Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_LlyUMALzCD2Br1Spe4O2Zy-1A4.roa
File: _LlyUMALzCD2Br1Spe4O2Zy-1A4.roa (raw, json)
Hash identifier: J+Oy8YjFD7jaTBMbJc2cyGbRPUSHnfK07tm9Gw3ipGs=
Subject key identifier: FC:B9:72:50:C0:0B:CC:20:F6:06:BD:52:A5:EE:0E:D9:9C:BE:D4:0E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42E7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_LlyUMALzCD2Br1Spe4O2Zy-1A4.roa
Signing time: Wed 17 Apr 2024 18:53:00 +0000
ROA not before: Wed 17 Apr 2024 18:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17127 (0x42e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 18:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FCB97250C00BCC20F606BD52A5EE0ED99CBED40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:81:fc:5e:3a:c2:2d:42:30:e5:71:6f:1c:
25:62:11:e4:60:c1:d0:37:8e:36:80:f8:19:6b:67:
ba:37:df:7e:80:7b:e9:d8:a7:84:ea:62:43:de:07:
0c:4e:67:6c:22:9d:f0:3a:d2:9a:d2:4f:ee:46:f5:
d9:51:1e:bf:e3:4b:13:37:d7:38:a4:d9:d2:78:e1:
3c:a9:a3:7e:43:54:f6:46:45:ed:a9:c4:bd:23:65:
5a:41:3e:fd:14:18:7e:f9:b9:c3:d9:b2:8a:ca:5d:
07:b2:00:26:49:81:19:11:66:d2:68:39:2b:15:40:
a0:49:13:e5:e0:0e:7e:9a:db:7f:d5:5d:52:34:dd:
80:de:a7:3c:12:57:81:ec:31:cc:fd:8b:46:e9:8c:
1d:03:b3:0a:26:66:d3:d5:a5:ec:50:5b:56:f0:fd:
fc:2b:37:8b:58:46:fc:43:ea:e2:7c:e7:e6:01:10:
a5:ef:d3:c5:91:23:d9:c8:b4:23:bf:90:80:f0:9e:
f0:30:18:7d:ee:ca:42:67:83:21:66:2b:0a:c7:1f:
71:00:c5:8d:12:36:25:0a:f8:35:72:10:96:64:a8:
33:43:b0:47:e1:65:8e:b9:96:35:83:3f:ab:fc:7b:
e6:2c:19:5a:50:28:25:2d:36:6b:af:fa:c2:5b:14:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:72:50:C0:0B:CC:20:F6:06:BD:52:A5:EE:0E:D9:9C:BE:D4:0E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_LlyUMALzCD2Br1Spe4O2Zy-1A4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:45:69:b8:b5:d0:f9:80:cf:47:72:25:68:1f:99:02:99:b0:
dc:e8:68:b3:ff:61:bf:9d:7b:33:d8:73:b2:cb:45:20:75:ad:
92:aa:63:2d:ca:d4:e5:80:bc:13:f8:b6:c9:2c:e1:d0:8c:07:
34:cd:f9:4c:3e:7f:c8:c1:85:dc:e9:07:18:7a:a7:25:34:0a:
32:a7:61:9d:e9:29:6e:77:f6:a2:3d:77:ed:1b:e6:62:6d:69:
48:dd:cc:e1:b2:e4:0d:fd:29:60:90:69:bc:c8:eb:75:91:3b:
95:ab:0a:ac:ba:37:95:aa:39:e1:e3:bf:a5:bf:9e:15:bb:fa:
18:30:6f:24:96:5e:9d:97:ca:24:c1:9d:0e:ef:c6:57:4d:83:
d2:7c:b9:11:d8:f9:2a:a4:4f:73:45:b3:2a:7f:2f:1d:de:48:
2d:11:34:65:a3:e8:b7:71:63:87:18:ec:04:ae:70:42:5f:fb:
1d:74:68:ee:18:65:43:12:1c:f5:ed:8d:6d:ec:5e:40:ad:e6:
3b:39:ab:36:7b:bf:80:43:5d:d2:0b:5c:72:06:c7:dd:b3:95:
bc:5e:2d:12:20:88:38:37:d2:f0:25:c1:4e:4e:e1:2e:35:f7:
a7:0d:01:39:84:45:c2:c3:99:a2:19:97:49:be:d2:d2:6f:00:
0d:fe:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org