:dc:ff:43:
63:93:05:f4:f8:13:96:39:c3:ec:55:49:0f:c8:65:
6e:f6:55:d3:3c:7f:93:37:e3:4f:27:82:d7:c5:ac:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:48:EC:A6:F5:67:BA:48:5D:B7:94:69:08:EC:AD:36:D2:53:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MFBI7Kb1Z7pIXbeUaQjsrTbSU6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:ed:19:80:c5:16:a7:44:9a:b7:8a:89:88:2d:32:5d:57:55:
30:1a:58:7b:36:41:4d:ce:4c:f0:56:a6:d3:28:ff:54:85:9f:
a8:07:6d:2a:4b:12:26:95:6c:eb:1c:7f:e2:0d:ee:e1:4e:ba:
ae:78:89:c8:29:5c:97:12:e2:70:3d:5b:32:b1:d4:85:bd:10:
e1:2b:8f:d6:d6:92:b3:6e:c5:b7:25:5b:f4:69:3a:4f:a0:fd:
15:0f:22:88:54:d3:97:01:48:b8:b9:b6:b1:5a:04:20:1e:fc:
f1:fe:94:fd:c0:04:29:e5:95:4f:78:90:dd:e8:a6:de:2e:89:
ad:80:91:e9:90:15:a8:ba:fc:e8:41:a2:8e:eb:26:6a:22:87:
62:ff:64:f0:8c:c6:36:ff:3f:03:f0:8f:b6:56:6f:07:98:d6:
9c:33:c8:e4:39:88:db:0d:ac:ae:d5:b1:72:76:98:c1:50:a5:
82:74:6d:e0:f3:1e:ec:a8:40:1f:d1:41:19:19:a8:1f:fc:39:
8a:8e:0e:ad:1e:c6:ec:c1:b1:47:1b:26:e0:3b:23:61:da:af:
7c:61:be:88:4d:7e:3a:7d:35:dc:78:ce:a2:7b:b4:4f:f3:4a:
4d:36:77:ef:e9:7b:25:57:d2:74:bd:a0:10:22:d4:f7:0e:db:
ee:7d:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:34 2024 by rpki-client on console-ams.rpki-client.org