Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/V_-Ak9pMHEJmxoaA5EWs6RyE_xs.roa
File: V_-Ak9pMHEJmxoaA5EWs6RyE_xs.roa (raw, json)
Hash identifier: dxrlpUkh4UCqiLg1/X8hgt3A13XCFZj6LEXgc5wjOCk=
Subject key identifier: 57:FF:80:93:DA:4C:1C:42:66:C6:86:80:E4:45:AC:E9:1C:84:FF:1B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F7B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V_-Ak9pMHEJmxoaA5EWs6RyE_xs.roa
Signing time: Sat 13 Apr 2024 05:22:50 +0000
ROA not before: Sat 13 Apr 2024 05:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16251 (0x3f7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 05:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=57FF8093DA4C1C4266C68680E445ACE91C84FF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:e1:6b:b0:73:b9:6f:1f:90:16:1b:c8:5d:
55:01:75:24:0f:6b:2b:82:ac:dd:e6:06:79:00:94:
81:1a:59:5d:22:90:8d:fc:9d:fe:8d:3d:b1:35:8c:
db:09:a0:c2:0d:ea:6b:f0:f3:c2:b0:33:57:39:ae:
e2:9c:63:2f:64:67:6f:01:00:a2:58:2c:e8:49:0c:
6d:e2:2b:82:bd:91:f0:4d:6f:0d:3a:7f:d2:59:a8:
46:06:69:a8:4d:b2:87:cd:4a:e1:5c:52:6d:d9:40:
3a:ba:e8:91:0d:74:a2:0c:e1:7d:62:b8:1d:4d:ff:
a7:2c:f1:1d:2c:e5:41:24:36:7e:8d:6a:39:2f:d4:
0f:5e:45:2e:84:4d:08:96:d9:6a:4f:5d:00:07:bc:
b9:71:14:04:28:49:56:89:6e:d5:ac:30:5c:cf:cc:
00:89:f3:87:70:1d:c1:75:90:d4:8d:15:65:07:f7:
ef:44:d7:6f:36:05:61:0e:61:be:23:67:0a:8c:5b:
54:8b:33:cd:e4:27:01:ef:06:89:d6:4a:d7:24:77:
18:c4:ed:f2:69:06:a7:08:97:82:9b:85:64:94:50:
01:23:06:a7:33:bf:0f:0a:16:00:f0:f8:97:9d:de:
19:b8:48:71:28:0f:9f:22:37:94:8b:54:65:6d:8b:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:80:93:DA:4C:1C:42:66:C6:86:80:E4:45:AC:E9:1C:84:FF:1B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/V_-Ak9pMHEJmxoaA5EWs6RyE_xs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
80:52:f5:a8:ce:8b:1e:2c:28:79:6e:72:99:ca:39:4d:5c:31:
f3:21:c0:8a:e0:1e:14:0e:d0:f5:44:f1:2d:02:85:9b:5b:1e:
32:c4:f1:34:d5:e0:7a:6d:b9:f0:a1:67:e0:83:f3:85:91:99:
21:46:e6:2e:29:de:bc:52:99:d4:f9:9d:6b:8d:9f:44:ad:e5:
37:bc:17:6a:78:21:e0:8b:cc:df:e2:bd:8c:d7:b7:a4:0a:71:
ea:33:cc:6d:81:c2:3e:e2:cb:a1:7f:d7:ab:a0:c5:5a:5d:88:
53:e4:17:0d:da:0c:c2:03:ef:f1:76:4a:4d:14:37:e7:78:9a:
25:58:58:99:0e:d8:5a:31:9c:cb:f3:47:a3:8a:d9:7e:bd:b0:
01:0d:75:9c:18:f7:43:48:ac:da:0c:b8:1c:42:ae:4c:bc:51:
68:66:ff:52:b1:0b:52:47:18:06:b0:32:23:8b:f9:61:96:75:
de:26:83:3f:5f:03:65:af:fb:c4:67:f9:e8:fd:90:03:c1:4f:
7f:50:81:d7:c3:a3:f1:70:93:8f:6a:5b:e2:f6:bb:67:46:ec:
55:a9:27:87:7f:b7:8c:ff:3b:8d:06:ae:0f:02:40:dc:65:b4:
3c:54:8c:c5:9f:f8:35:8c:ad:23:c0:8e:8b:2d:46:e4:71:4d:
de:85:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org