Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Omv4pO5t3M-Eqze5JMrNIAG19DE.roa
File: Omv4pO5t3M-Eqze5JMrNIAG19DE.roa (raw, json)
Hash identifier: iuxNaKf6Tnx/itLHKuj5wLKA1FdcO7whjhhWByUJa6c=
Subject key identifier: 3A:6B:F8:A4:EE:6D:DC:CF:84:AB:37:B9:24:CA:CD:20:01:B5:F4:31
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 356B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Omv4pO5t3M-Eqze5JMrNIAG19DE.roa
Signing time: Sat 30 Mar 2024 19:22:09 +0000
ROA not before: Sat 30 Mar 2024 19:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 19:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3A6BF8A4EE6DDCCF84AB37B924CACD2001B5F431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:bb:de:ef:57:81:bf:69:2b:eb:2f:ac:3a:
00:41:f2:8b:87:38:b0:6c:77:6b:7d:8a:36:71:2c:
20:03:ad:cf:ee:47:b2:52:65:8b:03:3d:ab:84:e9:
2f:38:4f:38:68:de:e4:7e:66:55:11:8d:d0:ca:78:
40:2b:02:00:4a:3e:e2:ad:26:91:40:aa:47:44:be:
c5:2e:57:22:76:35:00:27:0c:af:8d:0a:37:f3:c0:
51:6a:41:43:e7:17:24:93:36:ca:75:b8:bd:22:16:
0e:fd:f9:57:26:77:fd:e2:d7:13:96:46:56:c4:94:
74:be:97:c2:c2:d7:02:6e:5c:2a:ef:ac:50:7a:bf:
c6:92:12:98:68:95:63:e5:c7:f2:03:27:30:62:c3:
57:e5:ec:a3:fd:b5:48:50:9f:dd:d4:66:4b:99:c1:
5e:c0:36:7b:f0:44:e0:f8:71:3a:54:c6:54:82:dc:
f7:7e:d8:72:65:06:39:cb:19:de:6b:5c:f4:73:90:
d6:ca:18:16:93:b2:d4:d0:10:03:b0:39:96:66:35:
e2:c1:49:dd:1d:30:55:2b:b0:f5:31:83:5c:59:14:
27:58:f7:74:9c:86:e1:47:07:e5:85:4c:e2:30:02:
53:46:ac:2b:0c:dc:ed:40:b7:ef:78:63:41:0d:d8:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:F8:A4:EE:6D:DC:CF:84:AB:37:B9:24:CA:CD:20:01:B5:F4:31
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Omv4pO5t3M-Eqze5JMrNIAG19DE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:fb:bf:c0:45:1c:c7:7c:74:da:63:e7:8a:6b:d2:53:b3:93:
ee:e5:70:d6:1f:d7:e9:3f:c5:eb:dd:43:cc:8f:71:66:28:c3:
26:6d:57:81:b9:8e:d9:c9:39:b2:e3:00:f4:f2:3d:4c:14:a0:
3b:30:36:de:04:2d:54:0e:a1:19:4e:8b:7d:c6:a3:91:29:94:
56:7b:57:c3:77:f9:ec:3a:ca:ce:0c:cf:f0:22:56:16:2e:74:
5b:22:85:61:e8:6c:82:ee:5b:fc:02:36:01:78:a8:1e:0e:05:
52:69:ee:03:ff:dc:40:73:34:a4:64:e2:4c:fb:d0:b2:94:75:
c2:ac:2b:e1:fe:a2:85:0d:27:6e:38:4f:86:90:f9:e1:cc:f3:
2e:85:fe:a4:4d:8f:06:ed:a0:76:45:54:8f:e0:4e:11:86:48:
e6:9e:a0:7e:ac:58:61:1a:e9:ff:77:83:f3:5f:2b:e2:32:69:
4a:2d:d8:65:dc:dd:cc:84:98:88:64:c8:ed:68:1c:63:90:97:
9b:f7:c0:03:46:c1:b3:aa:68:18:f5:7e:2d:40:c3:5e:0b:ad:
67:fb:ba:79:9e:90:d7:2a:ed:c7:b4:2e:d0:06:20:0a:a3:ad:
a9:c0:b2:cf:74:18:78:99:d8:be:1e:8e:8e:45:15:88:0c:bc:
3d:5b:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org