Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RUAd5Cg9wbNnWGphg6IyjZj8x0E.roa
File: RUAd5Cg9wbNnWGphg6IyjZj8x0E.roa (raw, json)
Hash identifier: 8op/GgFQ55sA3+9NoZUROWBofFfH1/uuezaKgisdMK4=
Subject key identifier: 45:40:1D:E4:28:3D:C1:B3:67:58:6A:61:83:A2:32:8D:98:FC:C7:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A23
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RUAd5Cg9wbNnWGphg6IyjZj8x0E.roa
Signing time: Sat 06 Apr 2024 02:22:27 +0000
ROA not before: Sat 06 Apr 2024 02:22:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14883 (0x3a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 02:22:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45401DE4283DC1B367586A6183A2328D98FCC741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:0a:4e:1e:9f:27:d0:22:3e:b7:31:ca:f4:
3b:cf:39:9d:f0:21:d7:63:58:06:da:ab:9b:d4:0d:
41:b0:e5:5d:f1:d5:4a:e8:a5:27:a8:d5:cf:7d:7f:
17:5a:b8:a2:25:a5:1c:35:6b:a8:c5:c4:ad:c9:4f:
60:46:9f:c4:28:6d:ac:51:94:54:21:86:aa:95:8d:
52:74:87:2b:78:f7:b5:3c:ce:18:2d:64:20:0b:1c:
f0:29:82:2f:18:8b:c6:fe:6e:37:54:8d:9b:1c:44:
2b:08:d6:d3:16:b6:34:8b:48:0c:fa:f1:24:f1:39:
eb:cb:c1:3b:93:cc:8c:b4:ab:60:62:42:6e:0b:ee:
e6:0f:50:db:e2:f6:42:c4:23:5e:96:9e:e9:58:be:
e2:9c:db:5f:fd:7f:19:9a:71:23:d3:be:63:01:1c:
47:ee:98:38:ec:30:4b:bd:b0:ed:94:0d:0e:12:0d:
76:60:37:41:1b:f6:de:e9:28:6c:91:93:47:ce:b6:
05:4d:67:97:0c:62:de:13:fa:34:e1:37:06:00:36:
2d:04:f1:4a:20:a4:a2:01:3f:64:88:ec:06:4f:3a:
e1:33:64:8a:16:06:a5:b2:86:cf:55:49:58:11:d8:
fe:65:9f:fc:8e:cc:dd:16:cb:94:6e:00:fc:2f:22:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:1D:E4:28:3D:C1:B3:67:58:6A:61:83:A2:32:8D:98:FC:C7:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RUAd5Cg9wbNnWGphg6IyjZj8x0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:e5:21:25:9c:03:0e:9f:99:62:60:f2:72:82:63:72:4f:aa:
7b:b9:bb:5e:8f:6c:65:04:37:b4:b3:43:5e:56:a7:c3:fb:f7:
04:35:6b:4a:05:eb:71:ed:93:17:76:db:b4:af:25:24:cd:e0:
88:84:52:0a:64:7d:82:95:52:f6:ac:71:c0:9b:86:25:73:f6:
6d:e1:69:2f:cc:23:e7:a0:61:8f:24:29:c9:fe:e4:df:63:7f:
8d:22:98:7a:d4:6a:13:fe:62:e2:91:04:a2:8c:94:7c:25:db:
1f:d7:b2:c6:27:55:6b:3b:48:97:63:cc:73:db:aa:ee:37:5b:
4a:85:2f:09:c2:1c:ed:cb:0e:dc:8d:ec:68:71:9d:65:07:2b:
c1:b3:6e:ca:46:31:db:f0:ce:c6:f8:24:69:cb:f0:d9:79:bd:
ef:4c:8b:a8:2d:39:b5:c8:2c:9a:ec:9d:5b:c7:71:b6:51:c7:
d9:db:7a:7a:6a:ab:11:a5:15:c4:da:4a:d1:ee:fe:10:16:2f:
2c:34:28:35:a8:1c:45:9b:c5:fd:1e:bf:97:76:e1:fa:2a:a5:
52:6b:bc:42:bd:97:01:77:9c:c5:b1:8b:c2:a2:4d:30:11:69:
77:5c:3f:5c:6e:97:62:bf:e2:12:af:56:8c:de:a0:66:31:e2:
0c:08:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org