Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Pf8FojyOuWBUxXBsQ3L9JrydIyw.roa
File: Pf8FojyOuWBUxXBsQ3L9JrydIyw.roa (raw, json)
Hash identifier: Q15OzctKZ9W8eNGjiNesJGwbmSULQ+IPLzSH1t0ylOQ=
Subject key identifier: 3D:FF:05:A2:3C:8E:B9:60:54:C5:70:6C:43:72:FD:26:BC:9D:23:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pf8FojyOuWBUxXBsQ3L9JrydIyw.roa
Signing time: Wed 17 Apr 2024 14:53:01 +0000
ROA not before: Wed 17 Apr 2024 14:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17095 (0x42c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 14:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3DFF05A23C8EB96054C5706C4372FD26BC9D232C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:c6:92:af:36:d5:45:33:66:15:e6:88:5b:
16:58:14:98:36:ce:a6:4d:42:eb:18:92:47:31:6d:
25:51:9c:c3:b1:af:7c:ba:57:5c:53:70:89:87:83:
92:bd:e0:ef:ac:06:03:b2:3d:e1:5c:1e:9e:4a:4e:
32:19:71:a2:07:82:d4:84:25:76:4f:d4:a3:71:08:
a1:61:19:01:43:00:ac:8f:b6:b9:6d:68:bd:2f:23:
1e:71:25:25:80:c0:51:48:01:a7:d8:e2:15:bf:c0:
19:fd:0a:c3:79:8a:f6:cd:88:9d:ed:4a:f0:5d:65:
22:0a:41:c5:ac:29:ec:38:46:2d:6d:a4:42:2e:93:
6a:e4:e5:1c:2a:82:11:ba:47:a9:10:ad:4f:9a:a6:
98:fc:06:84:79:a0:50:12:c4:d4:5d:a6:80:29:cc:
9c:6b:dd:37:9b:5b:e3:ac:46:67:3f:de:84:f6:ba:
12:c4:47:a6:6d:50:60:97:52:c6:db:46:13:49:81:
42:c9:01:0c:7c:48:a1:2d:50:90:12:7a:54:62:c9:
5b:45:ef:4a:51:36:4c:bb:1c:95:06:09:d1:5c:9e:
f6:c8:fa:b0:fd:6c:10:ad:f7:59:7b:ea:79:83:b1:
42:92:22:63:b8:32:41:72:98:ed:27:37:21:a5:e8:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FF:05:A2:3C:8E:B9:60:54:C5:70:6C:43:72:FD:26:BC:9D:23:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pf8FojyOuWBUxXBsQ3L9JrydIyw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:53:92:89:f0:b7:8c:e9:66:21:6a:d5:77:58:d1:1d:06:0c:
77:6f:b8:a8:4d:91:e0:b7:cf:d5:e2:51:6e:22:fe:b8:a4:5a:
93:71:98:e2:6f:bb:27:89:22:6a:ca:fd:34:d3:cf:64:c9:ea:
7b:c9:12:58:49:99:00:f6:30:e3:b8:b6:ec:ea:bc:73:dc:1d:
56:7d:fb:fc:d0:3b:04:70:0b:01:56:cf:cd:83:38:cd:c8:f1:
f8:a9:f3:38:ee:6a:4d:f8:f6:02:7c:f7:45:07:e8:e7:e3:32:
37:da:5f:b1:8f:23:17:b4:c1:fa:ff:8d:ec:02:d2:07:b9:d0:
95:a3:ea:65:87:34:63:5c:88:9b:47:99:28:11:21:f7:0a:d4:
d5:a4:6b:c2:51:85:47:de:39:cd:e3:a2:82:59:98:1d:43:e5:
32:8e:6f:37:04:ae:14:01:89:de:20:63:d0:93:f6:77:55:e5:
b8:92:85:27:38:d9:f8:34:0b:be:c8:7e:d6:c9:46:73:85:aa:
b5:85:44:d0:d7:29:23:20:1d:e6:d3:7d:6d:4a:0a:65:3a:2b:
78:4f:5b:5f:44:09:1d:40:9a:dc:f7:4d:9d:0c:d8:28:71:df:
ea:55:af:ec:60:48:85:21:81:a4:1f:e3:f3:f2:69:54:db:56:
30:47:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:39 2024 by rpki-client on console-ams.rpki-client.org