Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UFP9o7oyv9rU5rSQOQYcJf7OgyI.roa
File: UFP9o7oyv9rU5rSQOQYcJf7OgyI.roa (raw, json)
Hash identifier: lXK6+ixTzeMVPboWgu0CB+97WjZRPrfuQXCG/9P6y9g=
Subject key identifier: 50:53:FD:A3:BA:32:BF:DA:D4:E6:B4:90:39:06:1C:25:FE:CE:83:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F9B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UFP9o7oyv9rU5rSQOQYcJf7OgyI.roa
Signing time: Sat 13 Apr 2024 09:22:53 +0000
ROA not before: Sat 13 Apr 2024 09:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16283 (0x3f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 09:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5053FDA3BA32BFDAD4E6B49039061C25FECE8322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:a8:f7:1d:86:f2:4c:d1:09:5f:a1:71:b1:
8d:f0:7c:a4:93:68:eb:2b:87:6f:b1:e2:aa:fa:82:
77:c6:54:24:83:1f:46:02:cd:a0:f7:83:4a:7a:22:
e4:c8:88:2c:23:10:69:56:7d:68:6a:0c:f3:c3:f9:
2b:82:4c:fe:2a:ef:ed:f2:6f:d3:53:d2:ba:a4:80:
43:03:1e:19:22:ea:c0:54:5f:f7:4e:af:a0:01:8c:
22:73:fd:24:e7:43:ca:ad:d1:32:4a:8a:52:f8:73:
8d:79:65:f0:ef:fa:1b:83:84:0b:a9:d2:f4:57:d3:
2d:c4:9b:1c:ff:ec:67:ed:35:51:b4:47:af:52:33:
ea:c0:88:18:f4:b2:52:f4:7f:9c:ed:f0:98:76:49:
58:1d:d6:b8:10:f0:3a:2e:8e:3a:c0:e7:71:f1:4d:
91:82:da:dc:4b:6b:90:75:2c:4c:59:4d:87:5e:d2:
27:50:1e:8c:ca:54:82:78:7f:94:01:ae:7d:e8:94:
4d:50:51:68:ad:b0:ba:c6:9a:43:21:b2:76:c5:97:
6b:ff:e5:16:bd:5e:9e:ad:1d:49:38:5c:7e:07:db:
35:4d:7b:2a:d2:db:cb:50:d8:6e:cb:ff:f9:33:39:
68:36:55:64:42:40:f2:38:95:dc:20:51:23:e7:d8:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:FD:A3:BA:32:BF:DA:D4:E6:B4:90:39:06:1C:25:FE:CE:83:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UFP9o7oyv9rU5rSQOQYcJf7OgyI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:bd:22:6e:0f:26:c2:f7:be:04:55:5b:42:3f:46:38:d1:9d:
4d:fa:55:01:28:fc:ad:1d:55:06:ca:f3:30:c9:c2:6e:c6:c7:
10:26:77:50:97:35:2d:f3:08:87:45:21:e6:e7:c1:7e:4f:58:
75:4f:76:c8:08:e3:5d:ed:5a:d3:d9:fc:67:a4:f3:e2:a3:67:
86:85:50:30:62:22:8a:86:07:8a:f3:97:63:58:24:7c:f6:f1:
36:9b:0f:78:e2:28:af:a7:58:2b:fd:38:93:cc:7a:cc:5f:f2:
d8:39:43:c8:c9:4d:e3:09:28:3f:30:4f:1b:98:39:4e:8c:77:
9f:4b:f5:a5:38:14:bc:81:e3:37:34:f1:7f:62:b9:ee:61:d8:
32:03:07:4f:10:64:21:03:df:01:9a:d6:06:b5:d9:dc:34:60:
c2:19:72:ca:a8:78:77:d5:a2:a6:51:b7:ae:0f:6d:bd:b7:1b:
8e:c9:f6:68:15:77:41:2a:ef:9f:28:c4:2d:22:08:5e:a5:9f:
a9:a5:92:1e:7c:4e:4b:b1:02:8e:ba:df:4c:62:d9:6c:6d:6e:
aa:f5:b9:30:65:a0:1b:7d:ab:fa:43:5e:b8:19:8e:20:4a:87:
21:f5:18:91:27:24:62:5b:11:54:4f:c4:f1:f9:71:86:40:e4:
8b:48:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org