Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/awyqMn22XLv6XcQ7eeIAgNX4QfE.roa
File: awyqMn22XLv6XcQ7eeIAgNX4QfE.roa (raw, json)
Hash identifier: iZgPpY8mgueoF1a9Qmhq+vtzGXhWbtGrNUVF2Wm04ow=
Subject key identifier: 6B:0C:AA:32:7D:B6:5C:BB:FA:5D:C4:3B:79:E2:00:80:D5:F8:41:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A57
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/awyqMn22XLv6XcQ7eeIAgNX4QfE.roa
Signing time: Sat 06 Apr 2024 08:52:28 +0000
ROA not before: Sat 06 Apr 2024 08:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14935 (0x3a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 08:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6B0CAA327DB65CBBFA5DC43B79E20080D5F841F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:4c:a0:31:ad:51:b4:f5:b6:ac:1f:ac:12:
2e:06:8d:af:e2:d9:1b:76:1b:c9:3d:26:62:b7:f4:
2a:be:df:e9:8a:3a:5a:9a:62:ae:e6:0a:2d:50:b4:
5b:d0:8c:cc:b6:75:f1:53:a2:89:fd:d0:76:9b:ea:
79:28:87:0e:4c:49:45:26:ce:2c:6e:8a:0c:45:fb:
db:2c:cb:0e:fe:49:01:1f:5b:71:82:a8:b8:8e:b8:
23:72:67:7f:32:cb:c3:35:f6:7f:d0:26:8b:2a:c8:
b8:6a:5c:1e:ef:d1:2d:b9:b3:a2:e1:18:ed:33:42:
be:f4:30:a0:3a:80:6d:73:f7:7d:53:dd:5c:c7:d6:
7d:2b:dd:4e:7c:63:bb:96:06:70:a7:71:b6:74:05:
52:70:7c:96:80:9b:58:88:69:9e:47:2c:6e:15:8e:
69:fc:33:99:de:b9:74:bf:dc:2e:1a:d6:b0:c7:bb:
90:0c:fe:53:63:ff:23:d6:b1:66:86:54:c2:89:f1:
fb:8c:7b:f4:3b:1e:dd:71:33:fd:cf:0d:c1:74:b9:
8c:26:0f:15:9d:70:13:62:db:6d:63:df:57:e5:85:
a4:4d:e4:82:2f:b0:58:71:1c:77:c8:80:2a:62:97:
d6:ef:dd:bb:1f:54:5b:a9:6d:cc:a0:4d:32:2d:d2:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:AA:32:7D:B6:5C:BB:FA:5D:C4:3B:79:E2:00:80:D5:F8:41:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/awyqMn22XLv6XcQ7eeIAgNX4QfE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:1e:16:17:c0:d5:0e:3c:c2:2d:f4:d8:49:88:40:10:95:c5:
3a:b0:2d:1d:d2:38:13:69:08:8d:8c:de:71:e7:04:ec:d5:0a:
9c:c9:1d:0a:08:b5:9d:03:67:88:4b:41:6b:51:27:99:85:61:
54:0f:4d:cb:40:46:7d:b3:1f:6d:82:e2:b1:b0:19:1d:ea:55:
4b:a7:1e:07:83:3d:01:0e:af:86:47:66:53:46:56:ab:4a:27:
c0:eb:aa:86:30:d6:ce:89:81:35:8e:f4:e0:0d:ee:f2:09:88:
ab:6c:e1:1b:ad:cb:5e:1a:63:6b:a8:54:ab:22:03:ce:5c:af:
68:85:21:ed:a0:c4:d1:ad:21:f4:11:69:21:df:df:1d:00:8d:
7b:d2:92:f2:44:17:d3:a9:51:ff:d0:c9:97:bf:35:5d:4b:9f:
d9:f0:36:62:03:bf:7c:1b:11:cb:3d:c3:59:ac:1c:46:ac:d8:
fc:b4:7d:13:d7:44:5d:4e:34:3e:99:f2:b2:51:7e:c5:d0:c3:
c7:ba:c5:f8:52:85:04:67:52:2c:35:1b:8f:d4:d3:26:f1:42:
e9:28:88:f4:4a:5c:bf:16:5a:fc:ed:11:44:8d:4e:04:85:cc:
7e:7c:16:90:7a:e8:bb:8e:7e:63:c7:82:6a:59:fc:f8:a6:d3:
ff:02:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:54 2024 by rpki-client on console-ams.rpki-client.org