Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dQEeBwDmHzNI4YMHba2JIA4Eeec.roa
File: dQEeBwDmHzNI4YMHba2JIA4Eeec.roa (raw, json)
Hash identifier: 2+PDA7+FCXxS4BFkgZ+oSw50Ok+w9EA1u2Xvg3hR3Qk=
Subject key identifier: 75:01:1E:07:00:E6:1F:33:48:E1:83:07:6D:AD:89:20:0E:04:79:E7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 551B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dQEeBwDmHzNI4YMHba2JIA4Eeec.roa
Signing time: Sun 12 May 2024 01:24:04 +0000
ROA not before: Sun 12 May 2024 01:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21787 (0x551b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 01:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=75011E0700E61F3348E183076DAD89200E0479E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:cd:fd:71:49:c3:64:0a:25:4a:8f:ed:a9:
41:4c:3f:62:d1:28:72:45:8d:8b:f5:cf:14:70:92:
1f:e2:1b:24:f5:09:63:3c:2d:b6:e8:fb:52:05:15:
49:c2:8d:ac:94:05:2e:ee:22:51:13:34:b9:3c:f8:
63:45:7d:13:c4:a1:74:37:47:49:95:ac:14:23:97:
d9:eb:eb:ba:d4:a0:7c:89:87:be:24:fe:26:72:32:
a3:d6:90:65:bc:7f:ca:71:86:c4:15:d0:8d:13:19:
9e:c1:df:a0:62:90:26:a2:a1:d9:42:a4:0b:32:c1:
c9:11:1e:32:30:52:2f:c3:ad:fb:c3:44:3d:11:81:
b8:45:70:d9:65:46:af:c4:95:a5:10:5e:75:ea:56:
d1:e8:dd:d8:eb:30:9c:b3:cf:31:4c:82:2c:80:86:
9b:de:6d:ee:7e:27:4b:6a:df:eb:11:43:74:69:f0:
77:1c:5a:c1:56:17:3b:f5:0d:53:fc:a1:8b:83:4c:
0f:c4:79:3f:ac:7f:b4:88:98:bb:21:1e:40:30:73:
01:59:da:0c:3a:3c:19:3e:53:ca:65:84:f3:ee:f1:
71:95:b2:43:28:81:bb:6f:01:24:68:d3:81:ca:65:
91:0d:b9:ff:bd:f5:63:27:45:db:8d:50:e4:93:e5:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:1E:07:00:E6:1F:33:48:E1:83:07:6D:AD:89:20:0E:04:79:E7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dQEeBwDmHzNI4YMHba2JIA4Eeec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:82:cc:22:e4:93:91:57:f7:8e:58:6d:ad:70:71:bb:2e:87:
ea:0a:30:a0:17:fb:86:27:81:7a:96:9d:ee:0a:a4:5c:9f:e6:
2f:8e:4a:93:97:74:0a:1b:94:5f:ad:2e:ec:e5:ff:e6:c6:f4:
b7:0e:da:51:96:ca:73:ed:6a:af:a5:51:3d:be:30:89:5f:4d:
73:c9:95:c6:6f:6a:5f:b1:44:a8:3a:52:a9:15:8e:07:e3:01:
90:45:64:f3:51:9d:f9:f9:b6:1a:c8:ab:44:59:11:c1:b8:be:
40:68:c0:68:99:24:45:27:2b:0f:aa:93:e1:05:ee:28:3c:a5:
0b:e2:e6:7b:bd:01:73:1b:4b:07:19:92:b8:1a:b7:6a:03:d0:
89:72:c7:df:18:20:c1:dc:30:8a:ef:bb:a6:63:1d:6a:80:25:
9f:3b:e6:7c:af:58:d6:99:95:5e:1a:d9:ab:be:0e:09:a7:9d:
06:95:f0:17:d7:06:fb:85:ef:e6:fe:58:eb:83:3b:2e:b7:81:
e4:71:56:c9:5b:1f:e7:f7:a2:98:34:7a:fa:61:6a:7a:61:16:
e1:11:19:97:ad:4c:7e:0c:ee:83:ae:a2:70:fa:77:f6:b8:f7:
28:af:c9:13:7d:61:38:7b:61:82:23:8c:13:cf:bf:fb:9c:c5:
4b:b8:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org