Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UvlrA7N4bMG3U7x620-dQv4SQTk.roa
File: UvlrA7N4bMG3U7x620-dQv4SQTk.roa (raw, json)
Hash identifier: J7ECV4fe8s96Nxi/HW7ycaKP3RwfCCL/HqP/e69R0SE=
Subject key identifier: 52:F9:6B:03:B3:78:6C:C1:B7:53:BC:7A:DB:4F:9D:42:FE:12:41:39
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 572B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UvlrA7N4bMG3U7x620-dQv4SQTk.roa
Signing time: Tue 14 May 2024 19:24:14 +0000
ROA not before: Tue 14 May 2024 19:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22315 (0x572b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 19:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52F96B03B3786CC1B753BC7ADB4F9D42FE124139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:ac:93:85:29:23:3e:a1:8d:df:64:05:20:
b7:7f:31:c3:99:a0:d3:3e:64:21:25:24:a4:35:b0:
a2:7a:cf:8b:2a:2c:b8:75:0f:a5:51:8f:fd:fc:01:
c3:de:ef:4a:fd:fd:f5:50:e8:5a:0e:3a:d4:29:cb:
05:1b:08:09:77:ea:b6:30:7c:0a:f3:1a:61:77:cc:
25:4f:1b:44:f3:12:bc:fc:84:ea:bc:d5:2b:60:0e:
d4:79:95:2a:ea:25:66:84:85:fd:22:ff:14:9f:8a:
c2:42:69:da:a7:11:9a:0f:55:e7:c6:a3:87:bf:35:
d9:92:a3:09:6a:8b:3c:0c:4d:b6:60:7d:85:c6:5c:
66:ee:d3:45:f2:9e:25:8d:5d:17:62:96:ba:7a:04:
a9:7a:07:16:1e:d7:7d:42:bb:89:0c:09:c5:ef:74:
84:ea:b5:68:93:0c:f9:90:d4:8a:55:58:5c:53:e1:
06:35:b8:03:9f:12:44:26:be:aa:78:ed:89:b0:ed:
11:61:0d:5f:19:99:6d:40:f9:f0:35:43:ad:1a:d8:
5d:06:02:6b:d2:17:af:75:3c:39:92:e8:2a:36:ad:
42:46:9d:a7:17:5a:5a:79:a1:a5:61:1c:ee:81:92:
b3:e8:c1:3c:92:9b:e0:17:ad:21:8c:00:fb:d5:fe:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:6B:03:B3:78:6C:C1:B7:53:BC:7A:DB:4F:9D:42:FE:12:41:39
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UvlrA7N4bMG3U7x620-dQv4SQTk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:b9:6f:62:e7:fc:f0:ba:e6:dc:62:47:4b:e4:3c:75:e6:d5:
b3:df:38:b0:bc:c2:d7:82:fd:e3:08:cd:ca:17:6d:cc:59:c2:
dd:fd:94:56:fe:56:cb:11:9c:b4:af:47:e8:31:78:72:e6:1a:
3c:1b:ce:14:e6:48:bd:40:2e:6a:e1:97:ed:d8:69:3a:81:74:
50:ec:80:7d:fc:f4:fa:b3:41:39:e8:97:5f:1c:2f:9e:d8:64:
3e:2d:bf:0a:97:2e:af:48:97:21:de:86:2b:c6:f3:74:d2:a0:
4a:d4:1a:90:1f:ad:ec:6c:23:6d:c3:a8:9d:33:b5:de:fb:92:
ca:c8:06:92:12:fa:34:86:ce:16:9b:04:48:f1:f7:99:89:29:
28:89:f5:6a:e4:fa:57:6b:17:16:e7:0b:ed:a0:75:68:0d:5f:
47:82:4d:c2:06:f5:00:c0:87:0e:ae:f8:56:30:4a:59:26:a7:
54:56:98:95:60:c7:bc:c4:d3:01:df:5a:96:ff:53:e0:59:e9:
ed:d9:f2:2e:6a:28:00:f3:35:08:6d:fc:3d:ab:41:69:b0:9d:
94:03:e8:5e:d0:52:4b:ea:cf:fa:31:ff:cb:ea:3c:86:14:e4:
42:9b:f5:f7:82:5e:8a:2a:d5:25:5a:ad:ab:45:77:aa:ef:17:
19:44:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org