Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UDD3VezEMGFpVp281My5y45S6Ys.roa
File: UDD3VezEMGFpVp281My5y45S6Ys.roa (raw, json)
Hash identifier: cNKTFGa9i8qH7q9cgG4PKOI87R41y9jhHWK2DXpYcbs=
Subject key identifier: 50:30:F7:55:EC:C4:30:61:69:56:9D:BC:D4:CC:B9:CB:8E:52:E9:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UDD3VezEMGFpVp281My5y45S6Ys.roa
Signing time: Sat 11 May 2024 21:54:10 +0000
ROA not before: Sat 11 May 2024 21:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21759 (0x54ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 21:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5030F755ECC4306169569DBCD4CCB9CB8E52E98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:51:1d:57:62:e0:68:5e:d7:e6:c0:eb:29:
70:f4:7c:01:4c:8c:e5:f6:bd:e0:05:db:7d:8d:0f:
84:ee:7f:b7:8c:ae:ce:b4:21:04:5d:60:c2:91:33:
34:7e:2a:6c:e0:8e:b3:63:d3:c2:5a:f3:e8:32:f0:
e0:cf:ff:c9:d8:ac:1f:d5:9c:12:a8:2c:a4:63:62:
1f:86:fd:68:2e:51:de:35:30:c1:11:3f:8e:e7:07:
6d:2e:85:d0:82:ad:e9:dd:f9:e4:30:9b:80:1a:0a:
55:85:16:72:0e:a3:ff:2f:6b:66:c5:f0:6f:84:6c:
e0:80:5f:59:73:37:9a:16:5f:e1:39:9c:c0:13:e1:
7e:78:ec:47:5d:a4:e7:e8:15:08:69:66:90:0d:60:
6f:70:90:cb:67:92:86:f3:a7:a9:63:8e:9b:b5:79:
77:ac:a6:81:1c:22:2e:49:27:6c:6c:f4:1a:fa:28:
0c:0a:24:ca:f3:ff:92:e3:46:44:3b:09:a2:37:8f:
67:1c:a0:63:b0:bb:de:18:75:99:af:70:ff:59:0d:
b7:fb:62:7f:9f:ec:bd:d5:05:85:32:53:89:13:a4:
d4:5d:97:3c:c1:12:ec:5d:0b:21:c5:70:af:67:b6:
72:18:06:21:25:84:03:f3:4b:53:5d:ed:da:03:ed:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:F7:55:EC:C4:30:61:69:56:9D:BC:D4:CC:B9:CB:8E:52:E9:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UDD3VezEMGFpVp281My5y45S6Ys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ac:53:8b:48:c1:0d:26:a6:63:ad:fc:1b:31:62:10:d1:c6:70:
b6:46:83:6f:90:f5:d4:02:55:69:b9:e3:14:01:08:ec:15:a7:
7f:1c:6b:b7:de:ab:74:81:20:1f:39:70:7d:b9:6b:be:6e:53:
f1:e4:0f:87:cc:e6:b8:58:8b:01:c5:29:64:30:96:5e:42:23:
cd:16:fb:7e:64:2d:d6:b6:ea:15:3e:53:af:32:40:7c:f4:9f:
7f:a6:8c:83:34:da:8e:5d:66:c3:ec:9d:d5:57:ac:5f:ea:34:
96:b5:47:f3:2b:ea:92:8f:cf:48:4d:59:d0:22:64:48:7f:a8:
c4:c9:20:8b:cd:e3:93:2b:43:3b:9c:09:05:35:27:c3:0b:6b:
50:05:a7:46:0f:7f:49:dd:c7:a2:b5:c7:cc:76:9e:76:18:47:
b4:ce:a8:6c:13:83:0c:24:5d:d2:f7:67:c7:3c:d7:5d:f7:36:
e2:6b:df:a8:94:e4:07:1a:01:f3:00:b2:2e:22:22:32:ec:9c:
a3:17:23:fb:c1:19:72:2d:ac:09:0e:f2:59:49:ed:26:e9:92:
63:cf:c0:79:e4:1b:fa:05:3b:23:28:c6:ec:01:a9:8c:72:79:
6c:89:d9:86:a7:5c:7c:70:c9:7c:33:71:92:f0:a5:40:b6:5e:
a0:e3:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:45 2024 by rpki-client on console-ams.rpki-client.org