Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WRhqajeLGFJdFV5FY7JRKPbel_g.roa
File: WRhqajeLGFJdFV5FY7JRKPbel_g.roa (raw, json)
Hash identifier: QcPWwImd5plSOutBDcXHmx27VjHVAoAmvTk3dZqkoDs=
Subject key identifier: 59:18:6A:6A:37:8B:18:52:5D:15:5E:45:63:B2:51:28:F6:DE:97:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 385B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WRhqajeLGFJdFV5FY7JRKPbel_g.roa
Signing time: Wed 03 Apr 2024 17:22:19 +0000
ROA not before: Wed 03 Apr 2024 17:22:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14427 (0x385b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 17:22:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=59186A6A378B18525D155E4563B25128F6DE97F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:aa:b6:43:f5:8e:77:f8:27:d6:78:8a:9f:
96:37:33:14:ba:c2:bf:ad:22:cb:d7:e6:10:88:08:
dd:94:0d:52:fd:22:75:52:5e:31:12:75:6d:42:12:
6e:94:15:8b:8d:33:98:c6:27:e0:29:e3:df:e7:5e:
ec:70:9d:d4:96:54:3b:ef:d0:65:73:de:e5:1d:08:
98:60:bf:b4:59:5f:34:f1:f8:1a:61:25:8f:9d:60:
4a:a0:eb:14:69:80:2e:17:b1:eb:74:e6:75:19:a2:
d9:79:5c:b9:da:7a:72:32:80:99:17:8e:ca:2c:a3:
a5:70:2c:0d:bd:0a:ce:5d:39:76:f5:d2:0a:7c:86:
b0:92:b2:2c:ea:9f:02:85:77:6f:94:28:89:3f:d6:
8f:08:12:9f:ca:c4:a1:fa:70:ef:b3:09:01:aa:63:
d5:0b:74:35:9d:b0:5d:5b:20:74:f6:dd:c1:6a:60:
c8:b1:c1:eb:31:8e:3d:02:fd:36:c7:40:f1:30:53:
70:9d:3f:95:c6:af:c5:84:96:7d:d7:a3:4f:72:de:
03:6b:d5:b3:8f:9c:f5:3f:70:54:b9:46:1e:46:71:
21:3d:29:c9:b7:b2:31:17:6e:8e:32:eb:6c:44:c6:
fb:73:71:ce:65:4d:e3:2c:8a:96:c6:dc:03:45:9c:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:6A:6A:37:8B:18:52:5D:15:5E:45:63:B2:51:28:F6:DE:97:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WRhqajeLGFJdFV5FY7JRKPbel_g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:bd:af:a2:ae:8c:12:02:bc:b2:83:5a:d0:46:9c:72:27:4e:
a0:f1:de:e3:b8:09:6e:7b:d7:20:1b:5e:2f:e8:70:fd:e2:1e:
fa:81:51:3a:62:c4:ba:68:f3:3d:56:c1:bf:37:29:88:dd:7c:
a7:d6:f9:38:d8:c8:05:3b:39:32:b9:9b:d7:cf:1d:62:1a:38:
ce:dd:20:65:5f:8a:19:dc:61:0c:3f:ae:a1:6c:b2:bd:b7:fc:
93:75:ac:7a:88:01:a4:b9:e1:dd:22:0f:0e:d4:cc:09:a9:54:
1c:7f:b7:af:b5:2c:6f:fa:bc:a3:f6:23:80:cd:e9:75:e4:96:
13:e0:be:75:ad:1c:cc:f2:ce:d0:7f:ef:0c:ed:d6:3d:ce:62:
91:50:46:c9:d8:39:0e:a1:04:31:46:6f:48:bb:49:67:75:d1:
97:eb:6b:ca:c5:67:0c:e3:14:59:34:7b:d1:c6:12:8d:e1:f1:
3a:6e:cb:00:ac:f3:3f:48:4a:6c:98:cb:df:d1:a7:84:0d:96:
98:7f:6f:ea:48:bb:7f:2a:82:7f:60:ea:e5:db:b5:3b:79:74:
57:b3:38:f6:0e:34:73:d9:4c:b5:48:8e:06:3a:79:77:a9:26:
f4:92:be:46:9c:f3:9f:5b:e6:e4:75:6c:69:36:15:8e:52:29:
fb:57:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org