Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RSENlno7egGJAfZYD9WMOLtg898.roa
File: RSENlno7egGJAfZYD9WMOLtg898.roa (raw, json)
Hash identifier: rKhXTWpKv9X8eVXB2otv8PXiek/LQueyNmbci6JbvBM=
Subject key identifier: 45:21:0D:96:7A:3B:7A:01:89:01:F6:58:0F:D5:8C:38:BB:60:F3:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BEF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RSENlno7egGJAfZYD9WMOLtg898.roa
Signing time: Mon 29 Apr 2024 19:53:32 +0000
ROA not before: Mon 29 Apr 2024 19:53:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19439 (0x4bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 19:53:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45210D967A3B7A018901F6580FD58C38BB60F3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:3c:c9:50:8f:09:1b:e7:37:4f:b9:97:8c:
66:d8:45:89:42:cc:10:47:08:94:bf:3f:e0:3b:28:
42:3d:0e:99:09:cc:8a:87:c0:48:be:de:8a:77:29:
5b:84:ae:e1:2f:22:ec:54:d4:0c:a6:e3:2f:cf:96:
49:7b:dc:19:f1:c1:bc:3a:29:36:05:60:83:af:b2:
61:9c:2c:95:8c:1a:f8:9f:c9:cf:b9:87:4d:69:01:
70:22:59:84:7c:35:85:42:cf:14:9d:68:e8:c9:99:
1d:d4:40:93:99:7a:f2:a5:bc:91:2a:4e:0e:2e:de:
4a:30:f9:30:b5:23:f2:66:31:64:91:59:6d:a4:d3:
ee:bf:e8:a4:90:23:ac:f4:05:d5:74:75:33:17:71:
da:c8:e4:62:3e:e7:ae:44:ff:0e:27:ff:f9:58:33:
e4:d5:42:d2:2a:0d:5a:7f:6c:79:80:93:ec:81:36:
48:64:c0:00:f6:d7:3e:8c:39:ce:b9:16:a2:f1:42:
2d:04:c9:ba:11:c7:b0:e8:f1:f6:d7:58:1a:db:e5:
be:6b:8e:56:bf:66:fb:f8:84:4a:20:65:8b:37:01:
96:76:92:38:13:1e:51:61:13:d3:4b:69:4a:8a:da:
0e:0f:ac:8d:97:1e:ac:68:3f:1f:63:7d:7f:9b:f5:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:21:0D:96:7A:3B:7A:01:89:01:F6:58:0F:D5:8C:38:BB:60:F3:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RSENlno7egGJAfZYD9WMOLtg898.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3f:78:5c:c2:21:4f:6a:c3:82:ba:b1:2a:66:f2:b6:f2:71:4f:
44:6b:05:39:e0:98:6a:91:70:ef:c0:0e:ec:ed:40:30:bb:14:
73:e7:f0:5e:18:10:25:1c:de:0b:c9:18:2e:a7:09:fb:ec:87:
77:6a:75:e2:88:0e:1c:d8:48:0d:db:6b:84:ae:a4:26:f6:86:
69:24:65:55:39:f1:d8:55:25:4b:c1:5b:9f:7f:ee:df:75:b9:
0d:63:da:70:65:7f:d7:3c:51:a9:f5:f5:87:60:8a:c1:43:bf:
6d:6c:f6:b7:e4:9c:81:1d:f6:26:77:41:c6:fb:11:89:2b:df:
95:5a:85:7b:83:43:ce:71:7a:8d:11:62:00:6d:ba:e6:3c:02:
5e:23:42:f5:a1:2c:52:f8:99:37:00:dd:73:89:12:bc:2b:51:
7c:9b:a2:a6:ea:cf:b5:a3:81:63:6b:5a:bb:5c:35:41:7b:5b:
1a:eb:fe:23:71:5f:e2:2a:b0:55:ce:3c:df:7e:9c:97:e5:a9:
e3:fb:ee:be:2a:ff:df:51:06:7b:84:15:2d:fd:fc:05:07:a1:
99:c1:79:00:ee:ab:2e:aa:a2:2a:11:91:33:67:d8:c7:c0:ac:
bf:8d:ce:e6:3f:1c:89:ec:9f:c6:b5:60:6d:e9:bf:41:47:d6:
e3:0f:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org