Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Pud6DLXN40Gf1v7RgXQAT-buQ6c.roa
File: Pud6DLXN40Gf1v7RgXQAT-buQ6c.roa (raw, json)
Hash identifier: bHnW46fM6fDVYozF5NLIUjnWSVAJhehtx4ymn5nW8kA=
Subject key identifier: 3E:E7:7A:0C:B5:CD:E3:41:9F:D6:FE:D1:81:74:00:4F:E6:EE:43:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 358F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pud6DLXN40Gf1v7RgXQAT-buQ6c.roa
Signing time: Sat 30 Mar 2024 23:52:08 +0000
ROA not before: Sat 30 Mar 2024 23:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13711 (0x358f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 23:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3EE77A0CB5CDE3419FD6FED18174004FE6EE43A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:fd:76:3f:70:25:52:c4:11:63:48:35:59:
0d:e4:30:49:b3:51:b7:35:bf:83:8d:51:60:26:98:
22:09:62:a9:4e:9a:5d:ab:5c:03:e0:e9:0b:e3:79:
58:15:ca:c7:d0:d2:5f:51:26:46:68:c7:92:db:53:
80:94:09:2b:7f:64:6c:0a:0b:4b:2f:99:70:24:c8:
7c:42:4e:ce:8b:b9:c0:dc:6f:9d:f9:f7:b4:a9:1d:
09:d1:7e:81:73:da:b7:88:5c:72:69:53:9f:a1:b9:
38:1d:dc:5d:22:94:12:0f:44:d9:ad:b2:9b:03:f2:
22:2e:4a:8f:53:4b:2b:ac:fd:28:4e:c0:94:a6:1c:
2e:2a:88:37:03:e9:31:4e:0d:4c:8d:5b:11:aa:b7:
86:51:bd:07:02:65:5b:94:04:9b:02:f2:14:3d:37:
40:a2:23:b9:9d:db:e9:e3:53:84:58:80:a9:c5:fc:
e0:05:06:17:22:b0:03:05:38:c7:99:1b:75:ed:a7:
69:7b:02:55:4a:9a:9f:d5:e6:37:5a:18:28:3d:6d:
e2:bc:cc:b5:51:fb:26:30:1a:6f:88:60:1a:3a:d8:
78:7c:62:7a:ab:32:a8:df:50:cc:15:d7:f0:1d:b2:
14:27:20:2c:a0:02:4b:66:4a:7f:3c:20:4a:07:cc:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E7:7A:0C:B5:CD:E3:41:9F:D6:FE:D1:81:74:00:4F:E6:EE:43:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pud6DLXN40Gf1v7RgXQAT-buQ6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:14:1a:ff:fb:79:18:af:c7:39:98:94:99:75:7b:90:05:39:
90:91:f2:b6:2e:9e:81:36:40:89:70:47:83:7b:e0:9a:f9:6d:
20:c2:bc:03:43:26:47:bb:3c:7f:60:78:97:9f:4d:0d:f9:f1:
2a:02:43:ea:89:65:35:ef:52:68:b9:6f:87:52:22:c8:0a:1d:
5e:0b:e6:8b:62:4a:d0:59:13:81:31:16:70:34:f8:4b:c5:92:
44:ed:35:98:d0:75:47:39:f3:d7:1f:44:08:3d:14:66:5a:c0:
55:9f:95:a8:ce:e5:c1:43:fa:1f:22:7c:a0:a7:21:92:19:4c:
65:73:e2:91:78:2f:e7:79:e2:13:66:87:06:16:c7:85:24:0c:
3c:69:01:a0:f6:3f:5e:3d:6f:9e:42:12:c1:0b:16:f5:3b:a3:
cf:07:e4:2e:cc:a3:c0:6f:3d:35:1f:f1:f4:9f:28:34:09:7e:
e0:c4:38:d5:58:ca:cc:63:85:08:f7:18:76:38:45:76:89:f4:
d8:aa:1a:0d:55:a6:1c:36:66:81:48:62:55:d6:40:b6:b1:7f:
6c:fd:e4:36:53:ca:17:1a:93:98:f7:55:a7:91:dc:51:d1:84:
4a:9b:0d:b7:f8:e7:1a:5d:29:bd:34:61:87:5a:97:2a:0c:f5:
d8:50:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org