Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/b8ylqtGi-qHSurvXE5Van5prTmY.roa
File: b8ylqtGi-qHSurvXE5Van5prTmY.roa (raw, json)
Hash identifier: HxNzmD3KJ8nEuPRqDUv9rZj6utmgPbPydZdpI4+L6mY=
Subject key identifier: 6F:CC:A5:AA:D1:A2:FA:A1:D2:BA:BB:D7:13:95:5A:9F:9A:6B:4E:66
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/b8ylqtGi-qHSurvXE5Van5prTmY.roa
Signing time: Fri 03 May 2024 11:23:44 +0000
ROA not before: Fri 03 May 2024 11:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20139 (0x4eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 11:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6FCCA5AAD1A2FAA1D2BABBD713955A9F9A6B4E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:7b:2b:b7:86:21:d2:3c:3e:bd:2e:5c:30:
e5:7b:5b:50:40:28:f7:df:2e:30:fd:9e:64:94:27:
ab:5d:df:85:29:d4:be:44:e0:89:3e:55:94:a3:33:
4d:87:70:c4:18:5f:41:44:0a:d0:71:ea:0c:9c:09:
51:b8:cb:bd:82:9b:f2:a5:46:b4:07:a3:eb:20:3e:
6f:30:db:20:37:59:7a:2f:10:33:6c:58:ec:69:f4:
07:6a:ad:23:12:57:3b:fb:54:2c:ad:42:16:c3:aa:
66:1c:9f:77:5c:9e:52:c7:f5:e9:f4:2b:14:dd:0e:
8d:ae:8a:b5:a0:d8:6b:a3:a9:df:0a:40:d1:0f:f7:
7e:31:8b:57:56:40:cb:b5:a8:e9:58:f0:ac:5a:5d:
a8:76:fa:f8:05:1c:20:40:6a:4e:34:43:15:06:a2:
fe:77:d7:3b:37:4a:53:43:31:e1:80:17:3a:ef:35:
62:25:af:34:f4:5d:c2:ae:08:61:41:ca:ef:08:3d:
0f:e4:30:a4:3c:96:9c:3f:6e:ed:13:d4:6e:fa:39:
00:92:1d:a3:b0:8c:c3:df:36:da:8e:b2:db:57:52:
19:f0:83:70:ab:d8:b5:1f:33:63:f5:6c:36:e0:df:
66:c5:26:a5:26:72:73:50:24:7f:a8:59:2d:d2:8e:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:A5:AA:D1:A2:FA:A1:D2:BA:BB:D7:13:95:5A:9F:9A:6B:4E:66
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/b8ylqtGi-qHSurvXE5Van5prTmY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:1a:6c:29:c3:c0:85:28:6f:c6:0e:71:f2:7a:f4:b0:e7:c3:
da:4d:f7:2c:a1:ce:92:65:f9:08:b8:b8:94:67:38:3e:64:61:
25:bf:56:55:25:f4:1b:5a:2c:8f:57:5b:94:e7:57:c6:67:b1:
f9:34:25:48:f4:21:c1:08:f0:d9:21:e2:e1:b1:9d:3e:88:cf:
35:12:e3:38:ad:1f:2a:4a:7b:70:4a:51:b4:04:f9:21:79:e9:
a8:7a:c0:d8:16:0f:ad:d1:15:76:dd:a9:4b:b4:dd:54:d6:a3:
99:11:f8:7f:7e:3c:f2:29:bf:7e:16:ec:44:0b:14:c4:b9:3b:
58:c0:b9:bd:f6:5f:40:ed:e3:f9:bf:16:34:6f:9b:3b:cd:17:
a9:34:b1:ba:70:09:03:97:64:60:71:66:d5:ea:7b:bf:6c:f2:
bb:9a:6f:33:eb:fc:97:d9:7b:83:a6:a1:bd:30:67:b8:2e:66:
4d:77:bb:6c:31:42:b7:ce:16:9d:6c:ea:d1:23:64:e4:14:92:
86:a8:37:60:bf:ca:81:3c:5a:2d:c7:8c:fe:c1:63:2b:8b:78:
47:80:22:dc:49:b5:20:c1:38:f4:73:d4:f1:4a:51:2d:7f:65:
03:57:e5:b2:a8:77:c5:6a:de:12:eb:56:fe:86:87:14:e1:33:
a5:21:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org