Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VAXamQXEgTPchmaaJBnIIAMVb8A.roa
File: VAXamQXEgTPchmaaJBnIIAMVb8A.roa (raw, json)
Hash identifier: +ATEOBAd5fgLAEldHJKq3wbvW57mrv37msRJZQmV5UI=
Subject key identifier: 54:05:DA:99:05:C4:81:33:DC:86:66:9A:24:19:C8:20:03:15:6F:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 450B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VAXamQXEgTPchmaaJBnIIAMVb8A.roa
Signing time: Sat 20 Apr 2024 15:23:06 +0000
ROA not before: Sat 20 Apr 2024 15:23:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17675 (0x450b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 15:23:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5405DA9905C48133DC86669A2419C82003156FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:98:7c:82:a7:14:17:e3:4d:90:7f:73:8c:
82:4c:d0:0b:90:a5:79:54:cb:2c:49:a9:77:01:1b:
27:e8:f0:9f:cb:6b:bb:07:54:91:93:79:39:01:3f:
c6:89:84:35:a7:2e:c2:86:8a:92:28:3c:3e:99:bf:
f4:e0:9f:91:47:d2:2a:c8:cb:4d:8f:e6:a9:b4:80:
86:53:b9:9d:2e:42:fb:47:16:d3:2c:e8:41:11:a5:
71:e5:d1:30:cc:16:7f:20:57:bd:ea:03:4c:f7:9a:
de:2a:96:fa:47:a7:3c:36:60:71:76:4e:a9:7d:32:
2b:0b:56:63:71:ff:a1:e2:f2:08:70:76:c6:2f:3b:
3d:6f:df:d4:30:61:0f:dd:21:6e:d9:32:35:39:49:
61:29:f2:82:97:53:30:82:dd:0e:94:17:db:86:da:
ed:7a:82:51:60:ab:71:83:c9:a3:f0:ab:9f:16:27:
2d:0e:6e:73:74:e4:32:1d:ee:59:be:19:34:23:69:
00:91:7a:0f:6e:99:44:86:f0:4c:ec:b9:65:3a:d9:
05:b4:ad:e1:f0:f7:f4:2f:55:aa:05:7d:bf:4a:f6:
b1:bc:5d:bf:d7:34:db:9c:a1:9c:9a:86:32:d0:07:
69:08:de:d5:62:68:61:8b:d5:d6:36:ab:45:e1:44:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:DA:99:05:C4:81:33:DC:86:66:9A:24:19:C8:20:03:15:6F:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VAXamQXEgTPchmaaJBnIIAMVb8A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:b5:fe:45:a8:be:f8:94:38:ce:45:4e:bb:12:31:4a:9a:ab:
23:99:7e:f3:45:33:81:2a:a0:27:87:d3:c3:5d:36:43:da:5a:
02:2a:1c:29:fb:6f:a2:68:8d:69:7d:ab:c5:93:ac:bc:c5:c9:
1c:51:5a:08:c1:d1:b9:ed:7e:d1:8d:20:f3:42:ac:2f:fd:04:
b6:0b:ac:0e:71:ed:58:36:f6:d7:ae:a7:b0:6d:da:5f:72:7f:
29:56:61:7c:4e:95:ea:c7:5b:cb:71:a0:73:b7:da:a8:be:34:
49:98:44:38:0b:e5:bf:dc:25:65:2d:f2:92:32:ff:5a:ec:96:
af:29:65:5d:4a:08:97:a9:39:6a:7f:6f:86:0b:d5:1c:6b:75:
59:35:10:4c:0f:aa:f1:cc:94:3d:00:ad:2b:8a:95:24:80:11:
58:76:c5:4b:be:39:85:11:48:16:5b:c4:cb:b9:c3:7f:53:33:
60:0d:99:c7:a6:93:0d:f5:ac:d6:e3:44:41:6c:50:0d:1e:b5:
9f:4a:8c:41:2e:ce:fe:32:d9:3d:b1:9f:bc:af:59:a1:0a:a7:
ef:72:53:76:2c:9c:54:a6:c8:c7:8e:64:ab:b7:2a:dc:b0:df:
d7:03:55:b8:68:6c:93:14:c8:44:60:8f:6e:08:55:ad:3a:ca:
2c:88:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org