Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cN77ZzQqiFrIPwpcj0Ur732Alyk.roa
File: cN77ZzQqiFrIPwpcj0Ur732Alyk.roa (raw, json)
Hash identifier: uWcNyXxmhfvxiS3Y4j4Ygk9p/P1Iz2f2lSGdissEir8=
Subject key identifier: 70:DE:FB:67:34:2A:88:5A:C8:3F:0A:5C:8F:45:2B:EF:7D:80:97:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 388B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cN77ZzQqiFrIPwpcj0Ur732Alyk.roa
Signing time: Wed 03 Apr 2024 23:22:20 +0000
ROA not before: Wed 03 Apr 2024 23:22:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14475 (0x388b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 23:22:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=70DEFB67342A885AC83F0A5C8F452BEF7D809729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:42:ae:15:e5:7e:5b:a9:58:c7:7e:d9:4e:
18:54:83:7d:18:9a:fc:b7:59:71:68:38:fd:30:b1:
e0:63:70:95:22:13:ba:0e:76:07:57:54:db:7a:ff:
0d:c4:f2:c6:19:1c:93:02:49:fb:8f:fe:22:60:f4:
95:37:e6:eb:59:c1:b8:dd:12:d0:fb:67:d1:fe:45:
10:ab:dc:a8:21:31:70:d5:b4:38:7b:64:6f:02:28:
65:63:80:8e:10:8e:ad:d3:e4:41:a5:16:8c:a2:66:
e9:5d:84:5c:4b:6a:f0:1b:38:10:a1:56:e3:d7:3a:
a9:cc:ce:ad:db:5c:fb:c9:f1:cc:b0:52:53:8f:5e:
9c:e2:5d:4e:d6:2d:bc:0b:59:7a:19:0c:ab:89:d4:
67:e6:7a:9e:2b:d5:60:8a:21:ce:77:ce:1d:53:5c:
dc:47:22:6a:91:5d:46:c3:89:e7:1f:8a:25:84:de:
b8:df:18:0c:35:f7:c9:58:76:00:84:a7:50:41:b4:
0b:ea:95:de:94:48:40:d4:74:cd:1c:69:53:8b:e9:
bd:9a:2f:38:1e:2a:ec:ea:b9:9b:ea:2e:3c:de:fc:
70:83:76:f0:aa:60:92:11:5a:7e:f0:e0:ff:cd:fc:
56:82:06:c3:c4:8b:87:55:94:ae:22:35:0a:89:e3:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:FB:67:34:2A:88:5A:C8:3F:0A:5C:8F:45:2B:EF:7D:80:97:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cN77ZzQqiFrIPwpcj0Ur732Alyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
61:60:04:a4:7e:64:f2:5a:72:72:5b:bf:60:36:03:ad:e5:f8:
f1:fa:78:ee:1e:e2:34:92:79:30:d8:26:35:f3:95:11:10:74:
cb:73:a4:e1:38:c2:5f:49:d9:c4:81:7a:7a:01:f8:89:f1:14:
f1:79:82:bf:fe:ea:14:73:6b:97:19:fb:d1:a6:ee:67:6a:2a:
0a:f0:8b:e4:98:7e:86:37:be:1b:66:1e:60:f2:08:cb:2d:7e:
bc:bf:c9:c9:a2:89:f6:18:ba:9d:ee:9c:47:0b:39:45:fd:c6:
bc:64:0e:ff:86:2c:61:e0:1b:ee:d1:fd:85:c8:81:2e:cb:96:
5a:5a:a0:da:f7:c9:2e:e7:59:92:81:18:a5:93:08:6d:ca:13:
bb:23:3e:e2:31:5a:8e:cd:c4:64:89:01:e5:77:ad:83:af:fb:
e4:3f:9e:3e:1e:15:08:bc:02:a5:cc:ef:c9:17:52:12:37:6f:
48:c8:81:7f:c6:91:39:f4:ee:21:fd:c4:f5:ca:a7:b7:cb:85:
ad:a2:53:75:79:08:cd:ff:33:97:c9:bf:91:b6:5e:68:12:aa:
e9:f9:96:9c:bc:d3:6a:de:cf:95:3a:d1:77:cd:15:f1:69:da:
28:02:f9:e5:37:dc:ba:0d:e6:4a:2a:78:b0:d7:66:a4:20:e3:
92:3d:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org