Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O_InTUiTi94Jb671n6SyzFyUDZg.roa
File: O_InTUiTi94Jb671n6SyzFyUDZg.roa (raw, json)
Hash identifier: B06CUEPUlhU19B6/nSehZeu2ewWrKMdStVpI4fOydTQ=
Subject key identifier: 3B:F2:27:4D:48:93:8B:DE:09:6F:AE:F5:9F:A4:B2:CC:5C:94:0D:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 480F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O_InTUiTi94Jb671n6SyzFyUDZg.roa
Signing time: Wed 24 Apr 2024 15:53:34 +0000
ROA not before: Wed 24 Apr 2024 15:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18447 (0x480f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 15:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3BF2274D48938BDE096FAEF59FA4B2CC5C940D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:23:86:89:2f:5e:de:73:15:71:d8:1e:9b:
0a:89:99:a0:2c:63:24:6f:27:0c:ba:56:fa:ec:27:
1e:14:98:a3:54:4a:64:ba:4f:97:c9:55:3c:2f:c8:
e2:2a:10:09:67:ed:28:82:1f:f1:8f:99:d5:bc:5f:
cf:c1:79:f3:3b:9a:67:d5:e7:b1:4b:cc:18:c6:29:
5b:7f:34:23:37:d0:4d:3f:63:d4:6a:88:c7:e7:17:
df:f7:b0:7e:00:b4:10:55:3a:33:da:6f:1c:ca:79:
18:83:fb:38:57:e3:d1:2b:b3:c3:ad:2c:67:e5:40:
10:2c:64:45:80:26:12:55:53:6c:47:6f:68:c5:d1:
f1:df:c2:80:8e:81:17:65:31:b7:a0:00:74:bf:61:
0c:6d:99:a1:ad:86:70:85:cf:43:a8:cb:f9:9f:79:
7d:bd:6c:7c:5d:22:2c:7a:0e:c9:20:68:89:4d:86:
f9:75:c3:50:c1:5b:29:43:b2:3d:52:0d:af:68:2b:
0c:40:22:c8:cb:09:7b:c1:54:22:d9:2e:d0:bf:1d:
a0:97:1a:c2:e1:96:13:3f:39:1c:64:b6:2e:5b:f6:
9d:52:ef:48:e9:6f:bc:b1:eb:74:ca:31:07:11:7d:
a3:5d:3f:02:ee:39:cd:dc:aa:51:f7:51:28:49:b9:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:27:4D:48:93:8B:DE:09:6F:AE:F5:9F:A4:B2:CC:5C:94:0D:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O_InTUiTi94Jb671n6SyzFyUDZg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:2e:f2:65:2b:d1:dd:d6:df:ba:f7:e5:c1:33:d6:e7:61:cc:
88:7e:7c:94:fa:7b:bb:72:04:fd:e1:51:67:ce:40:45:76:4e:
36:c1:03:34:ff:34:78:88:50:e1:11:16:44:35:4a:8e:ff:bc:
1e:07:29:fc:4c:7c:1a:0c:56:f0:fe:08:71:48:bc:c3:13:03:
1d:13:05:53:23:15:5b:9b:79:72:9a:16:fa:9d:8a:ec:37:1c:
a2:93:ea:5c:67:fd:42:a2:fc:79:01:7f:46:f5:3b:f1:ee:b5:
bf:37:66:d8:a0:44:63:2a:89:9b:77:58:01:d2:57:95:d9:13:
81:1b:c4:6d:f3:3c:3c:d6:8d:20:00:ff:6e:36:5d:8f:9e:8d:
c5:c0:d9:ef:bc:6d:ca:9c:a4:ab:09:a2:70:42:75:9f:0f:da:
b5:fa:2d:66:bc:fe:bc:57:bd:8d:aa:0c:2f:d7:96:68:9b:4f:
aa:15:07:46:7e:8d:bd:1d:ef:33:b5:a7:13:35:e1:eb:07:bb:
5a:33:2d:4d:53:72:fa:93:7c:cf:5f:88:ca:7a:1e:a0:dd:a0:
80:1f:e0:90:ca:e3:11:b4:73:66:ee:7f:63:18:c0:d4:d0:47:
4b:0d:29:ec:54:47:68:5d:46:fc:ff:c5:18:5b:ba:82:9c:cf:
d4:a0:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org