Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SC7kToPPfX0Q8KDCCsBe9wn3fdA.roa
File: SC7kToPPfX0Q8KDCCsBe9wn3fdA.roa (raw, json)
Hash identifier: HIxvr73Gq/Lzla5DqkBpX+7PFJIc6n1oqeKNzA4ORhc=
Subject key identifier: 48:2E:E4:4E:83:CF:7D:7D:10:F0:A0:C2:0A:C0:5E:F7:09:F7:7D:D0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B53
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SC7kToPPfX0Q8KDCCsBe9wn3fdA.roa
Signing time: Sun 07 Apr 2024 16:22:34 +0000
ROA not before: Sun 07 Apr 2024 16:22:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15187 (0x3b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 16:22:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=482EE44E83CF7D7D10F0A0C20AC05EF709F77DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:63:8e:d5:29:12:15:2e:82:a2:4f:b3:44:
77:98:f8:58:bb:1d:88:15:ae:12:7c:ea:4e:0f:39:
c3:22:fc:70:9b:3e:27:0f:5b:a1:96:13:d5:46:3d:
16:3d:44:f0:c1:63:ba:34:52:51:16:ed:32:74:9a:
be:30:6a:d7:6d:37:ed:4f:bf:a2:53:86:0b:84:c6:
68:0e:f9:e5:bd:db:d5:58:ad:0b:08:ba:32:01:7b:
21:f0:f0:68:0f:74:45:8a:02:a4:f6:59:c5:7e:87:
e3:fe:e5:64:fa:55:bf:4f:d6:bb:b6:e7:8e:ff:dd:
0a:70:c8:91:6c:36:bf:4b:b6:8e:93:01:25:9c:9c:
d5:c4:9e:de:04:f3:fa:53:f2:15:d0:b7:1e:29:60:
77:3c:93:ae:0c:69:e7:ed:9c:a1:ec:12:37:7a:41:
11:db:f7:8f:2a:7c:04:90:5f:bb:7e:35:66:31:3b:
8f:85:46:46:22:1f:c4:e6:c5:56:a6:81:03:24:75:
42:9d:68:c0:78:63:db:51:7e:58:0a:43:85:80:57:
f0:5e:39:96:ce:f3:20:ca:2a:03:7a:eb:0e:b7:9d:
28:80:3a:95:47:92:d7:3b:14:18:e7:46:69:e0:1c:
9f:c3:87:0c:8d:87:56:e6:cb:73:89:17:36:df:4e:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:E4:4E:83:CF:7D:7D:10:F0:A0:C2:0A:C0:5E:F7:09:F7:7D:D0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SC7kToPPfX0Q8KDCCsBe9wn3fdA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:81:64:50:6b:48:74:53:fd:65:9f:6c:a8:9e:f7:5a:c1:e5:
51:d2:9e:5b:d6:ac:b6:6f:ba:75:21:18:e9:48:76:36:62:98:
8d:9c:19:f2:71:47:f9:49:75:e1:a4:5f:37:a7:39:6c:e7:93:
c4:d7:65:81:a1:7d:18:cb:65:ff:36:d6:82:8f:ba:6a:5c:75:
16:74:4a:84:5a:4f:e7:65:6a:46:f7:ca:4e:1c:29:13:a8:d6:
ab:82:21:c7:a6:8c:d0:e3:96:ed:49:ac:a3:b6:ba:49:d1:40:
40:6d:46:b8:15:ef:02:49:2e:d9:8f:f0:4e:4b:43:7c:dc:17:
48:13:13:91:5d:06:fd:c0:fa:0c:6f:f9:79:b7:9e:9b:c2:f8:
d6:64:00:b5:67:51:93:81:ee:4c:03:16:15:7c:ac:c1:0b:e7:
5a:66:15:c8:5e:a7:1b:f6:6c:1f:ca:2b:64:56:c0:f3:6f:b2:
5a:68:e9:d8:6a:8d:38:b6:0e:08:ed:a2:28:3b:bc:33:dc:52:
44:20:a0:15:32:ce:1e:3f:40:a0:07:f1:b7:65:49:ab:35:65:
24:3d:77:ce:50:83:14:0a:3a:f4:bd:72:87:f9:08:ac:61:b6:
60:f8:c3:be:35:ce:74:50:42:c6:fa:2c:8d:34:b2:50:a0:f4:
b4:ae:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org