Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/N6O-oZs3cgCVEKPz4C6sjCEuNoE.roa
File: N6O-oZs3cgCVEKPz4C6sjCEuNoE.roa (raw, json)
Hash identifier: Hxtua/h2Ej7NnB62C3cYB8OxRPS4aG91IZR3UQKe0i8=
Subject key identifier: 37:A3:BE:A1:9B:37:72:00:95:10:A3:F3:E0:2E:AC:8C:21:2E:36:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5373
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N6O-oZs3cgCVEKPz4C6sjCEuNoE.roa
Signing time: Thu 09 May 2024 20:24:09 +0000
ROA not before: Thu 09 May 2024 20:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21363 (0x5373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 20:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37A3BEA19B3772009510A3F3E02EAC8C212E3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:12:d9:89:f2:b0:31:fe:b8:f3:6d:de:ea:
89:e9:74:5d:66:c8:48:e3:ef:7c:9f:a3:75:a4:66:
ab:7c:fd:d8:89:5b:41:af:cb:12:a6:79:9c:f8:f9:
2b:d7:6b:60:5d:d5:e4:a2:0c:7c:85:86:ba:8d:8b:
3f:4a:2b:d2:98:08:a4:36:63:d8:67:97:75:8b:e4:
5f:af:f8:02:64:5a:c6:dd:8c:82:75:97:aa:06:ff:
9a:64:ce:dc:61:72:9f:18:9e:77:16:6d:59:da:6f:
d8:db:5d:af:73:ee:29:c3:af:f7:71:b5:d1:5d:b8:
c3:dc:61:8e:8e:78:e1:1c:ee:77:0e:75:43:56:62:
a7:95:57:6c:14:9f:95:70:d9:9a:11:58:ee:b0:7a:
1c:e9:b4:81:05:51:34:f8:54:1b:ac:c2:c1:49:79:
38:73:31:d3:73:99:9d:52:d0:a4:b0:3f:56:0f:47:
8e:a9:c1:b6:07:be:05:bb:63:5a:78:24:9a:9d:7e:
e8:b5:95:f6:c0:d9:12:99:2d:d0:7e:24:2d:4b:33:
79:a1:0f:87:06:07:13:9d:c6:22:41:93:49:ad:b3:
cd:4d:2d:79:51:9d:8c:c2:81:28:7e:11:fe:67:6d:
d5:33:6f:57:cf:a1:94:16:7f:55:48:2c:28:75:a8:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:BE:A1:9B:37:72:00:95:10:A3:F3:E0:2E:AC:8C:21:2E:36:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N6O-oZs3cgCVEKPz4C6sjCEuNoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
85:42:65:4a:91:5a:78:0b:a0:5c:33:8f:49:70:18:dd:f8:df:
78:6c:93:52:58:8a:e1:d3:34:49:6a:94:41:6c:25:8b:78:1a:
e8:ff:33:a5:ce:c2:14:33:21:17:b6:23:a0:c9:64:99:4e:07:
ec:ea:03:1b:14:6d:08:10:50:e0:b4:5b:06:3f:64:50:fc:ee:
33:aa:5c:85:d1:7e:47:64:69:d1:7e:92:44:03:8c:ca:e3:8e:
cb:30:52:70:47:e7:d9:dc:30:64:c9:ea:0a:b8:47:9b:71:1e:
84:a5:e8:28:47:6c:74:bc:38:02:6a:1d:e6:cc:4f:7b:84:95:
d2:7d:9e:8d:bd:04:1c:5f:c6:03:92:b5:c7:ef:f1:90:13:68:
83:d1:8a:a5:68:6f:87:b8:79:35:11:48:53:56:79:88:fb:ba:
ee:c0:f5:d8:30:55:c9:6a:31:b5:42:27:39:bc:d7:cc:45:de:
f4:6d:41:54:ad:d9:4e:70:5f:2e:b9:26:a6:a1:86:d5:c9:d4:
cc:cd:1c:cd:9d:2d:6b:fb:ce:78:d0:4e:f6:4b:40:4e:f9:4f:
5d:b7:82:91:84:dd:60:cc:fd:51:c5:93:29:16:f1:11:1e:f7:
ee:f5:f5:30:fa:59:d2:21:96:ad:e4:01:ff:66:8c:91:2d:65:
3a:54:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:21 2024 by rpki-client on console-fra.rpki-client.org