Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDZypE6hB3NaGqSJ7vnw9ub0pc.roa
File: RCDZypE6hB3NaGqSJ7vnw9ub0pc.roa (raw, json)
Hash identifier: je8c4x2ztdpkEtoG77EFn5VRh8sorCrIKgKuKYI2tnk=
Subject key identifier: 44:20:D9:CA:91:3A:84:1D:CD:68:6A:92:27:BB:E7:C3:DB:9B:D2:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDZypE6hB3NaGqSJ7vnw9ub0pc.roa
Signing time: Wed 03 Apr 2024 03:52:17 +0000
ROA not before: Wed 03 Apr 2024 03:52:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14319 (0x37ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 03:52:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4420D9CA913A841DCD686A9227BBE7C3DB9BD297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:4f:15:19:00:d6:a3:56:9c:61:f7:c6:78:
73:8e:88:b5:0a:8c:49:04:9e:25:6c:86:9c:cc:66:
58:75:f6:bc:26:27:02:92:2f:e5:30:69:9a:fb:4e:
93:60:39:29:ef:c5:18:2b:dd:f2:ac:19:53:9d:3b:
67:0e:21:e1:e4:c9:65:09:c5:db:f1:f0:10:78:85:
73:79:4e:44:31:7e:c3:e0:9c:cc:83:63:fe:04:76:
5e:66:a0:42:54:a5:43:fc:68:19:a2:6f:2b:0b:7e:
bb:57:0f:1a:bc:7f:27:a1:47:6d:9d:c2:35:05:9c:
52:ec:5b:4c:2b:09:f7:63:58:25:9e:70:a2:d2:b9:
24:62:7e:ec:2f:1a:73:f4:37:88:a2:8e:6e:7c:3f:
61:e7:77:8c:76:8e:ec:a3:25:f0:6e:da:10:10:a1:
33:b9:6e:d8:34:d5:17:b6:71:67:80:c9:18:76:3b:
52:89:89:b7:b8:c2:97:b3:7b:a4:87:0e:50:c1:93:
3e:d2:d0:18:33:92:4b:e0:74:00:41:bb:47:a0:ec:
e9:6e:26:6a:bd:f0:aa:89:ac:05:71:34:db:51:72:
72:00:47:a5:e8:1f:64:c8:be:ed:bd:5c:95:0d:e3:
73:fa:e4:1f:0f:fb:af:9a:6a:54:41:cf:60:49:53:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:D9:CA:91:3A:84:1D:CD:68:6A:92:27:BB:E7:C3:DB:9B:D2:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RCDZypE6hB3NaGqSJ7vnw9ub0pc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:32:93:dc:7f:ab:e2:9f:ab:3f:d5:42:2a:09:d7:41:ef:ed:
36:19:de:ab:8b:f9:5a:42:0b:bd:6c:b2:fc:d7:0f:72:bb:a3:
24:0b:46:85:f4:c8:1b:8d:be:ef:0e:52:aa:d1:4c:b8:03:ee:
14:14:e2:3d:89:4b:85:12:56:e4:1a:66:de:14:d2:d9:31:e4:
82:2d:31:41:41:5d:1b:c0:dd:2e:6c:42:a7:7d:0d:ca:6d:3f:
2f:6a:03:ec:15:9b:bc:6c:b2:41:66:b2:d7:9a:be:8d:c5:70:
23:0d:cf:9e:31:a9:72:b7:36:e8:44:a7:cc:e1:38:59:79:3a:
af:9e:61:2d:de:10:35:5a:ae:31:07:d4:6c:6c:34:fa:33:72:
0a:5c:c3:54:32:69:e7:aa:94:c5:48:05:6c:e7:31:6c:e2:d3:
c3:6c:02:03:5c:36:31:c6:17:a5:15:6f:ee:94:a9:f7:db:80:
84:2d:1b:a5:39:83:8a:06:f3:ba:2e:d8:6a:c6:f2:67:fb:f5:
c5:b2:02:aa:b4:ab:b6:7f:e9:04:b7:b2:9e:e5:73:87:75:71:
73:a0:2a:05:1f:a6:cd:64:35:79:a0:82:10:9f:37:8c:39:40:
e4:4e:6e:3c:cc:4b:40:ce:53:87:e5:f4:37:d2:37:0c:b1:ca:
58:54:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:41 2024 by rpki-client on console-ams.rpki-client.org