Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VzIxmlU_x9lbGqym1RmYM4Rm1F4.roa
File: VzIxmlU_x9lbGqym1RmYM4Rm1F4.roa (raw, json)
Hash identifier: o75KpKDT1t7s2lWVjKbiV7XRHHBSns38d1P4SVlJ3K4=
Subject key identifier: 57:32:31:9A:55:3F:C7:D9:5B:1A:AC:A6:D5:19:98:33:84:66:D4:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VzIxmlU_x9lbGqym1RmYM4Rm1F4.roa
Signing time: Mon 01 Apr 2024 16:52:12 +0000
ROA not before: Mon 01 Apr 2024 16:52:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14039 (0x36d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 16:52:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5732319A553FC7D95B1AACA6D51998338466D45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:1a:34:3b:78:7c:df:4c:56:d3:cd:d0:fa:
e0:a4:16:75:c9:3b:42:65:72:9b:dd:20:c1:ff:21:
c1:81:07:c5:8f:3e:1e:80:bf:7b:3d:7e:78:86:03:
06:d4:9d:1c:4a:8a:0a:36:54:6e:e4:b6:45:18:7b:
f2:8d:ca:1c:66:ef:60:51:6b:cc:be:df:d9:d9:31:
84:44:09:2e:b1:bb:68:6b:ff:7d:28:c7:2c:cc:25:
ae:02:0b:92:d1:b9:d7:e7:af:7b:f3:5e:06:18:3a:
b0:ae:17:21:5f:b4:cd:6b:3e:bd:bd:e4:91:ae:7d:
08:dd:bf:aa:92:3c:23:dd:a2:7c:d7:e1:da:7c:ed:
af:2d:9d:22:ab:35:3a:fb:86:bf:6f:a8:5a:10:78:
6d:3e:03:bc:d5:02:c4:d7:b6:fc:10:f9:1b:7e:d1:
d5:e5:78:90:ee:e8:d2:df:83:ab:6c:0e:df:e3:52:
e0:92:6a:e0:12:dc:0d:46:b8:1b:2f:49:f4:42:91:
da:30:8d:63:ec:e5:de:df:71:8b:63:ec:5c:5f:94:
1b:ec:ca:a7:7d:05:cc:97:db:1f:44:09:8b:b8:5b:
f9:29:92:6f:62:41:9f:96:17:64:db:7a:f1:62:b2:
27:03:fa:f5:62:12:e5:60:ee:b7:f2:9f:80:f2:7f:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:31:9A:55:3F:C7:D9:5B:1A:AC:A6:D5:19:98:33:84:66:D4:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VzIxmlU_x9lbGqym1RmYM4Rm1F4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:4b:88:22:6c:c9:e8:c9:c4:43:61:43:e8:51:c1:07:8c:93:
7b:77:8e:d0:06:a0:f8:00:df:60:4b:76:54:db:07:f6:a8:1c:
3b:25:20:65:a0:8a:06:2f:00:d6:78:b3:18:d1:c9:16:46:43:
ee:6a:73:3f:e6:d8:54:43:a0:58:3c:83:f5:68:ce:ac:61:84:
e6:a0:27:7b:c4:20:dd:00:82:f9:5a:65:44:de:86:aa:85:9d:
2b:6e:a4:14:f3:e2:4d:97:d9:1f:03:b5:72:de:c5:c5:3b:10:
38:ef:02:af:f1:7e:ce:a7:a9:34:64:5b:bb:a7:c4:a2:85:d4:
6b:56:46:d3:85:6a:0d:9f:21:fd:d7:b1:43:8f:8c:b9:67:92:
f3:ab:4b:94:a0:d8:1b:b7:30:50:bf:10:e0:ac:78:96:24:17:
ba:f1:ef:e2:a8:22:02:d4:53:b1:41:2f:69:b3:aa:03:73:92:
9e:3e:d1:65:9a:6d:4c:47:ba:4a:04:3e:fb:87:b1:f0:e2:2b:
40:bc:dd:19:60:f5:95:48:42:81:67:32:36:fa:78:03:b1:62:
e2:33:de:bd:8f:33:bd:c0:e8:f8:d1:6e:9a:67:4c:a4:a4:ab:
f7:24:11:33:8b:68:ad:98:88:b6:38:d4:f0:12:24:43:75:26:
be:91:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org