Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MLuH9FiNxUQsSs1HowhqRHLoK4I.roa
File: MLuH9FiNxUQsSs1HowhqRHLoK4I.roa (raw, json)
Hash identifier: y3AWPtbpNTTbytXjNPPrZPEXDg/ptNVyJTGxBru+qdo=
Subject key identifier: 30:BB:87:F4:58:8D:C5:44:2C:4A:CD:47:A3:08:6A:44:72:E8:2B:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3553
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MLuH9FiNxUQsSs1HowhqRHLoK4I.roa
Signing time: Sat 30 Mar 2024 16:22:27 +0000
ROA not before: Sat 30 Mar 2024 16:22:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13651 (0x3553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 16:22:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=30BB87F4588DC5442C4ACD47A3086A4472E82B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:96:2c:38:67:b6:31:64:85:59:81:72:ee:
61:10:ed:b6:b1:59:b5:10:d8:17:4a:d6:de:80:da:
d8:b5:17:99:39:e0:5f:7b:c1:f7:36:51:96:2c:8d:
57:c8:c1:99:76:79:34:ad:32:49:bb:bd:24:a2:68:
13:2e:88:bf:da:16:b9:1d:f8:0f:a5:c7:7d:6b:63:
fd:28:16:83:45:77:ad:d6:6a:a5:3c:3f:af:34:25:
f8:e0:a3:b6:0a:27:37:fa:2f:70:9e:ad:03:95:20:
fd:cb:32:a1:60:c7:f3:25:07:a7:10:7e:8a:d1:e1:
c6:f4:5f:48:b7:2b:6f:58:1c:69:ed:21:eb:0a:fe:
97:fa:c5:26:72:5c:bd:ea:72:ab:1d:aa:e3:d9:b7:
cb:57:2a:fe:e5:af:7c:a9:54:76:8c:43:2c:62:34:
e3:86:11:2b:47:20:16:96:65:a4:3b:46:4b:15:4b:
b9:f6:50:47:1b:39:99:9f:08:43:6a:28:06:f7:a1:
25:96:25:3a:94:d9:e7:6c:8a:5b:8a:40:24:eb:dc:
20:ff:ad:57:96:7c:cb:68:8e:d9:f5:bb:d7:3d:d8:
5c:31:df:06:3f:ca:b1:98:b7:c8:8b:27:a6:df:e5:
be:33:f7:11:f8:96:62:30:3f:63:2e:ac:d5:96:fc:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:87:F4:58:8D:C5:44:2C:4A:CD:47:A3:08:6A:44:72:E8:2B:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MLuH9FiNxUQsSs1HowhqRHLoK4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:b5:76:41:f2:49:71:7e:86:1e:e9:95:58:f0:24:c7:10:fb:
c4:d4:36:f9:43:10:ed:cd:6a:88:8c:52:d6:50:aa:c7:28:e7:
ae:ad:1c:c3:bd:6c:1e:48:45:0e:7f:b0:c8:0e:4b:b3:55:4f:
3c:52:b4:ec:ca:bd:10:ba:6a:d6:37:20:08:01:0f:b6:6c:1e:
1c:5f:03:57:65:84:6a:f3:fe:99:17:9a:88:16:f1:c1:f7:b2:
07:36:3e:f0:e6:fd:b0:4c:af:59:d7:42:41:30:71:38:96:19:
ca:ba:34:33:87:6d:b3:6f:17:5f:6b:85:e6:ac:1c:a6:02:1b:
74:81:5f:d6:7d:66:48:fe:ff:8b:b3:63:31:73:79:0d:18:0b:
a3:2f:94:a4:1c:7a:fa:2d:8f:1d:c9:db:f2:4a:c7:b5:a2:49:
80:48:e4:84:0b:ba:42:d8:41:be:86:3a:3e:53:41:96:72:e4:
7d:94:51:c4:cd:5d:1f:ae:a5:29:cc:e6:b7:8b:3a:85:63:39:
99:07:99:f9:bd:4b:c8:f8:1c:81:7a:95:14:b4:f6:f4:f7:43:
9d:19:ce:fe:2a:c3:96:d7:4a:15:de:0b:bf:91:41:bb:38:97:
dd:44:6c:6b:aa:b8:14:cd:3d:18:29:4d:38:61:5c:35:7c:4f:
6f:42:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:34 2024 by rpki-client on console-ams.rpki-client.org