Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SIrA-RZQW7I8OBcgL5zUvNvmk7Y.roa
File: SIrA-RZQW7I8OBcgL5zUvNvmk7Y.roa (raw, json)
Hash identifier: Oe82BjO/Op87hzoZ52VpA2v0StGoTJB9ZNl+dyXuiZQ=
Subject key identifier: 48:8A:C0:F9:16:50:5B:B2:3C:38:17:20:2F:9C:D4:BC:DB:E6:93:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SIrA-RZQW7I8OBcgL5zUvNvmk7Y.roa
Signing time: Fri 05 Apr 2024 15:52:29 +0000
ROA not before: Fri 05 Apr 2024 15:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14799 (0x39cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 15:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=488AC0F916505BB23C3817202F9CD4BCDBE693B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:00:f9:be:e0:02:3f:5f:72:63:68:b7:7c:
13:55:75:72:07:8c:e1:31:aa:fd:78:6b:63:8e:ac:
35:b3:51:de:78:55:4b:56:e6:3d:85:03:58:77:fa:
31:99:b9:2e:98:80:f3:91:56:a7:8b:0b:4a:af:31:
e5:99:8b:f9:f3:e0:95:20:27:86:94:6f:18:df:c4:
a2:0c:e0:ea:97:fe:48:db:3e:01:6b:74:2d:b3:78:
b0:d7:7b:49:c5:b5:2d:36:18:11:5c:5f:f2:b7:7b:
65:26:37:e6:98:98:65:f5:1d:57:92:3d:dd:7d:73:
c1:2b:0e:a9:76:54:35:84:57:4a:6c:ec:a0:8a:35:
c8:e7:bf:0f:7c:06:a5:43:ab:a6:b6:57:93:33:c1:
79:ff:1f:62:fc:2c:66:46:9d:b1:76:10:08:fd:0b:
b6:40:fc:5c:33:10:b9:24:a6:e4:fa:74:8d:9d:c3:
d4:21:f7:50:a1:1e:d7:d2:dc:f9:02:3f:f9:2d:e1:
e2:0b:de:6b:4a:53:af:23:23:cc:a9:2d:7b:9e:7c:
da:4e:ae:7e:7c:6b:70:d6:4a:ce:77:d0:b4:a7:fe:
3f:f3:13:f3:47:b3:38:e0:9e:29:69:61:08:5a:45:
c9:c8:a9:1b:aa:75:a5:50:7d:4c:2c:e6:fd:bd:6b:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:C0:F9:16:50:5B:B2:3C:38:17:20:2F:9C:D4:BC:DB:E6:93:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SIrA-RZQW7I8OBcgL5zUvNvmk7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:b1:51:74:18:3f:cd:d4:e1:c1:50:51:04:d6:44:d4:42:d8:
c9:41:20:1e:2d:70:f9:14:03:06:42:89:cd:1a:58:06:cc:d0:
ef:46:c5:66:38:87:9f:06:d5:57:f4:a0:d1:71:20:ea:64:14:
77:06:a2:18:10:5b:6a:db:8e:32:48:17:53:33:6a:3c:f4:c0:
37:db:69:26:1a:fb:35:16:5e:2e:b0:f4:99:c1:a9:e0:05:5a:
6f:62:11:c4:97:1d:2f:84:d4:b5:30:ec:04:11:04:96:80:cb:
60:56:1d:b7:50:1a:3e:df:80:b5:eb:e4:d8:f1:e8:b3:b0:e4:
2c:b3:fd:dc:dd:3f:ec:ab:d0:f8:4b:ff:38:23:f5:78:a9:51:
fa:07:ef:9e:25:c3:45:f7:bc:89:9c:ea:54:3f:a3:1e:5f:fb:
fe:e7:15:2d:a1:f5:58:22:3b:af:2f:1c:9e:25:10:06:d7:34:
de:81:05:e3:55:92:6c:43:fb:04:e5:1b:e6:ba:99:69:b4:22:
de:76:47:8c:d8:ea:56:25:b1:69:9d:5b:67:38:59:1f:93:ce:
50:bc:9e:d7:17:b5:d1:a8:d7:44:41:8c:42:9a:08:c8:16:8b:
14:f8:ef:19:67:b4:fa:1d:80:4c:df:4f:cc:34:2f:68:de:00:
7f:85:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:42 2024 by rpki-client on console-ams.rpki-client.org