Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SCVOUe4ClPaXEExJipnuY6dn7cI.roa
File: SCVOUe4ClPaXEExJipnuY6dn7cI.roa (raw, json)
Hash identifier: VJ5W5t2Uv1pgZkN+QDrHLrI/RmqNC3Pm/C6QV7dP530=
Subject key identifier: 48:25:4E:51:EE:02:94:F6:97:10:4C:49:8A:99:EE:63:A7:67:ED:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SCVOUe4ClPaXEExJipnuY6dn7cI.roa
Signing time: Mon 15 Apr 2024 00:53:00 +0000
ROA not before: Mon 15 Apr 2024 00:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16599 (0x40d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 00:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=48254E51EE0294F697104C498A99EE63A767EDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:4f:2a:9c:b5:2b:cf:39:7c:53:bd:4f:91:
a3:9e:f1:f5:74:e0:20:68:a1:e8:3f:0d:8e:be:93:
6e:34:c2:17:9c:9f:13:68:80:f5:62:71:3c:cb:22:
17:b0:9f:fc:8c:45:94:27:50:3a:81:56:8a:99:0e:
fe:52:01:8b:63:c1:2b:a0:51:cd:03:36:2a:ec:6f:
c4:ba:44:b8:31:af:12:1b:fc:46:39:6f:aa:43:1e:
a8:8c:f5:53:0e:65:33:4f:79:fa:f2:3a:66:8a:51:
51:ca:03:6b:2f:88:15:ac:34:64:ea:9c:f0:4d:f1:
6b:c9:b9:cd:71:77:47:10:7e:b6:e3:dd:f3:c9:bd:
23:20:61:a5:b1:f6:b9:6a:1c:02:cf:56:f1:ef:7c:
c6:00:87:f2:c7:bd:a8:c9:29:d0:1c:af:fc:6b:ac:
aa:f6:89:df:81:9e:2f:55:30:d4:74:1b:11:66:6c:
61:e2:57:97:6a:5a:63:d4:d4:70:97:31:e2:3b:96:
1b:bf:95:9e:29:11:2f:30:37:1d:28:d4:c3:e6:cc:
ae:cc:41:ea:e8:1b:68:d3:e0:aa:4a:d2:6b:22:54:
09:9a:56:ed:31:bd:eb:03:a1:28:a6:8e:3c:86:27:
11:ff:f6:8e:b7:d7:97:02:d3:60:fa:bd:87:50:9a:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:4E:51:EE:02:94:F6:97:10:4C:49:8A:99:EE:63:A7:67:ED:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SCVOUe4ClPaXEExJipnuY6dn7cI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:73:03:32:a0:0b:da:b8:57:72:f6:54:3e:0e:1e:83:d9:71:
bb:b8:43:25:2d:78:ed:e0:4d:9f:6b:6f:88:17:f2:d3:b3:27:
00:6c:84:6d:a1:43:29:7f:93:df:ee:64:00:00:8d:72:79:cd:
d5:0d:ce:de:03:f7:02:41:ac:4b:e4:c2:86:c6:a9:b5:98:2c:
d4:a8:ad:d3:01:81:f7:af:8b:70:a7:5a:7c:4c:7a:50:41:54:
fc:82:e7:d4:ea:83:88:8a:c3:1c:1d:7d:31:d2:d2:13:76:71:
03:18:ef:fe:26:61:72:96:69:43:da:81:10:cf:b5:93:26:05:
6f:05:20:17:f4:ed:c5:01:f6:ce:99:54:6b:f4:21:72:63:ea:
2b:df:ec:eb:59:e5:6a:05:02:46:a8:b9:a5:b4:a9:bf:c4:a6:
33:b9:eb:ad:7f:84:06:3a:2d:0c:e9:cc:1d:fe:7c:bb:bd:56:
20:2f:77:79:87:77:5a:15:40:d5:0c:3f:25:86:55:9a:d1:a8:
6b:07:6d:1f:43:6a:d5:16:f7:e4:bd:48:75:83:d9:a8:67:a2:
f6:a5:12:d8:b5:68:3c:0a:c5:9c:67:f0:25:ba:6a:a3:a4:0a:
81:3b:c7:d3:ef:d7:ff:3d:6d:0f:4b:4a:67:a4:95:c0:f3:42:
7c:96:51:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:42 2024 by rpki-client on console-ams.rpki-client.org