Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PuozSFKOf3MD_febe1hGCZIRs7Q.roa
File: PuozSFKOf3MD_febe1hGCZIRs7Q.roa (raw, json)
Hash identifier: bvbVJhJHkZ3bdpW2/LCRbqPkXvMkcyl//O2kN06zIKI=
Subject key identifier: 3E:EA:33:48:52:8E:7F:73:03:FD:F7:9B:7B:58:46:09:92:11:B3:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4867
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PuozSFKOf3MD_febe1hGCZIRs7Q.roa
Signing time: Thu 25 Apr 2024 02:53:19 +0000
ROA not before: Thu 25 Apr 2024 02:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18535 (0x4867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 02:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3EEA3348528E7F7303FDF79B7B5846099211B3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:96:32:e9:11:47:3d:4a:c2:a9:b2:60:70:69:
d2:2f:de:77:f9:c4:7d:38:e2:99:a0:c1:91:1f:46:
09:51:82:4b:fb:d4:42:d1:ec:24:21:07:0a:38:a0:
95:bb:62:7f:92:e8:57:85:f0:91:5a:e7:9e:02:d9:
19:2f:db:1f:7a:f5:a9:e4:29:87:39:76:70:98:05:
30:08:f5:8b:61:f5:99:80:cf:12:18:e2:43:b8:ae:
0a:42:ef:5f:70:cd:95:02:db:dd:ac:ef:34:40:38:
3e:c0:0b:b2:2e:9b:06:92:1f:db:b0:3a:ff:a9:b8:
df:bf:b7:72:46:a0:75:3a:39:63:7f:69:18:5a:aa:
81:af:c6:10:75:4d:f6:4d:f1:d3:f1:db:67:43:55:
a1:12:b0:73:f0:31:71:54:1e:64:7c:80:44:14:94:
10:55:ab:08:98:74:73:06:46:65:41:08:6a:31:3f:
55:6d:e1:dc:65:71:af:38:50:97:12:bc:50:08:7c:
c8:ba:31:61:7b:15:41:76:36:1b:4d:75:ad:f9:be:
9f:48:10:e9:89:20:5b:84:f2:76:44:e1:96:5e:e4:
fb:e8:f4:ad:69:72:5f:62:1c:21:2a:a9:de:33:79:
e3:92:f4:5f:73:08:6c:aa:7c:cb:eb:64:d7:5d:0c:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:33:48:52:8E:7F:73:03:FD:F7:9B:7B:58:46:09:92:11:B3:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PuozSFKOf3MD_febe1hGCZIRs7Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:04:64:1a:11:f3:37:9e:2c:06:44:fc:ff:ed:e2:bd:52:49:
ef:1d:5d:85:5e:76:93:01:4e:bf:7b:34:f8:ba:35:17:cf:31:
94:a5:89:44:ef:e8:84:15:c9:d1:de:5c:02:cf:4e:5c:48:76:
e1:82:48:ad:87:27:1a:78:f0:1e:79:eb:89:ef:78:da:01:7d:
9c:e3:9f:ca:0a:49:88:9b:e7:0c:b3:97:b5:ce:28:94:60:35:
ad:4e:12:bd:be:b3:09:db:6b:04:b5:b2:b7:3b:3d:33:86:f1:
0e:22:af:17:da:c9:c6:8e:1f:8a:27:8e:aa:09:07:13:48:3c:
aa:6c:65:6a:f8:24:3e:70:54:e0:6e:74:69:2c:e5:fc:b4:98:
70:7e:16:ed:34:d2:6e:cb:85:07:bf:dc:d5:97:ae:72:75:fb:
2d:36:41:e8:9f:f5:55:ef:3e:24:1e:9d:33:95:2c:b1:54:9b:
d0:11:2f:b5:36:ed:59:1a:c0:44:d4:27:2d:cd:95:9f:60:e5:
83:5e:c8:7c:6c:0a:e7:34:7f:d7:19:24:3b:0c:f1:01:50:e2:
08:84:fb:3d:b1:a3:3c:ac:9d:bd:e8:d8:1e:d0:a8:7e:09:96:
26:f5:f3:03:49:9e:4d:02:d1:c0:17:7b:b2:90:72:32:7d:6f:
47:01:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org