Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/P5uGzYxatpf9LV3nqOPqZja_8Cc.roa
File: P5uGzYxatpf9LV3nqOPqZja_8Cc.roa (raw, json)
Hash identifier: rEoleoab1hkWQvqbwRLj5I4UgnoonFA/0Nlesi6niiQ=
Subject key identifier: 3F:9B:86:CD:8C:5A:B6:97:FD:2D:5D:E7:A8:E3:EA:66:36:BF:F0:27
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3693
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P5uGzYxatpf9LV3nqOPqZja_8Cc.roa
Signing time: Mon 01 Apr 2024 08:22:12 +0000
ROA not before: Mon 01 Apr 2024 08:22:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13971 (0x3693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 08:22:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3F9B86CD8C5AB697FD2D5DE7A8E3EA6636BFF027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:d9:7e:0d:d0:ea:c5:f3:58:47:31:d3:8d:
c8:91:49:88:37:23:da:b1:58:74:fa:86:2c:b4:9a:
af:cf:b4:f6:31:4b:c9:d4:96:08:5d:00:30:97:0b:
43:88:d1:d1:9d:ca:9e:5f:42:70:05:24:5b:f9:89:
f3:1a:bd:f5:c3:82:b8:74:56:dd:1b:74:0b:51:2c:
27:52:1c:90:dd:7b:78:2f:98:38:6c:bf:21:c0:b4:
cc:5c:26:a6:da:30:7c:25:e4:c9:0f:24:7c:53:81:
35:80:98:06:cb:43:ee:f7:98:5a:49:e7:11:9b:86:
15:7a:2d:a9:b9:e6:09:05:b1:bc:f9:a8:3b:de:d8:
d2:ac:7f:12:f2:16:90:eb:7f:1e:01:23:84:1c:ae:
d6:ab:40:63:4d:80:3f:48:6b:d6:10:c3:73:0e:ec:
6f:aa:52:d9:49:76:16:0a:8f:29:21:4a:fc:58:28:
29:f5:bd:63:b4:53:12:25:67:ce:3e:62:b7:8a:23:
e2:ca:46:b9:dc:1f:6c:97:23:57:9d:ce:89:e9:fe:
16:1c:4c:eb:71:6b:f4:11:ac:4d:85:e7:91:13:0a:
c2:96:a9:3c:64:24:8b:79:2f:3d:08:55:c2:b0:02:
e9:a7:59:0e:f9:f7:25:58:1a:e4:86:82:ff:dd:17:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:86:CD:8C:5A:B6:97:FD:2D:5D:E7:A8:E3:EA:66:36:BF:F0:27
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P5uGzYxatpf9LV3nqOPqZja_8Cc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:13:08:bb:59:b8:44:d7:58:01:26:03:27:0d:73:46:27:8c:
0c:45:4d:7b:dc:41:57:8b:ee:c1:c3:1d:7d:54:b8:76:66:e1:
1e:3a:c5:e1:b6:8c:00:6a:3d:03:53:e8:1d:23:fd:e3:77:b5:
65:b4:c9:41:a3:0c:85:e2:aa:b2:2c:d7:61:06:63:08:3f:e1:
81:87:f2:a9:2f:d3:ba:6b:21:ae:40:27:8e:25:4c:9a:dd:da:
df:18:ed:53:35:93:7e:0f:f4:2c:95:a9:01:a5:45:61:a8:60:
df:a4:d1:b8:39:46:7d:32:80:4f:60:e6:94:59:8c:f7:1f:95:
02:58:3f:98:93:d6:b1:82:d9:1f:c5:41:af:ba:ae:a3:e3:a6:
e1:85:2c:7d:75:e2:f2:0e:b8:71:11:d1:a8:6b:80:f4:5a:ee:
30:1d:91:ec:09:54:7e:00:09:d7:d9:47:11:b9:22:20:bb:40:
91:5e:fb:5f:1a:4c:a4:93:7f:08:38:39:c5:f5:23:2e:de:bd:
a6:79:4e:3a:12:f0:64:01:52:22:a1:f0:08:34:7e:cf:a3:e3:
74:8f:8c:7f:ae:a9:1f:81:2a:70:bd:d1:b7:14:8c:12:35:f3:
03:65:f3:80:14:7a:37:86:aa:da:40:ae:d4:79:cd:9b:a1:df:
11:ae:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:39 2024 by rpki-client on console-ams.rpki-client.org