Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V7HxpveTN8ThjMGGT0ZRPt5YCDM.roa
File: V7HxpveTN8ThjMGGT0ZRPt5YCDM.roa (raw, json)
Hash identifier: vWkui9V3R4nmWaBtnQz8Qt2Co+sMqn63z6UUvD8u3pc=
Subject key identifier: 57:B1:F1:A6:F7:93:37:C4:E1:8C:C1:86:4F:46:51:3E:DE:58:08:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 566F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7HxpveTN8ThjMGGT0ZRPt5YCDM.roa
Signing time: Mon 13 May 2024 19:54:07 +0000
ROA not before: Mon 13 May 2024 19:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22127 (0x566f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 19:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57B1F1A6F79337C4E18CC1864F46513EDE580833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:e8:90:11:56:e2:3d:be:ad:99:37:bd:7b:
b7:0c:8d:8c:25:fa:56:9f:7b:50:6a:bd:3b:43:13:
22:da:4d:b9:1d:9c:3f:7d:29:e3:d2:60:0a:a0:6d:
1d:b4:e5:13:b7:03:59:ea:c3:7b:9b:8a:e7:97:01:
df:d0:1a:ab:02:33:6b:3b:fd:77:9a:f6:ba:7d:f6:
7a:16:dd:8d:bf:e1:6e:a2:18:97:ab:8c:57:9a:36:
47:1f:74:5e:85:6d:bf:24:ee:93:44:09:2d:79:16:
f8:cd:25:69:bd:2b:7f:33:45:a9:0e:50:67:ad:8d:
95:fe:05:a7:5f:44:08:64:8b:1a:14:bf:b5:0f:e1:
a1:0d:da:7f:0b:99:04:fc:c0:44:2a:2d:d7:1a:f2:
a0:c7:7e:6e:7d:4a:9f:4e:a5:97:38:24:84:d4:ea:
8e:97:23:43:b6:ff:03:d5:55:c1:2a:be:93:75:2b:
89:8f:ed:2e:cd:39:74:99:f1:24:e8:60:79:01:4b:
81:9c:a7:f6:14:04:be:c5:d7:04:9c:9f:70:c5:36:
1a:3f:ad:73:54:37:66:41:06:46:ac:16:b2:9f:cf:
5f:bf:07:8d:38:7e:6c:35:6a:90:86:c8:e1:74:60:
10:7a:cb:fe:f6:1a:97:77:b4:4b:5a:b3:63:f8:8f:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B1:F1:A6:F7:93:37:C4:E1:8C:C1:86:4F:46:51:3E:DE:58:08:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V7HxpveTN8ThjMGGT0ZRPt5YCDM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
78:d7:8b:6c:21:4f:6f:73:f8:dc:f5:b6:a8:c4:bb:d4:91:04:
04:4d:06:ff:fa:62:6a:16:0f:8a:dc:61:4b:28:58:a9:7c:24:
0e:28:de:48:7f:d1:fb:91:22:30:9b:04:a7:99:72:1f:f4:ae:
ad:ba:65:35:b9:17:4b:9e:e6:16:43:15:a6:01:f7:0d:87:7c:
29:fb:8c:f9:fc:97:8c:b2:07:33:61:25:41:7e:61:d0:f4:e5:
1f:82:c4:62:63:b5:76:19:75:2f:f0:3b:01:28:9b:80:35:af:
5c:ce:a1:f4:61:0a:b3:eb:3b:5c:9e:42:06:bd:81:1c:0c:15:
82:a2:c7:94:d2:89:1c:4d:28:c4:05:03:c7:2d:f7:ce:3f:ea:
43:12:7c:24:8c:a6:c9:d2:d3:bb:d1:16:97:09:c2:62:22:f2:
27:ca:c8:3f:9c:5f:e7:9d:11:e7:3e:2b:ed:d9:bf:9e:e4:97:
91:d4:8b:44:ed:b2:f1:d3:c9:6d:4c:b4:4c:36:10:fb:73:c0:
3b:fd:1f:aa:c4:70:6e:12:d7:5e:fe:59:2e:07:20:5c:0c:37:
ab:2b:0f:a6:a1:46:8b:79:24:16:0b:df:eb:d1:9f:59:af:42:
b3:90:95:20:bf:74:8f:ae:8b:a5:66:10:d0:2b:dd:6c:18:bf:
b4:ed:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org