Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OwI63T3VhxEk4ZMHsqfKaXvrq5Y.roa
File: OwI63T3VhxEk4ZMHsqfKaXvrq5Y.roa (raw, json)
Hash identifier: xKo+fUuZwJvj8HfMfbyHmaK9ZDLMCgSS5I5Mr+CTnmk=
Subject key identifier: 3B:02:3A:DD:3D:D5:87:11:24:E1:93:07:B2:A7:CA:69:7B:EB:AB:96
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BA7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OwI63T3VhxEk4ZMHsqfKaXvrq5Y.roa
Signing time: Mon 08 Apr 2024 02:52:34 +0000
ROA not before: Mon 08 Apr 2024 02:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15271 (0x3ba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 02:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B023ADD3DD5871124E19307B2A7CA697BEBAB96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:13:d0:62:54:a3:d9:83:bb:0f:07:c6:f0:
be:0f:0d:a9:8d:0e:64:e0:92:3d:a8:f9:7b:98:30:
2a:56:07:b2:eb:0b:af:b3:a2:ab:96:dd:a1:a3:0f:
67:14:9b:98:5f:c7:d3:fe:79:45:bf:cf:ff:59:88:
40:39:14:a9:ed:e0:d6:c7:21:44:1c:e7:c7:3e:6b:
be:31:fa:2e:8b:a1:ce:65:a1:17:72:f8:28:1d:28:
7f:bb:c2:3a:ac:c1:05:42:c8:69:f0:3d:0c:75:12:
38:8e:7a:18:cb:c7:95:31:1c:68:c5:36:17:bf:d8:
cd:1e:36:b0:65:ce:6b:80:d4:7c:e1:48:d8:11:0e:
17:9d:c2:cc:d0:6b:5d:57:c5:18:1f:ec:69:c4:f3:
4a:63:bf:f1:76:1c:e1:ab:29:86:87:b9:5b:41:71:
cb:0e:eb:1e:e1:59:38:47:9d:09:5e:99:a9:92:92:
0c:0c:62:83:45:c5:f3:b2:ea:66:42:b7:1e:c5:81:
85:ac:10:58:ed:3b:31:c3:33:0c:2d:32:7f:79:a6:
29:54:cc:6e:a0:44:ae:a5:46:4e:fe:17:07:4e:f4:
e8:95:73:f6:5f:09:28:23:63:66:31:45:75:f4:31:
06:36:88:43:4d:e5:7a:35:16:9f:a7:df:25:5a:e4:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:3A:DD:3D:D5:87:11:24:E1:93:07:B2:A7:CA:69:7B:EB:AB:96
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OwI63T3VhxEk4ZMHsqfKaXvrq5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
65:56:42:66:50:70:4f:85:a4:ed:44:fc:f4:df:26:a3:ea:ef:
c4:41:30:91:87:5c:77:65:9d:72:f8:21:44:ce:f0:b0:d1:b1:
f0:3d:85:3f:cb:78:2c:06:30:7e:1e:7e:f7:10:fb:5b:a1:be:
7c:98:7f:6d:1c:88:23:32:0e:7e:d6:39:ff:46:fe:72:13:70:
7a:2f:c5:88:af:e3:53:a6:21:c6:c9:8e:18:0e:e0:8e:89:df:
4b:0a:e8:1e:22:db:66:3b:29:a6:2a:08:0d:68:20:94:a3:d7:
33:b1:39:46:8f:57:5a:60:7a:95:33:7e:e0:3f:9d:23:a9:69:
a3:85:ac:9f:5b:06:e6:f6:3f:54:8b:b0:e4:fa:ac:94:bc:25:
2d:19:2b:aa:90:6e:bc:54:42:fc:b8:17:b7:c2:95:bb:d8:17:
b2:2d:52:dc:de:7b:97:e0:bc:a4:a8:b1:7a:63:08:4a:ae:72:
98:e8:cc:93:26:68:0d:28:ef:0a:ca:9f:20:82:e4:39:d4:6a:
26:f9:39:3e:ac:fd:fd:b9:79:67:d9:68:07:15:e5:e9:ed:06:
c8:af:67:04:d8:eb:03:2a:68:48:55:cd:9b:22:29:35:b7:d3:
28:2d:0f:72:ed:f3:01:15:1a:05:ec:fa:52:e6:c5:ab:59:2f:
70:84:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org