Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/YeuTr3KS3187PbGa0f8GWcX00Yg.roa
File: YeuTr3KS3187PbGa0f8GWcX00Yg.roa (raw, json)
Hash identifier: xguap9TofkTUpRt3vXe/hiwdaUkHWGCJaviXIvYUcxY=
Subject key identifier: 61:EB:93:AF:72:92:DF:5F:3B:3D:B1:9A:D1:FF:06:59:C5:F4:D1:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YeuTr3KS3187PbGa0f8GWcX00Yg.roa
Signing time: Sat 20 Apr 2024 12:53:12 +0000
ROA not before: Sat 20 Apr 2024 12:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17655 (0x44f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 12:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=61EB93AF7292DF5F3B3DB19AD1FF0659C5F4D188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:69:ed:19:08:18:04:d3:81:c3:ce:66:0a:
04:0c:31:21:4d:92:5d:e9:53:49:f0:39:b2:55:50:
4d:40:c6:62:5a:3c:17:54:f1:5e:56:ab:0e:ba:ff:
d7:8b:bd:25:7b:65:62:14:31:56:32:86:44:aa:1c:
54:32:53:b6:5a:d9:b3:08:66:75:be:06:57:30:24:
7c:ec:b1:b0:4b:95:6b:92:1b:9c:bc:c4:26:db:fb:
a1:84:10:67:b7:cc:5c:a4:9a:1f:1d:d3:fc:b2:08:
92:1c:15:a2:0f:c8:8a:ca:c0:1d:52:56:2a:b8:dd:
b4:55:32:f8:04:52:ab:da:6e:cd:55:19:f8:91:6a:
e6:8c:fb:ae:6f:02:59:3c:55:14:1a:eb:d0:ba:06:
4a:d4:a8:fa:d3:d7:ca:92:39:34:de:07:9b:40:82:
15:db:f5:d6:c2:33:1b:b9:03:61:ac:ef:d0:9a:fe:
e5:ff:52:7e:e9:00:57:7c:2a:61:9c:c2:c4:88:16:
c8:7a:30:05:0b:f7:e7:fb:4e:fe:d1:f7:44:6a:6c:
fb:49:62:cd:92:72:c3:7f:9c:3b:38:81:32:b4:84:
59:9f:14:74:b7:e7:7f:03:88:8c:0b:b6:90:df:c7:
33:7d:a3:81:b6:41:fe:93:d4:08:b5:d0:71:92:cc:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:93:AF:72:92:DF:5F:3B:3D:B1:9A:D1:FF:06:59:C5:F4:D1:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/YeuTr3KS3187PbGa0f8GWcX00Yg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:4e:b4:30:50:c8:11:f6:18:98:11:5d:3e:3f:d0:f3:17:4e:
57:71:4a:f3:f1:64:d0:84:89:8c:5d:87:b7:25:33:cb:c7:99:
56:51:72:27:2d:89:e6:3e:0b:82:aa:86:7b:bf:4d:85:ae:40:
26:6c:a2:16:86:6a:51:4a:fc:7c:e3:bd:78:5e:a6:38:e9:fe:
db:fd:13:72:78:67:12:64:d8:41:bc:a7:50:99:b7:2d:06:6d:
07:d8:59:9d:ae:7f:6c:3a:ee:e1:99:03:a0:ef:57:b4:11:7a:
dc:39:b2:79:f8:6f:dc:d1:c4:31:7d:00:8d:4e:2f:bc:2e:07:
97:37:73:aa:74:67:40:27:b6:19:f1:2b:08:8b:a0:88:b5:ec:
a9:e5:06:fc:48:8a:e9:45:19:fa:04:24:b3:d5:8c:20:63:a7:
cd:1e:22:1e:69:d5:7d:a8:b0:a3:11:33:60:a2:08:aa:7d:fb:
c7:f5:68:f6:c5:cf:65:89:7e:2f:fa:24:44:7a:0d:ba:cf:d7:
bc:72:ed:6d:78:b9:0e:0c:90:98:66:75:ad:78:d1:f1:8d:57:
44:7a:ec:42:c2:e8:bf:25:5d:56:32:8d:66:d6:f4:52:a2:2e:
71:26:c8:56:2d:c4:c7:e0:83:21:01:61:b3:86:56:24:ac:ff:
ac:47:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:31 2024 by rpki-client on console-fra.rpki-client.org