Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QoOiYGkaAv3wPxLxD5-uOhiiS6U.roa
File: QoOiYGkaAv3wPxLxD5-uOhiiS6U.roa (raw, json)
Hash identifier: Ucup5vPJzBO0Mt+8tBYFbUgTkHAL6PVOp1uNX2pXegE=
Subject key identifier: 42:83:A2:60:69:1A:02:FD:F0:3F:12:F1:0F:9F:AE:3A:18:A2:4B:A5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QoOiYGkaAv3wPxLxD5-uOhiiS6U.roa
Signing time: Mon 06 May 2024 03:23:54 +0000
ROA not before: Mon 06 May 2024 03:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20651 (0x50ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 03:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4283A260691A02FDF03F12F10F9FAE3A18A24BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:d5:e8:88:20:90:67:f6:5a:12:98:e1:6d:
ff:3e:80:f9:0d:90:c7:b8:ef:46:7b:90:41:9e:8f:
00:33:cd:c0:a5:ca:25:a9:32:66:a0:b7:d6:f1:4e:
44:63:bd:18:8e:09:a3:62:03:93:69:75:d2:f3:28:
64:f1:ea:27:94:6d:74:c2:a3:0b:83:84:a3:2b:33:
6a:38:9f:04:d0:8a:24:89:8c:ab:81:95:ee:11:23:
07:0e:5f:76:6c:22:6c:3e:19:bf:40:84:42:1e:80:
4b:74:9e:6c:66:9e:22:0d:29:8a:fe:4d:7a:3e:3b:
21:ea:8b:a8:d6:2b:24:22:7d:e0:d2:79:2d:56:49:
d9:a5:bf:93:ca:eb:23:92:eb:af:a6:ce:5a:82:ac:
0f:2e:18:d7:4e:f8:1e:a1:6f:51:c5:80:58:c2:d1:
ed:fc:50:49:39:79:cb:81:17:87:86:21:99:f4:f8:
18:33:5f:50:a5:74:11:16:db:a2:21:03:6e:6b:64:
11:1e:17:80:51:c4:22:a1:36:3d:c5:7a:da:b5:4c:
bb:15:46:ec:5a:3c:d9:af:1d:23:13:94:b9:df:c1:
27:3b:19:96:3d:05:58:5c:68:16:3f:91:3f:93:31:
63:b1:f1:ec:a7:23:3e:cf:f8:14:c6:30:39:52:e1:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:A2:60:69:1A:02:FD:F0:3F:12:F1:0F:9F:AE:3A:18:A2:4B:A5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QoOiYGkaAv3wPxLxD5-uOhiiS6U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:ed:75:19:c3:c1:8f:6a:1a:e3:15:2d:d9:1b:07:5e:2d:ac:
7e:f4:3b:45:56:59:a8:ae:43:0b:ac:60:26:38:e5:b8:90:d9:
65:ec:70:02:37:ee:2e:de:9c:99:9a:ca:c7:4c:66:28:b5:a9:
8a:cb:96:a8:a2:6f:46:46:ff:2e:6d:e2:b4:41:6e:6e:19:93:
49:e0:c3:fb:0a:82:03:a9:31:43:86:ef:05:3e:d0:bc:74:8b:
b4:43:80:d9:b1:59:72:14:29:7e:de:12:da:83:d0:9e:07:fa:
47:79:26:25:60:5d:4d:ae:4c:e8:c1:1d:99:f4:15:d1:69:cd:
78:71:64:b5:7e:33:f4:8a:29:3b:60:dc:bf:dc:00:06:86:76:
67:f9:7e:09:1f:d0:c1:c9:b9:a0:17:22:38:4d:32:e2:59:69:
21:1c:5e:56:c5:70:f0:d0:44:d0:3b:5e:35:bb:41:df:2c:3a:
86:f1:52:47:d6:6a:09:e8:75:ef:55:67:96:40:2b:81:19:e7:
b0:a1:42:2a:81:b5:bd:75:dd:bc:ca:ed:67:cf:ec:3b:a8:c5:
61:3c:4d:e4:f7:2a:9f:c5:44:2d:2b:37:36:20:b2:f2:0c:aa:
5f:d1:24:b8:84:33:5f:5c:cd:a2:dc:2e:b5:6e:94:00:fa:50:
b2:f3:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org