Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UJI4akurm8FYHVOUFkykYq1XP3w.roa
File: UJI4akurm8FYHVOUFkykYq1XP3w.roa (raw, json)
Hash identifier: 62eYz28zp+YmCI2GHX4eqNAMoQu8JEFlz3Kz6rNc04g=
Subject key identifier: 50:92:38:6A:4B:AB:9B:C1:58:1D:53:94:16:4C:A4:62:AD:57:3F:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CF3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UJI4akurm8FYHVOUFkykYq1XP3w.roa
Signing time: Tue 09 Apr 2024 20:22:40 +0000
ROA not before: Tue 09 Apr 2024 20:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15603 (0x3cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 20:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5092386A4BAB9BC1581D5394164CA462AD573F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:3d:a6:60:48:c6:52:c1:18:b4:43:7b:79:
2d:f9:70:7f:24:d5:b4:73:25:b1:45:81:ca:2a:73:
0e:e7:02:b3:4f:c8:af:87:0a:75:dd:82:e6:16:d6:
57:a0:06:32:7e:22:d6:8a:94:9e:dc:3e:8e:bd:36:
fe:2e:dc:96:a5:4c:c4:6b:d4:fe:08:35:b7:c4:22:
dc:c3:99:e7:45:e9:0a:f0:5a:b2:ee:7b:f0:ff:5c:
1e:58:b9:fc:5f:83:dc:b0:96:a2:ba:1a:7c:a2:e1:
28:76:31:95:df:ca:98:3b:b3:a2:db:fc:5f:10:76:
dd:85:9a:74:5d:85:a4:f6:24:64:2e:d1:54:d8:76:
11:21:ca:66:1e:88:83:e8:be:57:82:a9:b5:a8:1c:
f4:60:76:f6:a3:96:a0:4d:2f:3e:49:60:db:8d:1e:
29:cb:64:4b:ee:83:43:3a:10:2b:38:d3:28:d7:ae:
3c:9c:51:f7:87:82:6c:0a:81:9a:1f:cc:2b:83:83:
39:34:66:90:3c:8c:0d:c0:5e:be:d4:ac:f8:00:7a:
3c:d6:e6:27:13:ef:8b:2c:be:74:ef:7c:b8:f7:42:
33:1b:c9:98:f0:03:3d:bc:15:d0:31:a3:db:0b:f4:
52:27:86:56:ed:88:0a:c6:36:46:51:bb:fd:a1:86:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:92:38:6A:4B:AB:9B:C1:58:1D:53:94:16:4C:A4:62:AD:57:3F:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UJI4akurm8FYHVOUFkykYq1XP3w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:c4:82:f3:3c:59:7a:a1:9e:a5:f5:55:44:e2:d0:09:fc:a5:
a2:84:06:a9:80:ca:27:91:be:80:0d:f9:2f:60:9c:43:61:92:
29:05:8e:f2:e3:20:26:6a:e9:aa:6b:17:93:ee:db:e2:02:ad:
4c:28:99:d3:e8:ec:2f:9c:e4:de:77:e4:f8:d2:7e:9d:60:b5:
3a:c0:38:12:ef:4a:5b:41:6f:1b:d3:c1:e6:5a:11:38:22:0e:
ab:8e:3a:55:0e:81:b2:0b:0e:c1:2a:ca:5e:bc:2e:7a:d5:3a:
fc:4f:f3:4c:bb:d3:1a:2c:50:38:59:d2:e0:80:f4:99:46:d5:
51:9a:49:27:af:48:46:b7:4e:83:14:b6:9e:82:5a:00:67:ad:
b9:c8:ad:98:6b:b0:f2:22:48:e1:8d:6e:c6:90:12:2a:e7:98:
55:c0:9d:8c:3e:a9:c6:38:a2:84:af:c5:7a:91:e4:8c:cc:d3:
54:64:9f:6b:3e:a7:72:84:7c:6e:e3:4e:83:72:6a:ac:e2:75:
a1:a1:aa:e1:77:f2:93:a3:97:ea:e7:35:46:57:ab:a7:92:75:
99:02:53:0b:8c:45:18:97:3a:54:22:31:19:38:20:d0:d3:75:
dc:6e:16:9f:aa:3b:79:95:eb:16:e8:fd:a9:20:e6:f6:96:9b:
91:0d:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org