Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Y7J_y-qUdtH8QmYQ2zjqWfSjinE.roa
File: Y7J_y-qUdtH8QmYQ2zjqWfSjinE.roa (raw, json)
Hash identifier: Gdj1dYDVLKO+8v9f94E73MUGK7URlHcoPQrPeSd7LBw=
Subject key identifier: 63:B2:7F:CB:EA:94:76:D1:FC:42:66:10:DB:38:EA:59:F4:A3:8A:71
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EDB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y7J_y-qUdtH8QmYQ2zjqWfSjinE.roa
Signing time: Fri 03 May 2024 17:23:57 +0000
ROA not before: Fri 03 May 2024 17:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20187 (0x4edb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 17:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63B27FCBEA9476D1FC426610DB38EA59F4A38A71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:00:bb:19:41:1a:a5:76:33:ce:a9:f6:76:
5a:fc:2b:55:ea:b9:45:fd:2a:51:53:8f:a0:0e:f7:
0d:73:41:3c:08:61:57:ea:30:8c:23:40:5a:56:89:
ce:c0:8d:48:ae:c8:2f:53:33:71:29:51:1e:00:49:
40:aa:33:3d:93:e0:80:4a:76:0b:bd:e1:49:4f:a5:
10:15:50:32:1b:83:74:0a:da:37:af:20:13:fd:86:
a9:2c:58:d7:0d:62:ac:c1:07:94:2c:51:d7:96:f3:
18:95:3b:b2:a9:5c:e6:7a:bd:b5:50:9a:47:d0:7d:
45:15:d8:c2:1c:62:0e:88:58:61:61:44:ac:20:1e:
a3:d0:3b:ca:c7:a5:52:8a:4e:67:fa:09:33:5f:70:
02:16:eb:21:84:73:20:e2:1d:e7:fe:38:80:09:33:
de:0c:f2:9a:dd:bb:ff:0a:e5:6e:3f:fd:99:78:0e:
66:14:99:bf:95:e1:93:35:c3:8a:c3:18:09:d0:83:
a7:35:f7:0a:3a:a4:2b:5c:e3:a3:82:45:ff:57:55:
d0:9b:e2:37:cf:9e:df:c9:2f:df:c8:f4:79:6a:c4:
7d:9a:ba:fc:cf:74:07:a9:34:06:24:da:0e:0c:11:
0d:5a:3c:fb:39:be:3a:e2:e0:bb:26:b3:6c:1f:8d:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:7F:CB:EA:94:76:D1:FC:42:66:10:DB:38:EA:59:F4:A3:8A:71
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y7J_y-qUdtH8QmYQ2zjqWfSjinE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
20:ef:d2:ce:b8:75:c6:bd:c2:f6:9a:4c:4b:f7:89:2e:45:74:
43:a9:4a:fd:fc:84:76:14:89:df:19:5a:47:2e:d8:18:4f:d5:
4e:9c:5f:28:dd:02:59:a1:8c:c0:b9:3e:0d:17:d0:0b:19:3b:
4f:99:f1:71:bd:25:a6:14:67:b5:22:7b:07:c5:b7:64:e2:3c:
6f:df:98:e2:27:b8:04:2f:6c:58:21:19:67:76:ce:4e:bc:c6:
15:b2:bb:34:30:ce:8d:97:77:67:b7:1e:d1:a7:7a:b0:51:98:
dd:20:c1:e6:53:5c:20:58:84:44:f0:79:2d:de:fa:7c:eb:92:
5c:4f:36:5a:eb:83:ea:48:de:de:8d:77:0a:47:55:5b:ca:5c:
9d:0b:e5:03:39:96:b6:43:14:ac:36:2e:1f:2b:85:40:6d:15:
1d:3f:c2:00:30:d3:03:17:88:5a:e8:19:ce:bf:e4:fa:dd:dd:
a6:0e:7c:21:a6:91:cd:ac:c5:3d:a7:68:43:4c:4d:33:a2:8b:
95:26:1b:b8:b1:df:05:46:ce:0d:a8:29:f3:25:e6:e4:4b:43:
82:3a:95:62:53:ff:fb:8e:26:04:5c:0e:8b:5d:a1:cd:04:1c:
a6:8d:f9:c7:b5:5b:5a:77:d4:78:96:44:c2:06:01:81:66:e5:
3b:70:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org