Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/S2mee3n6vXuCufQ8Lbi37LopUuE.roa
File: S2mee3n6vXuCufQ8Lbi37LopUuE.roa (raw, json)
Hash identifier: YngQUazLgJl/tGTxcTHLaBUO7n2PHHY3H+ksgmwMFAA=
Subject key identifier: 4B:69:9E:7B:79:FA:BD:7B:82:B9:F4:3C:2D:B8:B7:EC:BA:29:52:E1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CFB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S2mee3n6vXuCufQ8Lbi37LopUuE.roa
Signing time: Tue 09 Apr 2024 21:22:40 +0000
ROA not before: Tue 09 Apr 2024 21:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15611 (0x3cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 21:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4B699E7B79FABD7B82B9F43C2DB8B7ECBA2952E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:ce:fb:a4:18:f9:33:c2:14:78:72:0e:30:
8a:25:b5:90:41:27:28:ad:c4:4d:85:22:10:87:ff:
6f:c6:b4:26:d6:fb:f8:8b:c5:3b:0d:d0:4d:c3:18:
cb:da:b5:25:15:c5:40:6d:eb:19:51:ce:ab:9d:fa:
c0:a0:02:b7:6a:8b:fa:4c:58:be:c2:48:82:cd:3d:
2d:38:d3:3a:49:ba:8a:19:3e:cb:89:ae:63:86:38:
8c:3a:43:70:6e:45:c3:7b:9c:02:b9:61:bf:d8:1c:
54:8e:d1:ce:9a:b3:08:0c:5c:a0:f8:bf:37:21:49:
ff:0a:da:7d:79:1a:15:c3:c6:3c:40:cd:a2:05:e8:
0a:9b:41:d4:ee:29:d1:36:21:d9:6a:3d:50:81:22:
31:7d:3a:30:3b:be:e9:57:0f:ab:34:be:1a:64:6f:
b9:79:d0:2b:66:5e:b6:6b:d4:1f:35:2b:94:c6:5a:
9d:9a:bf:6f:29:fb:84:49:80:00:07:90:da:63:5f:
7a:e0:05:ac:b3:d1:c4:ca:f3:d2:4c:d1:09:3d:4c:
d6:32:86:2a:0b:d2:c7:88:a2:a1:4a:84:bd:c9:b0:
40:ee:c1:c2:8e:7d:5a:4f:67:4c:00:d5:46:cb:bf:
78:28:60:3d:29:f1:f4:40:7f:88:eb:20:90:62:9d:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:9E:7B:79:FA:BD:7B:82:B9:F4:3C:2D:B8:B7:EC:BA:29:52:E1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/S2mee3n6vXuCufQ8Lbi37LopUuE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:21:f6:64:bf:2e:4d:bf:2c:6a:ee:72:0e:27:f3:ff:cf:c8:
ef:9a:4b:ba:ab:b4:e4:7e:88:5c:f2:be:e0:3f:73:bc:25:21:
2f:8d:71:c2:f0:80:f2:7e:a4:f6:5e:11:36:e2:38:0e:d9:5a:
89:22:f2:e7:9e:b1:3f:02:3e:6b:9e:ff:5f:2d:d7:f3:dc:80:
44:78:07:a2:44:a5:78:28:fe:6f:f2:47:12:6e:3f:51:bf:7a:
30:94:c5:98:3d:1d:40:7e:60:d8:f7:0c:ff:ec:d7:d6:42:c3:
2f:53:ed:89:79:d7:3a:e2:3d:63:fc:06:0d:9c:96:15:9a:3a:
bb:3b:6a:db:64:3b:6e:f7:e9:1b:52:5f:f1:98:78:0f:d4:8c:
9d:e2:c0:4e:2a:01:29:85:43:2a:9e:db:3d:19:8d:7b:21:ec:
ef:01:b3:f1:e2:95:e1:d0:74:33:97:fc:95:d3:d5:09:2b:4e:
62:9f:4b:e4:5b:bb:c3:62:8e:a1:6c:0e:c5:e2:43:a3:52:2b:
c6:38:86:d2:28:f7:8a:ba:10:de:8b:41:82:6d:b7:63:13:a4:
05:64:cb:72:9a:5e:2f:13:4b:b2:82:e5:a8:dc:11:d3:fa:c0:
30:3a:2d:67:bf:a6:95:cb:e0:b5:d0:1c:54:3f:d8:b4:b8:2f:
b4:7f:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org