Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Rp2BEVpWIsvr4XF481rxBBrXORU.roa
File: Rp2BEVpWIsvr4XF481rxBBrXORU.roa (raw, json)
Hash identifier: GB7bd5EFAou9GHmCp6+8EstLQM4IKpcwviDW0rqLMlg=
Subject key identifier: 46:9D:81:11:5A:56:22:CB:EB:E1:71:78:F3:5A:F1:04:1A:D7:39:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FCB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rp2BEVpWIsvr4XF481rxBBrXORU.roa
Signing time: Sat 04 May 2024 23:23:50 +0000
ROA not before: Sat 04 May 2024 23:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20427 (0x4fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 23:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=469D81115A5622CBEBE17178F35AF1041AD73915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:e8:dc:d3:32:81:0e:16:5d:aa:7e:6e:47:
f6:c5:ee:7c:8b:12:c8:b2:0b:25:19:1a:f8:00:f0:
8e:69:66:29:56:95:f5:c8:40:87:e7:5c:23:fd:1e:
65:9e:3f:75:e1:dc:59:11:a3:5d:d5:9e:30:78:1f:
3c:1e:a1:c7:de:af:0f:bd:38:a4:66:32:28:bc:21:
b0:42:38:1f:40:2f:36:d4:b7:7b:fd:84:51:ef:78:
77:04:dc:09:08:6f:89:0d:4b:cc:fd:ea:f6:7e:6d:
63:89:2d:86:99:1f:f2:5c:b9:3f:40:b9:e4:9b:3d:
d3:bf:37:5a:c8:d2:cd:e2:56:b5:11:46:8e:1f:46:
c5:79:c2:3c:09:ba:f8:53:a1:6e:00:cb:6b:33:3a:
a5:19:17:d1:98:49:4d:cb:9b:d8:61:79:3c:2f:22:
f2:a0:bd:2d:7d:76:86:12:7d:8d:2e:59:1d:c5:ae:
f1:55:eb:7a:59:bb:05:57:bc:29:23:17:75:7e:ca:
f3:78:fb:98:0f:89:6e:89:cc:f7:ba:ab:1b:e7:2c:
82:26:67:a3:22:d4:74:85:9d:43:e3:15:31:99:9c:
b0:09:61:13:dd:83:4d:12:8f:6c:e2:2d:f7:7a:fc:
ac:70:b2:6d:1e:99:b9:e3:79:3d:11:7a:1a:18:10:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9D:81:11:5A:56:22:CB:EB:E1:71:78:F3:5A:F1:04:1A:D7:39:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rp2BEVpWIsvr4XF481rxBBrXORU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:a8:6c:45:4e:71:6e:1e:7e:52:ce:ca:fb:10:d3:7e:60:a0:
61:1a:1f:3a:8f:45:92:eb:94:8c:f3:0d:39:3f:62:06:d3:ed:
0f:8a:46:f1:fc:1e:32:2c:01:fd:dc:bd:39:19:d1:04:da:8e:
de:1d:bf:05:99:75:7a:f0:fb:f0:de:78:c0:b8:86:f8:95:17:
c5:52:18:0e:74:3c:1f:7f:ca:68:73:ea:36:03:8d:5a:5f:68:
47:47:37:e7:b5:98:f3:b7:a1:8d:38:eb:a9:ac:7c:bb:5b:1e:
77:a8:f7:e4:f2:48:79:e0:d8:f7:ee:e5:08:8a:7f:01:20:d8:
1c:74:f7:dd:27:9e:f7:27:ec:2e:ea:fc:c8:74:b3:eb:8f:7a:
58:21:0d:82:70:32:7b:68:7f:10:e3:10:b7:06:78:7e:f0:55:
06:6c:a7:e4:08:22:e5:21:67:eb:43:c0:9d:5c:ed:14:2f:c6:
92:42:af:c7:85:9a:bc:c8:fd:45:75:88:5a:9b:2b:1d:1d:18:
b4:40:e1:40:cf:11:f8:e6:fb:15:de:92:12:59:a3:b4:d3:de:
06:e3:9c:56:56:8b:6a:fc:77:a1:33:a2:2c:ce:42:d5:32:4f:
5b:61:ae:97:6a:5e:e2:3a:ad:bc:7a:79:f9:a4:f5:8b:9b:0e:
c3:6d:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:25 2024 by rpki-client on console-fra.rpki-client.org