Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dIOM4LGvgmnfXbUhijhlJQ6dx0U.roa
File: dIOM4LGvgmnfXbUhijhlJQ6dx0U.roa (raw, json)
Hash identifier: 9B5xIvfV2TOuQjLmVPuWKbtSJTsDApp45PPF93K0+rA=
Subject key identifier: 74:83:8C:E0:B1:AF:82:69:DF:5D:B5:21:8A:38:65:25:0E:9D:C7:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D33
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dIOM4LGvgmnfXbUhijhlJQ6dx0U.roa
Signing time: Wed 10 Apr 2024 04:22:39 +0000
ROA not before: Wed 10 Apr 2024 04:22:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15667 (0x3d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 04:22:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=74838CE0B1AF8269DF5DB5218A3865250E9DC745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:7a:24:bc:be:f5:d2:2c:b2:48:6e:ed:18:
57:3e:28:b5:ec:49:23:69:96:28:88:e6:4c:62:1e:
2c:eb:3a:27:05:47:e2:ba:1d:33:ba:58:86:66:4b:
38:52:41:00:ce:fe:2e:07:f9:c0:56:81:14:e7:74:
7e:e0:fb:4e:ea:66:bf:e7:af:29:80:ff:6b:3a:a3:
6b:e8:f7:4a:be:50:4e:ef:13:4c:76:e6:ed:cd:38:
c9:4d:01:ee:1a:27:e3:e3:e5:32:40:c4:50:ed:24:
40:bb:ac:b6:ea:95:2c:d4:d7:41:65:ee:60:19:62:
2f:17:3a:82:9b:88:91:de:cb:02:1e:98:94:09:68:
3b:8a:48:c8:43:32:4e:00:f6:99:b2:e6:41:e0:6b:
13:f3:1d:40:0a:60:d2:43:75:5e:12:8e:be:00:b1:
8b:c5:ce:56:35:e2:b4:2b:f6:1c:33:7c:7b:fe:81:
cc:a6:a3:6a:97:c7:01:11:95:92:b5:a1:17:35:3e:
49:33:89:3c:b8:63:6a:2a:95:2b:f2:00:89:dd:22:
af:5c:a3:e7:47:58:e4:94:70:85:49:1a:df:27:11:
13:95:ef:b2:09:23:b5:5a:98:ca:65:89:bd:f4:47:
5d:e5:c2:b1:60:19:6a:90:ee:3a:48:8f:88:e9:c2:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:83:8C:E0:B1:AF:82:69:DF:5D:B5:21:8A:38:65:25:0E:9D:C7:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dIOM4LGvgmnfXbUhijhlJQ6dx0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:fe:b8:6e:ab:02:04:56:67:22:fa:8b:e5:b2:06:6a:10:e8:
b7:87:d9:8d:97:17:c9:56:4b:86:2a:3c:57:9f:1a:55:07:db:
d6:39:b8:64:a9:c8:db:57:4e:e8:47:35:34:9e:23:17:a8:4a:
61:f0:b9:0e:fc:45:c0:10:e4:e7:b9:40:d1:77:a7:92:15:fa:
0d:bd:f3:13:09:84:e5:d1:49:73:f3:15:09:af:9c:fd:1c:a3:
f9:4d:f6:31:8f:f3:76:c5:62:64:fb:6a:01:8c:c2:e5:30:c9:
83:01:c7:d8:02:9c:85:2c:d9:5f:07:f2:2c:6c:6b:21:1e:af:
2d:54:8d:8c:21:ad:1d:17:9d:f5:27:2f:d2:04:09:a5:1d:44:
53:5c:43:bf:0a:63:42:a0:0a:18:53:d4:0b:47:76:e1:08:6d:
e8:68:bf:03:9a:cf:91:13:ef:4a:ac:db:e4:51:2f:a1:09:47:
76:b7:d1:a7:4d:05:db:a4:c0:c6:4a:fe:c7:ee:97:f1:d1:5d:
ca:0e:11:1a:dc:10:f0:46:c2:20:dd:96:d4:44:a3:72:22:35:
5f:c3:02:ee:88:ad:65:b9:98:9f:b9:0c:12:8a:2f:19:78:8b:
97:5f:50:d3:d0:34:76:51:7a:58:c5:61:e7:7f:23:d5:c7:3c:
b9:01:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org