Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Y-ZH60UuYMd9b-d377ygYzkjeuI.roa
File: Y-ZH60UuYMd9b-d377ygYzkjeuI.roa (raw, json)
Hash identifier: 46Dvv5YpgkpV/gQ2DOrFqcwRq3EanhmL35UWA3mu7Kc=
Subject key identifier: 63:E6:47:EB:45:2E:60:C7:7D:6F:E7:77:EF:BC:A0:63:39:23:7A:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AC7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y-ZH60UuYMd9b-d377ygYzkjeuI.roa
Signing time: Sat 06 Apr 2024 22:52:29 +0000
ROA not before: Sat 06 Apr 2024 22:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15047 (0x3ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 22:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63E647EB452E60C77D6FE777EFBCA06339237AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:48:13:aa:49:0c:d4:54:9d:0a:46:3e:0b:
47:6b:9a:39:d0:13:4d:96:ec:18:c3:a7:f5:09:8a:
e2:e4:17:14:3a:18:44:3d:37:f6:1b:a9:1f:ce:ad:
28:c2:71:3e:c7:a8:12:be:2c:bf:c9:57:e7:1c:ed:
89:0e:c3:dc:9e:f3:95:41:37:da:68:6d:93:1f:3c:
1f:5d:52:ae:af:a2:ce:b9:d5:3e:ad:2a:f6:c6:6b:
b1:b9:6a:90:e1:ea:9d:d8:c6:1d:7b:e2:ca:47:ff:
0f:61:a8:ee:17:e0:32:d9:35:8c:95:e8:af:5f:e1:
10:7b:dd:dc:15:36:33:bb:9c:84:cf:83:c6:8a:b3:
7d:12:b2:01:cd:c9:a4:9b:33:69:c8:45:31:c3:03:
dc:ca:91:8f:37:92:02:07:11:40:e0:d7:d9:ca:57:
28:45:3f:80:be:d6:2a:41:81:80:1e:dc:bb:0e:7e:
57:78:84:25:35:a9:d8:f7:fe:8e:b1:83:a7:72:94:
d8:3b:b1:0f:9d:ae:ef:b5:1e:6c:3d:79:97:f4:50:
4c:da:2c:1f:ae:0b:3b:81:4c:b3:c1:14:53:29:5f:
f4:80:4f:b2:3c:43:88:ce:52:cc:fb:f7:fd:ef:b6:
cb:c9:ff:fd:fe:ce:09:f0:19:47:a2:fc:b9:e4:ec:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:47:EB:45:2E:60:C7:7D:6F:E7:77:EF:BC:A0:63:39:23:7A:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y-ZH60UuYMd9b-d377ygYzkjeuI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:9b:b9:3f:98:4d:f2:e2:ec:d6:c2:76:cd:cd:4e:4a:3c:e9:
0e:87:25:f9:74:8d:37:61:68:c2:39:43:4c:57:ae:95:7c:a4:
9c:ea:28:f9:0a:da:c5:b7:36:4d:87:00:3d:35:46:3d:cb:9d:
35:b8:d7:2a:71:47:0c:43:16:75:0e:82:70:40:8c:7c:e2:89:
2e:ee:d6:1b:d4:fd:4a:5a:77:05:af:c8:ce:3b:72:90:59:37:
57:e3:5b:18:56:d2:f1:9e:6e:f9:44:6f:dd:6d:fc:df:d6:ef:
c5:4d:50:34:3f:fe:39:81:45:dd:cd:4c:a0:22:95:48:1f:01:
2e:e6:37:7f:65:eb:e5:39:f3:5c:1b:c1:01:8c:0b:83:ee:f1:
aa:7d:30:71:fb:3a:be:8d:f9:4f:55:f6:f4:e7:6b:16:ba:8a:
2e:1e:50:30:a6:85:78:58:a5:57:7e:a2:cf:d6:c0:3e:3a:1b:
83:ba:28:85:9a:a8:5d:a0:e9:40:81:7e:8c:a2:2e:15:c8:ed:
df:24:ff:d7:25:52:db:9f:13:60:82:11:7d:e6:6f:4e:99:23:
8e:2b:42:a6:c1:93:75:dd:b3:c7:bd:5e:3f:b9:f1:0f:71:a0:
5f:5e:3c:53:82:bd:e5:d0:8a:b7:12:da:50:ac:d1:99:2b:21:
a0:5c:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:49 2024 by rpki-client on console-ams.rpki-client.org