Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cyuqLtaRnYjT-q8KP_KVqTsHM4E.roa
File: cyuqLtaRnYjT-q8KP_KVqTsHM4E.roa (raw, json)
Hash identifier: 0NLoX3xzA8U9YR2CwHBwna4Ob6jW2rQ5FJ366ieJeqE=
Subject key identifier: 73:2B:AA:2E:D6:91:9D:88:D3:FA:AF:0A:3F:F2:95:A9:3B:07:33:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 366B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cyuqLtaRnYjT-q8KP_KVqTsHM4E.roa
Signing time: Mon 01 Apr 2024 03:22:13 +0000
ROA not before: Mon 01 Apr 2024 03:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13931 (0x366b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 03:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=732BAA2ED6919D88D3FAAF0A3FF295A93B073381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:33:09:a1:95:2b:72:0d:23:36:3c:40:30:
35:3b:de:9f:50:52:6b:3f:ea:4e:2b:2e:aa:c9:d7:
5d:5f:8c:8f:a2:d0:f2:6b:7c:da:bb:29:21:5b:e4:
69:14:c5:ec:b5:38:19:c0:86:5a:14:16:6e:72:25:
4e:d1:54:8c:08:44:04:60:c0:98:0c:56:89:fd:06:
6e:ab:ca:2b:64:86:d2:53:b5:70:27:b6:d8:9f:31:
cb:55:0f:b9:fa:95:58:e5:f4:61:17:e8:3c:9b:85:
03:20:e3:6a:80:10:06:35:29:99:71:d4:40:9e:9d:
ef:c6:60:15:d6:f8:e9:dd:db:81:b2:e9:0d:ff:a3:
cb:78:9d:af:a8:8d:1d:60:c1:2b:d8:53:5d:d3:42:
7c:51:72:ca:55:81:0d:e4:29:6a:8f:04:0b:e2:af:
8f:de:7d:1b:5d:eb:fd:c8:1e:1b:cc:5c:1b:89:a5:
3a:39:88:58:95:16:b5:34:68:a9:59:cf:8d:b4:8a:
ed:86:76:27:78:14:af:23:78:a9:a5:7d:e8:8d:ea:
5c:3d:89:b6:32:68:10:88:90:fc:d9:0f:30:3f:75:
ff:e1:36:5a:5c:44:0b:88:a4:f7:e0:aa:b8:60:78:
03:0e:d0:69:a5:dc:99:09:87:30:ac:c4:eb:05:b6:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:AA:2E:D6:91:9D:88:D3:FA:AF:0A:3F:F2:95:A9:3B:07:33:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cyuqLtaRnYjT-q8KP_KVqTsHM4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:5f:a0:b5:d0:e9:20:0e:d1:9a:3c:5b:e9:3c:95:cd:e7:64:
d9:df:d0:f4:a1:2a:bd:e8:6a:8e:e6:43:c7:96:ae:6f:af:4d:
15:85:7d:a5:0d:3a:80:12:89:c5:52:74:15:21:38:81:10:e1:
51:c2:9b:a8:16:d3:a6:04:61:17:15:86:2b:4b:ea:d6:2e:e1:
47:cc:6d:44:27:47:89:b1:89:84:06:9c:cb:a7:d2:11:88:83:
05:4e:32:75:51:9b:7d:7e:d1:32:57:2f:bd:dc:3e:b8:5a:fc:
87:c3:be:60:ed:0d:19:36:26:1c:fd:1d:78:c3:6b:5f:9f:1d:
5c:13:4c:0c:fd:32:32:58:f7:f0:a8:25:01:df:e6:a5:7f:d9:
8c:27:62:c8:aa:a8:c7:7b:ca:f5:74:65:ae:97:49:e2:00:a8:
2d:93:34:65:c9:8d:76:22:48:40:3b:b6:18:9a:6f:60:20:d8:
a2:44:4d:b1:d0:1b:d2:27:a9:07:42:ca:3e:bc:b5:d4:ce:f0:
ee:b4:cc:02:58:52:f1:81:fa:cf:64:5e:64:4c:5c:89:89:d3:
2b:1f:2f:3c:16:64:6f:46:4c:52:7a:6b:1e:26:28:c4:83:74:
9e:a5:c0:98:32:a1:6f:d1:8d:da:d0:cf:c6:73:f0:78:c9:a2:
f1:11:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org