Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TAGhfc_M-CBaYQ8ngBH_gYlUu14.roa
File: TAGhfc_M-CBaYQ8ngBH_gYlUu14.roa (raw, json)
Hash identifier: jOBg/HhGQR2LXIemkPwwyrdvMhFTsKL7Q8krQae8xNQ=
Subject key identifier: 4C:01:A1:7D:CF:CC:F8:20:5A:61:0F:27:80:11:FF:81:89:54:BB:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F07
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TAGhfc_M-CBaYQ8ngBH_gYlUu14.roa
Signing time: Fri 12 Apr 2024 14:53:18 +0000
ROA not before: Fri 12 Apr 2024 14:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16135 (0x3f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 14:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4C01A17DCFCCF8205A610F278011FF818954BB5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:1e:e4:da:38:99:c7:00:d2:60:84:6a:4e:
b4:9c:6a:46:e8:b6:cc:f9:ae:54:1d:29:45:ec:8a:
32:ff:8d:c7:ce:07:5d:34:37:11:e7:22:5f:a8:ab:
23:75:52:19:36:a6:4e:56:4d:f9:43:12:6a:89:05:
9f:03:e9:6d:3c:52:d2:db:c6:80:1f:0b:2f:15:b6:
1b:69:a1:f9:c7:a2:65:50:0b:63:bd:7a:1b:81:0c:
8b:92:42:8c:58:e7:bc:a0:45:62:99:d7:02:0d:fc:
e9:62:63:2c:3d:5f:26:d7:77:4f:9e:96:90:16:ac:
19:b7:7f:ca:22:59:57:31:f9:39:cb:d3:38:83:d7:
d3:a9:ef:36:21:13:e4:0d:eb:59:f5:02:87:7e:1b:
0e:43:33:7c:45:80:17:d3:3a:6d:5d:5c:7d:bd:34:
af:9b:6c:33:f5:86:f0:c5:c2:1f:4a:f8:95:48:ad:
e8:41:ba:41:74:32:ed:20:dd:4a:09:62:08:1a:6d:
7b:ba:e4:64:0b:2f:80:6f:15:14:f6:00:7d:5a:d8:
c3:b9:c1:cc:9b:f6:a0:fe:e5:42:e9:77:25:5f:e8:
47:88:d3:03:21:8e:ee:cc:32:dc:4d:53:bd:36:e2:
3c:25:54:e7:c8:17:4e:ee:fb:88:82:8c:f3:8a:fc:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:A1:7D:CF:CC:F8:20:5A:61:0F:27:80:11:FF:81:89:54:BB:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TAGhfc_M-CBaYQ8ngBH_gYlUu14.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:15:6f:97:b1:ae:68:24:99:5e:13:eb:c8:17:89:8c:2b:45:
b5:8a:5b:f6:52:a9:3a:3c:31:0b:30:e8:db:9e:8d:9b:76:92:
40:f4:24:24:48:9f:ee:d9:5e:03:05:70:1c:80:d0:b6:b1:20:
3c:0b:90:7e:11:b0:4a:93:70:7e:73:44:b2:a2:28:17:40:19:
7f:4c:d9:af:04:e6:d0:e1:4b:b4:a6:60:89:b7:e3:6e:cc:ee:
53:43:91:e5:34:bc:2d:f0:c6:0b:c1:4f:ea:fc:11:03:00:ae:
a3:b9:0d:c0:f9:5f:d7:a8:5b:af:03:35:f2:15:b5:b2:b8:c6:
2a:48:a0:44:d5:24:a8:95:dd:17:e5:b5:62:23:a3:ec:a0:3d:
56:3f:da:f0:5a:98:1c:6f:22:ae:87:4a:b2:92:45:a3:65:4b:
80:fb:90:cb:7c:0f:4e:b1:11:97:42:b1:fb:0b:07:97:dc:28:
38:76:8b:8e:5b:7a:22:ea:c4:f8:4a:be:0b:22:23:be:cf:c5:
b6:02:54:f3:38:70:3d:68:77:d3:6e:e8:99:0f:88:96:b7:2a:
0b:10:0c:82:6e:96:47:c8:c4:27:11:7d:04:6d:39:63:b8:6f:
90:be:e7:d8:05:d1:b8:13:d9:ad:6c:b3:b3:0d:8f:07:77:b1:
4b:e3:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org