Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VVgaLl_I8CMS1j6yaVEk6laxX0c.roa
File: VVgaLl_I8CMS1j6yaVEk6laxX0c.roa (raw, json)
Hash identifier: rAi3YoUM2VfWsa+zK3gEuXLXCjUhq3n1Q9N4SOGemzo=
Subject key identifier: 55:58:1A:2E:5F:C8:F0:23:12:D6:3E:B2:69:51:24:EA:56:B1:5F:47
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50BF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VVgaLl_I8CMS1j6yaVEk6laxX0c.roa
Signing time: Mon 06 May 2024 05:54:06 +0000
ROA not before: Mon 06 May 2024 05:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20671 (0x50bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 05:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=55581A2E5FC8F02312D63EB2695124EA56B15F47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:d0:bd:c3:f5:74:7e:a3:a0:61:38:d5:0a:
f3:ec:bf:e2:97:0a:15:cd:ab:0f:56:9b:0a:8b:c9:
08:86:37:7b:bc:df:e5:82:65:76:df:65:84:90:e8:
36:41:58:78:20:ae:42:fa:be:ff:97:7d:1a:e1:85:
17:31:9c:94:8e:77:9d:67:e1:91:a5:b3:71:75:43:
5d:11:f0:33:df:a2:a2:94:7c:51:50:fa:c6:47:62:
cd:37:68:99:2d:5b:d1:c1:eb:b2:8f:f5:13:62:63:
ea:64:2e:79:f5:84:c7:3a:e2:57:06:87:5f:87:33:
81:11:f4:89:67:2a:10:79:50:eb:af:69:5d:05:01:
cc:1d:aa:3e:ed:e5:f3:f6:20:04:4d:5d:53:55:8a:
0b:c9:ed:7f:f5:74:82:05:5b:0b:be:c2:97:10:a6:
48:f0:a0:d2:cd:43:cc:d0:6e:f8:f9:8e:04:26:21:
dc:e7:88:92:7f:e9:6f:ce:68:f1:0a:3d:9d:e4:7f:
7a:c1:4c:b5:01:ec:7a:dd:0d:17:5b:c2:ac:09:5a:
57:47:f7:f8:2f:e7:4f:0a:37:48:49:51:ec:db:84:
3a:34:26:fb:db:96:39:0e:56:ff:de:e4:79:3f:46:
08:21:8e:20:8a:b6:7f:22:50:7a:9d:ef:0b:ec:90:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:1A:2E:5F:C8:F0:23:12:D6:3E:B2:69:51:24:EA:56:B1:5F:47
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VVgaLl_I8CMS1j6yaVEk6laxX0c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:1f:8f:ad:b9:63:b0:8c:fb:f3:ca:b5:9b:5f:fe:2d:69:6f:
27:86:44:b5:32:78:3e:c5:ca:2f:ef:76:64:43:21:43:fc:50:
58:8b:9a:a9:d8:ec:08:d2:3f:91:30:92:fb:1a:9e:0d:7e:cc:
15:a8:6d:99:8a:43:ad:82:9b:f8:8c:2a:b8:ea:bc:33:c4:f1:
2b:fa:c7:c7:7b:ce:6a:f8:d0:57:3c:42:05:33:7c:60:cf:40:
9c:be:91:ab:c8:98:b7:f9:66:40:6a:83:b9:99:5c:bf:74:61:
03:48:ab:ce:e0:a6:f2:bb:44:d2:4b:74:ae:f3:bd:d2:d0:cd:
d6:3d:9d:38:3c:1e:c2:33:e6:ba:69:df:13:01:c3:98:a1:2b:
7b:d7:58:20:c2:25:ac:52:77:8c:86:73:01:6b:45:2b:d2:80:
b9:14:9b:28:61:84:ad:51:12:d1:43:13:64:10:3b:4e:6e:d5:
e3:13:86:97:c5:c3:65:24:28:27:47:e0:8d:63:52:51:c9:bb:
6b:e1:7c:5c:29:98:39:00:7a:76:4f:5d:b0:3d:77:8a:f2:33:
37:d2:9d:09:0b:35:46:87:2e:b8:4f:28:a0:28:03:cc:24:1a:
fe:32:1d:cb:a5:10:b9:80:65:70:50:c7:ac:fd:c1:19:35:5b:
71:c9:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org