Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PHjFYhYVDMZCbPOIaHnF2DLO0Ns.roa
File: PHjFYhYVDMZCbPOIaHnF2DLO0Ns.roa (raw, json)
Hash identifier: W5982hgLxQ4yT+ZY/lmKWWa7AzOo1HJC1uP+acqLFTg=
Subject key identifier: 3C:78:C5:62:16:15:0C:C6:42:6C:F3:88:68:79:C5:D8:32:CE:D0:DB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A0F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PHjFYhYVDMZCbPOIaHnF2DLO0Ns.roa
Signing time: Fri 05 Apr 2024 23:52:53 +0000
ROA not before: Fri 05 Apr 2024 23:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14863 (0x3a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 23:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3C78C56216150CC6426CF3886879C5D832CED0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:78:95:90:7f:a3:8d:ee:09:7b:20:1b:69:
a5:b6:b7:28:f2:53:a7:b4:cb:ed:f1:0d:d4:b0:68:
4a:35:b2:06:8f:d6:4f:e7:d2:bc:01:5e:d6:d3:fe:
96:17:34:ab:21:47:d0:3d:51:1a:9b:9d:fa:a3:40:
ec:e0:89:f1:d7:a5:6c:cf:4e:8f:4a:94:ef:c6:d4:
21:55:e4:1a:d5:c2:df:cb:0f:20:36:d8:8b:ac:af:
7b:6e:d1:ae:02:93:f7:99:bb:7a:b9:52:6b:18:ec:
50:a1:8a:b2:cd:12:1c:5a:a2:a1:74:e3:51:73:21:
f7:d1:4e:dd:06:89:c3:18:4d:fc:77:8a:3d:a5:7d:
aa:af:41:66:e1:e9:6d:32:6a:e6:16:3f:05:49:64:
29:c3:1d:a6:86:a0:ad:1b:d2:52:a6:1a:82:d8:2e:
40:1c:30:aa:bf:3e:3f:37:4b:de:db:2a:74:dc:e6:
86:16:f3:82:1d:9b:3f:44:54:55:1f:61:bf:d7:7f:
37:09:32:72:2a:96:27:f9:4b:aa:81:8a:55:1a:73:
40:96:2b:57:00:8d:f9:d2:95:ba:99:5d:59:69:5b:
ed:9e:75:27:7e:cc:7e:d8:f7:66:cb:9d:16:fa:ca:
d5:f6:c8:4e:0a:3a:69:90:92:4f:5c:8b:3a:0f:aa:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:C5:62:16:15:0C:C6:42:6C:F3:88:68:79:C5:D8:32:CE:D0:DB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PHjFYhYVDMZCbPOIaHnF2DLO0Ns.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:6f:31:a9:d4:26:92:c2:03:bb:b4:9e:83:c9:d9:ad:cb:56:
66:16:a9:81:7f:7b:01:15:e1:1f:4a:ff:12:c1:70:96:fa:2a:
f0:73:21:91:b1:f5:fb:9f:3e:c9:c6:dd:c1:ee:bd:27:ab:33:
3a:46:45:de:e2:ee:66:36:63:aa:19:8b:ae:b5:b1:90:87:7e:
57:36:8b:0f:c2:5b:2c:af:6e:4f:6b:71:6e:44:eb:db:84:f0:
39:64:51:b5:59:20:b4:b4:a3:6f:14:c0:e8:01:cb:d1:2c:43:
b2:07:93:e6:28:06:c0:fe:67:cd:9e:d6:19:1e:96:ce:ac:f0:
16:dd:fc:3c:1d:12:28:c1:ad:56:6a:8c:c2:29:2d:69:7d:61:
17:d6:9c:8a:3c:0b:81:91:ff:a9:de:84:03:2d:11:39:49:58:
3a:b8:b1:96:c2:a8:3c:2f:cb:b3:25:e6:30:38:e6:c2:37:eb:
84:98:5e:99:01:56:66:33:f6:35:4a:aa:3c:ff:b9:93:f6:10:
51:8d:b6:a9:32:62:3a:e0:f4:44:28:90:25:17:04:1a:18:a3:
2b:76:49:98:02:f5:07:c6:95:63:02:1e:86:2e:8c:06:68:d8:
17:29:b6:1e:d8:05:73:19:9e:cd:0a:13:97:01:dd:ea:1c:44:
92:87:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org