Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_4Me5DHTTIFzJ13pKhbbPkCZxpg.roa
File: _4Me5DHTTIFzJ13pKhbbPkCZxpg.roa (raw, json)
Hash identifier: HvExUYap6unZ8xm8QjZZPZxe2PEK29OtHCW7nRv4SsE=
Subject key identifier: FF:83:1E:E4:31:D3:4C:81:73:27:5D:E9:2A:16:DB:3E:40:99:C6:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 391F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_4Me5DHTTIFzJ13pKhbbPkCZxpg.roa
Signing time: Thu 04 Apr 2024 17:52:22 +0000
ROA not before: Thu 04 Apr 2024 17:52:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14623 (0x391f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 17:52:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FF831EE431D34C8173275DE92A16DB3E4099C698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:95:ae:d7:32:09:5e:a1:5e:64:9f:7c:c6:
49:55:71:f7:69:c0:21:76:f4:ab:b3:2e:dc:0f:98:
2a:86:9c:0c:6d:37:29:bb:3f:04:05:78:0e:13:63:
a0:74:56:6b:51:9b:7f:d3:f6:bb:2c:cc:85:9f:49:
19:4e:cc:78:e0:9a:ce:d0:1d:28:6d:33:6c:65:86:
12:74:f2:8c:e0:7b:d7:e1:25:eb:3d:62:6e:bd:7e:
1e:af:4c:22:74:71:ef:b7:da:2f:e9:70:ec:f6:ac:
ed:e0:a6:10:90:f1:32:d9:07:30:7f:bc:b7:54:6d:
2d:2c:7f:03:c4:ee:45:0c:53:ff:96:29:76:e3:7e:
63:79:b7:48:b8:d4:94:5a:b9:34:03:b6:ef:e7:20:
c4:13:3f:37:e3:da:e3:a0:8f:a9:a8:87:f7:06:f3:
b9:2e:d6:47:40:f4:64:50:59:90:7a:0f:0f:09:9d:
2c:53:b8:7a:c0:0b:50:05:a5:cd:ad:92:00:7d:07:
20:5d:bb:52:b9:ab:77:01:a3:ea:33:58:c4:42:d5:
56:23:7a:f4:fb:69:8c:23:23:b5:74:4b:05:12:62:
a2:92:e5:c6:10:2e:88:1a:e8:89:65:b7:62:f5:94:
3c:4d:23:7e:e6:bc:74:5f:e4:a8:45:32:7b:bc:e0:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:1E:E4:31:D3:4C:81:73:27:5D:E9:2A:16:DB:3E:40:99:C6:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_4Me5DHTTIFzJ13pKhbbPkCZxpg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
70:f0:9d:67:5a:82:9c:70:cb:06:ee:57:2f:92:3a:7c:d4:66:
34:3c:2f:28:68:45:21:df:90:12:30:43:77:3c:f7:64:83:78:
08:6a:c8:e4:83:d0:20:c9:ee:44:59:ad:7c:3b:a5:76:fc:92:
b3:5f:3d:79:de:b5:88:00:d5:a6:88:13:b5:b4:e7:11:da:9e:
e8:ec:44:88:55:48:13:8c:b7:18:75:8e:fb:c2:b7:6b:af:f6:
2a:f0:bb:f2:c3:63:ee:07:e8:e8:30:e6:04:11:e2:c7:b8:87:
33:9f:5d:bf:6a:4e:76:c2:1b:5e:6f:99:6d:1a:a6:9a:ca:1a:
5f:5d:36:96:cb:01:37:6a:a5:d6:81:42:e5:3e:0c:a9:8c:9d:
88:1f:10:29:24:06:75:ad:c1:82:02:66:32:7b:53:be:3a:a5:
22:6c:f4:25:a0:b3:38:37:fd:88:05:bc:a8:51:22:a2:6f:f9:
21:4e:51:41:a6:dd:fd:11:c6:a0:d7:e2:dc:15:6d:8a:fb:d3:
a6:75:19:aa:3b:bd:df:18:88:4e:3d:a3:1c:9e:22:bd:fe:4b:
83:ee:59:ce:f0:8a:90:64:3e:65:79:f3:ae:56:d4:52:69:4b:
d5:82:e4:bc:79:ab:16:8f:de:b2:da:af:0c:cd:78:46:64:d4:
b4:41:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org