Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VlqZqhG5co43qplJj2HBgPpYD6k.roa
File: VlqZqhG5co43qplJj2HBgPpYD6k.roa (raw, json)
Hash identifier: NKyyAKq2y4yI/gKdeZzZNiqqnrgiQg9tWRga/ziwkpM=
Subject key identifier: 56:5A:99:AA:11:B9:72:8E:37:AA:99:49:8F:61:C1:80:FA:58:0F:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F07
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VlqZqhG5co43qplJj2HBgPpYD6k.roa
Signing time: Fri 03 May 2024 22:53:49 +0000
ROA not before: Fri 03 May 2024 22:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20231 (0x4f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 22:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=565A99AA11B9728E37AA99498F61C180FA580FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:ca:4a:c5:22:45:05:32:da:d8:1f:8b:f3:
08:d3:de:0a:2c:f3:b1:84:71:48:76:aa:7f:5a:68:
74:55:07:4a:31:9d:54:26:a0:06:83:b6:dc:5b:7f:
fa:e5:05:e8:fc:a2:1a:5d:f4:b1:12:33:0f:6c:6b:
b8:cc:62:63:3a:68:6d:57:e0:e6:be:ae:b5:23:71:
9d:9b:4b:51:6e:ba:07:30:80:9c:93:7b:3c:46:cc:
e7:16:bb:17:4e:94:7a:0c:b2:67:53:cf:9c:48:21:
f9:03:c4:0e:f5:57:ad:ff:fd:f0:b8:6c:f2:57:50:
be:69:ba:0f:89:5e:01:f2:41:e8:ee:e1:aa:56:93:
11:f5:ad:2e:a7:34:99:fe:49:2e:6d:d5:89:ab:2b:
10:98:51:41:db:36:65:0a:5f:c9:c0:c6:84:c5:f8:
8a:b0:dc:ed:16:fb:d4:1b:85:ab:1c:b8:1c:7b:cf:
8a:0f:c8:1e:fe:9b:ff:f1:e3:08:fd:9e:1a:52:e2:
15:fa:d5:98:b3:68:a6:0e:61:f7:f4:c4:3f:b7:ba:
0a:b0:fa:cf:60:5e:f1:ad:f5:02:32:84:2f:b0:42:
09:f3:81:e5:42:12:28:2d:85:88:5b:6e:8b:04:07:
32:d5:c7:cf:5e:24:f5:fb:43:4f:96:dd:82:4b:a7:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:99:AA:11:B9:72:8E:37:AA:99:49:8F:61:C1:80:FA:58:0F:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VlqZqhG5co43qplJj2HBgPpYD6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:54:9e:8f:b0:2a:50:c1:09:23:ad:1a:20:54:91:a5:c3:08:
bd:79:e6:ca:a0:5e:08:9b:4a:4f:d2:de:85:2f:07:9f:75:d0:
1c:c8:5d:45:2a:25:10:b6:89:71:0c:be:4a:86:5b:56:26:d5:
70:a4:db:e2:10:2c:d8:98:94:7f:87:2a:e8:4f:77:ba:10:28:
08:dc:ff:43:4f:2c:4d:20:08:53:15:3c:02:29:7b:cc:f2:a9:
71:7d:94:bf:7e:f5:fb:26:11:08:a0:cd:5d:e2:6b:ff:02:7a:
20:9d:30:e1:f9:6e:82:42:8b:56:a7:3c:4b:95:55:2b:bd:d7:
01:40:5c:d9:d7:10:47:ea:59:d8:56:bb:c4:7b:c2:f4:3c:9a:
2f:3c:ac:0b:b6:d8:64:9f:b0:72:65:ae:c3:53:19:af:f7:a3:
be:5c:f6:b7:7a:2b:fb:cf:89:08:87:64:0a:31:8d:02:c7:1d:
28:0f:1d:9c:c0:b7:c7:15:dd:cc:a5:d9:a0:f0:f6:34:33:08:
2e:2f:5f:5b:0f:5b:fa:af:85:95:16:15:71:88:0a:8e:36:a1:
1e:d1:45:eb:ed:10:b9:49:ed:16:4a:30:76:f9:69:e5:16:d2:
dd:12:35:9e:67:e5:57:32:1d:2c:2e:b8:14:7f:a2:63:4c:71:
a2:d7:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org