Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QC7qZp7vLKqUK0hk2lr-BHCVEtI.roa
File: QC7qZp7vLKqUK0hk2lr-BHCVEtI.roa (raw, json)
Hash identifier: SpFs3NXVrVPKU3fQSJv1QJaAf5qFSAq/d2PvZBfNQ5k=
Subject key identifier: 40:2E:EA:66:9E:EF:2C:AA:94:2B:48:64:DA:5A:FE:04:70:95:12:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 424B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QC7qZp7vLKqUK0hk2lr-BHCVEtI.roa
Signing time: Tue 16 Apr 2024 23:22:57 +0000
ROA not before: Tue 16 Apr 2024 23:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16971 (0x424b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 23:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=402EEA669EEF2CAA942B4864DA5AFE04709512D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:ab:04:22:09:d3:5d:03:d4:f0:99:c9:4a:
fc:d1:79:63:7c:08:9d:c7:fb:ed:a3:43:8e:d1:d5:
2c:dd:01:2e:21:ce:06:64:3d:78:87:f6:81:07:79:
e4:41:c2:f3:94:49:c8:af:a8:6d:8a:25:6a:e7:bd:
a7:ad:ff:7e:03:f0:4f:67:0f:ba:1b:fa:f6:ae:f6:
49:f3:b3:f6:9f:24:ff:64:59:6b:48:39:19:92:10:
b3:a5:4f:8d:1c:3d:77:05:34:a8:c4:14:34:72:61:
1f:b8:19:9a:49:69:e2:b7:ff:c9:a3:ec:c9:df:91:
64:a8:d8:6e:33:e7:59:23:78:43:b3:bb:bc:4d:09:
7d:32:31:21:65:58:fe:46:cc:60:6f:6d:70:54:6b:
ba:25:10:1b:2c:ec:df:0b:88:fa:8f:27:33:4a:ff:
aa:e7:4b:16:8b:b9:ce:a7:be:0a:bc:02:95:49:eb:
fd:6e:74:96:78:04:7e:f7:ac:9e:fa:15:4d:ea:88:
c7:a7:bb:c0:60:d6:21:1c:50:f9:15:6b:9f:f4:a0:
6a:7b:2c:f7:dc:b8:19:f1:3d:6c:d9:16:87:46:ad:
b7:8e:cd:85:09:f5:e7:ec:d9:be:8d:2e:af:78:e2:
00:1b:fd:2f:ac:44:57:8c:9d:21:22:3e:d9:b5:14:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:EA:66:9E:EF:2C:AA:94:2B:48:64:DA:5A:FE:04:70:95:12:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QC7qZp7vLKqUK0hk2lr-BHCVEtI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:c7:fb:88:94:b7:c4:a0:7a:fb:48:c0:6a:b4:f0:1f:7e:85:
0d:9f:e3:26:2d:aa:85:d3:7a:52:5c:cb:5c:cf:32:f7:5c:be:
4d:5b:3d:c2:97:ff:f3:71:f8:de:15:3c:2c:f0:dc:07:7e:38:
21:eb:46:b9:6a:4e:6c:99:68:54:7f:90:39:c4:e4:e3:cc:5a:
f2:6b:84:31:68:40:b8:fe:ab:95:a3:a9:1c:14:30:a9:71:c5:
33:57:93:39:e0:b6:e8:fe:e5:72:9b:88:d4:f5:8f:6e:20:65:
a8:73:74:43:b2:14:dc:4d:35:08:51:05:94:0b:9d:74:cf:a9:
7f:9f:b3:91:d0:df:d2:7d:1c:bc:f1:f2:17:44:e5:ed:ec:5f:
24:de:75:1c:38:49:e3:3e:3e:76:4a:46:3e:e1:d9:c4:c7:09:
eb:08:f9:b5:80:96:56:30:40:ac:0a:32:05:8b:38:ff:69:1b:
3b:cd:5a:db:b8:76:ef:75:ed:39:9d:cb:4e:a5:cb:25:d2:df:
4e:de:77:d9:8f:9b:f1:00:2c:6e:89:a6:7f:a5:2d:ce:a5:db:
37:3a:52:36:e0:b7:b9:f5:9d:59:94:b9:77:87:34:70:5b:30:
f7:74:c4:20:91:8d:7a:b9:e7:f2:5a:94:08:bb:ef:4c:8c:97:
d3:41:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org