Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VjoWCdhn-qeeAnlltFVfswvxdsM.roa
File: VjoWCdhn-qeeAnlltFVfswvxdsM.roa (raw, json)
Hash identifier: zSRSkTRQdCCeDv9O+smUYLtw9kJHzJK8lHYv/ymF/vs=
Subject key identifier: 56:3A:16:09:D8:67:FA:A7:9E:02:79:65:B4:55:5F:B3:0B:F1:76:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B4F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VjoWCdhn-qeeAnlltFVfswvxdsM.roa
Signing time: Sun 28 Apr 2024 23:53:31 +0000
ROA not before: Sun 28 Apr 2024 23:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19279 (0x4b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 23:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=563A1609D867FAA79E027965B4555FB30BF176C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:b4:a6:18:1b:02:7e:8e:37:2b:a0:15:ae:
9f:69:ee:0c:03:53:37:1b:01:b6:9e:c2:be:b4:4d:
32:18:4b:f7:ca:95:14:ae:89:04:87:07:f4:20:24:
16:07:20:93:81:ec:be:f4:2d:b4:87:e3:65:79:a9:
2b:3f:79:1f:79:ce:7e:39:46:b3:48:84:d2:ed:c4:
03:7f:ed:80:a9:b0:5c:50:95:b6:f4:a8:7b:3f:be:
6e:13:15:06:cb:14:58:9d:6d:90:af:01:67:54:a5:
6f:89:48:59:61:9f:cc:fe:42:7f:ae:39:4a:da:af:
4a:54:c2:50:bd:cd:6e:fe:a3:5a:a3:61:f2:ff:90:
5d:ac:b2:78:8b:03:55:da:73:7f:73:ca:1f:9b:71:
ce:1d:74:35:a9:1d:1f:eb:33:a7:a2:31:a7:f4:47:
47:42:52:25:fe:26:4e:33:24:19:6c:aa:c0:51:60:
7f:81:17:1f:64:18:66:17:87:2f:c1:31:67:d1:24:
fa:65:a9:02:d5:36:21:e4:16:83:89:72:8a:cf:4f:
ed:0f:e7:23:92:4a:dd:9b:e0:81:19:48:34:23:39:
94:72:48:3e:15:f2:c2:9f:aa:32:c3:0b:54:fe:e8:
99:ef:47:1b:e5:3e:30:c7:40:78:18:91:b0:0c:1e:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:16:09:D8:67:FA:A7:9E:02:79:65:B4:55:5F:B3:0B:F1:76:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VjoWCdhn-qeeAnlltFVfswvxdsM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:97:51:1f:8d:e1:9f:90:b6:80:d1:0f:ca:35:f8:2e:1b:75:
a6:36:c4:37:a7:0b:ff:28:c5:e3:ee:c8:ab:21:69:03:3d:d9:
0d:fe:e3:1b:19:3b:64:e8:13:a4:0f:f7:81:57:26:5c:dc:81:
05:f8:1a:01:d3:c1:d6:19:e6:d6:9e:8e:15:50:4a:15:1a:90:
e0:e9:a7:ef:b8:69:41:32:e3:4d:86:e7:31:ae:d1:08:bd:87:
63:53:bd:cf:37:f5:56:33:5f:6a:a4:ec:4b:82:90:b3:72:b2:
7a:4a:a2:2f:a9:96:24:68:be:1f:f5:81:8c:5c:6e:0f:82:d9:
c6:3e:4b:33:ed:53:66:a9:1c:b3:cb:86:fb:8a:24:b2:e7:9e:
a5:b8:c5:88:df:b4:11:75:e4:87:ff:ee:0d:95:1a:1b:b3:eb:
04:6d:6d:6f:6c:c9:0c:f4:fa:0c:88:40:93:f8:51:6e:07:84:
4b:0e:f3:8d:a2:90:d5:91:e8:1e:a5:72:1f:0c:68:e0:dd:ce:
d5:91:20:a9:47:37:15:45:be:56:99:f4:b7:65:2d:22:c4:1b:
0d:bd:eb:ad:14:a3:95:c1:70:42:94:01:0c:35:d7:9f:4f:a2:
e6:a9:d6:05:c6:0e:79:48:ea:f7:43:7b:d7:d8:ad:51:5c:11:
c5:e3:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org