Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/a2Amsw4eqAClKWCiFn7kaRYJ9MA.roa
File: a2Amsw4eqAClKWCiFn7kaRYJ9MA.roa (raw, json)
Hash identifier: 6d9XRP2slv9BKLsTt1FUYhGQW3YpT9QWWoKi8RrhE1A=
Subject key identifier: 6B:60:26:B3:0E:1E:A8:00:A5:29:60:A2:16:7E:E4:69:16:09:F4:C0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 479B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a2Amsw4eqAClKWCiFn7kaRYJ9MA.roa
Signing time: Wed 24 Apr 2024 01:23:14 +0000
ROA not before: Wed 24 Apr 2024 01:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18331 (0x479b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 01:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6B6026B30E1EA800A52960A2167EE4691609F4C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:51:01:fc:de:3c:3d:2c:8b:10:0b:c2:fb:
d7:99:a8:f9:89:40:5b:ba:53:89:4d:8e:89:19:e7:
04:7a:c4:1b:bd:c7:b8:9a:c2:90:6a:d9:80:eb:b8:
5d:7e:24:89:47:81:09:f4:69:2e:f4:cd:6f:f4:2b:
2b:45:86:f7:8e:98:4e:a5:e7:c9:41:fe:a3:73:de:
3b:9e:c2:9f:c5:32:c0:92:4a:bf:53:ff:0c:0c:79:
cb:eb:72:24:b7:02:1d:24:fb:cd:b3:6e:87:6b:df:
7a:58:97:6b:c2:db:29:9e:76:8b:e3:de:0e:fd:96:
0c:88:e4:0c:fc:2a:58:48:b2:b3:13:86:3a:e3:ac:
45:35:f5:0d:22:df:e5:44:f6:4e:1e:19:d0:b1:c5:
87:3e:3b:ba:6c:05:c5:74:e0:92:e4:3d:54:fc:b6:
bc:c8:9a:12:61:ef:c7:b8:94:52:c6:d6:b2:ad:31:
be:57:ab:d6:e3:54:07:e4:b3:30:18:c9:1d:11:e9:
9a:45:56:6f:0e:2a:f2:eb:66:47:20:f9:39:9c:e4:
4b:f9:2a:35:fd:cf:4a:38:6f:9b:ae:38:d0:81:4f:
3f:9c:64:8a:6b:27:af:47:14:4d:f3:51:85:53:3f:
0d:82:ff:97:6d:95:f3:51:e9:58:b8:16:60:83:92:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:26:B3:0E:1E:A8:00:A5:29:60:A2:16:7E:E4:69:16:09:F4:C0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a2Amsw4eqAClKWCiFn7kaRYJ9MA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:c2:00:1f:17:80:2c:b5:b5:bf:5e:72:85:3f:45:6f:ac:3e:
f6:9e:6a:18:72:3e:fd:3e:c4:b7:46:59:b1:8a:fc:38:51:6a:
28:08:96:40:d3:f9:b1:8a:91:92:e6:89:0f:bd:5f:cb:78:d0:
19:88:b9:fd:50:c5:ed:6b:bd:c1:9e:12:ca:cd:bf:5b:ee:40:
7e:78:39:d6:9b:2a:45:d1:a1:61:31:5e:79:cd:80:00:bb:d7:
7b:17:62:54:b2:5f:c2:dd:c6:21:9a:25:ec:c0:ab:6f:cf:e0:
3f:6e:81:d6:f0:f5:9d:65:eb:b4:5b:7b:ab:5c:a0:95:07:1b:
08:52:8f:28:50:a4:eb:93:34:c7:8e:57:29:1c:0d:9f:fa:15:
2e:9b:d5:e0:eb:f0:9a:46:57:b6:cc:4e:bc:48:ec:f0:03:95:
62:88:21:bd:9c:68:76:df:df:4b:1e:1d:a2:2d:40:98:19:cd:
74:d7:7d:12:81:de:c5:fc:7c:c3:0f:07:13:51:e0:27:3d:10:
21:46:76:eb:60:80:91:ec:77:a2:30:7f:c9:30:a1:e0:4c:dd:
df:f7:04:0a:ef:e0:8c:03:e4:80:7b:07:46:7c:f1:69:ac:96:
ee:16:bf:5e:20:48:9e:00:7a:4b:c3:82:e9:71:5d:2b:b9:55:
b8:29:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:53 2024 by rpki-client on console-ams.rpki-client.org