Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_mFca_zzNkBJLdkdwktSbQDegX0.roa
File: _mFca_zzNkBJLdkdwktSbQDegX0.roa (raw, json)
Hash identifier: uu1aPPFVF278ZU+th3LnbLE8P3IvhaMWdiOh8tYPjtI=
Subject key identifier: FE:61:5C:6B:FC:F3:36:40:49:2D:D9:1D:C2:4B:52:6D:00:DE:81:7D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5143
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_mFca_zzNkBJLdkdwktSbQDegX0.roa
Signing time: Mon 06 May 2024 22:24:00 +0000
ROA not before: Mon 06 May 2024 22:24:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20803 (0x5143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 22:24:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE615C6BFCF33640492DD91DC24B526D00DE817D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:d5:d0:15:b7:ed:b6:45:7a:8f:21:61:7a:
63:6c:8b:f9:48:9c:a5:8d:7f:9b:20:80:99:51:40:
72:7e:55:ec:a4:bf:1b:79:b2:c7:d8:02:27:70:ef:
3c:63:8b:83:d1:0d:45:10:67:70:13:ca:62:bf:74:
9d:a9:71:73:1a:53:f8:ab:7d:d5:b9:31:0b:55:cf:
b7:63:a3:f1:be:8f:de:79:a6:7c:89:47:0c:f3:e6:
f3:b8:bb:fb:cb:9a:77:c3:6a:1e:1c:67:df:03:7c:
14:dd:0c:b1:c6:73:3e:3a:d9:a1:73:99:57:3b:07:
d2:1f:37:a0:6a:ac:19:64:84:1e:45:0b:3d:ea:30:
35:a2:c2:bf:65:cd:8c:a3:e5:dc:a1:c6:51:69:58:
4d:1c:b1:f8:08:c8:e0:68:1f:5e:e1:42:79:c3:72:
65:76:f5:49:a5:dd:7a:d5:5e:fa:46:ed:40:f9:13:
19:a8:38:6a:77:19:ce:11:2c:aa:4d:20:a8:8f:de:
c6:ca:28:95:90:3e:a6:66:38:8d:58:79:16:a3:f3:
91:df:1f:d3:c4:a6:21:61:70:68:c1:63:21:40:70:
68:5a:e1:ac:71:59:41:de:89:79:75:88:4c:1b:4e:
4e:d5:fa:2a:de:2d:87:60:a4:ae:0e:93:88:7f:8f:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:5C:6B:FC:F3:36:40:49:2D:D9:1D:C2:4B:52:6D:00:DE:81:7D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_mFca_zzNkBJLdkdwktSbQDegX0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:3a:d6:fc:5e:4c:3e:1a:2b:0c:c6:f0:6d:b3:df:db:94:7f:
81:a8:9f:63:c3:b1:f7:c3:34:2b:5c:94:06:5c:f7:6a:fe:82:
c9:bd:d1:a6:48:51:64:17:d0:e2:50:1c:7b:b7:e4:78:3c:bf:
5a:55:ed:94:89:5b:0e:f8:3d:4e:21:c7:c8:61:6d:4c:26:19:
39:e8:9a:d6:3f:50:f8:d5:b3:e2:10:58:14:6e:76:e4:c3:c7:
27:2b:c9:3d:91:72:5f:52:03:a2:1c:ed:c0:77:a2:34:47:da:
86:d4:0f:ee:4f:6d:8c:a4:2f:2a:63:6e:db:40:7a:d6:b9:01:
4d:25:3b:f5:81:fa:9d:5d:0e:80:89:4b:64:f0:68:1c:10:42:
ac:3e:4e:09:e6:ef:e2:cc:0b:9f:23:01:2d:d0:dd:a6:03:96:
09:41:f4:67:d0:90:55:d4:62:96:dd:39:99:d7:4c:7f:7c:1f:
dc:11:2e:e0:1b:76:4d:b4:f5:2b:32:e9:41:2c:58:88:df:80:
e0:8c:44:77:55:5a:13:d2:7c:8f:95:d9:41:57:8b:6d:d9:fc:
66:93:d0:87:e5:f4:52:28:4f:5c:e9:d5:2d:b5:06:bb:e2:fe:
87:2d:42:34:23:f7:c2:da:dc:54:90:b8:be:37:d7:ff:b7:9c:
7f:4d:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org