Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/djLo9HPevM9U-kCaeOLGMFFMgoc.roa
File: djLo9HPevM9U-kCaeOLGMFFMgoc.roa (raw, json)
Hash identifier: eSEM0nwsu03ySA1PjF/nq2tjIH/c1ykmdbRfQCYcjSg=
Subject key identifier: 76:32:E8:F4:73:DE:BC:CF:54:FA:40:9A:78:E2:C6:30:51:4C:82:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5563
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/djLo9HPevM9U-kCaeOLGMFFMgoc.roa
Signing time: Sun 12 May 2024 10:24:03 +0000
ROA not before: Sun 12 May 2024 10:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21859 (0x5563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 10:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7632E8F473DEBCCF54FA409A78E2C630514C8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:ae:6e:3e:ea:23:5e:de:d8:5e:a9:70:0e:
2c:c0:b0:a5:e9:6b:79:a5:e0:81:50:fe:6a:6c:9f:
e4:1c:3e:21:e0:15:7d:c5:d2:a3:96:55:57:d4:2d:
0b:bf:cc:c1:a1:cf:30:b5:78:9f:89:08:cf:44:d5:
f1:07:27:27:0e:51:48:96:f2:62:24:f4:8d:7a:8e:
97:c9:41:1d:d9:2a:af:fd:9e:ef:33:24:36:ac:dc:
58:0d:fa:17:ad:9a:e0:48:cb:03:d2:47:24:f2:0a:
b4:1f:82:51:6d:cf:f5:92:08:ff:e9:bc:ed:a5:ee:
4c:74:a8:27:11:8e:84:e9:24:1d:e6:4c:85:2d:c8:
eb:bf:a4:a7:62:52:b2:37:3c:d3:bf:5d:33:13:7c:
1b:88:3a:21:e7:61:ae:21:95:ec:ba:67:94:91:0c:
a9:cd:14:46:69:f1:ff:6e:eb:4e:4d:5b:4c:10:43:
04:96:73:95:e2:f2:ce:8d:7b:82:c7:d5:e6:38:fa:
c6:cf:49:d1:60:6e:75:1c:ff:8a:18:fb:d6:f6:41:
0a:27:6e:ea:6d:5b:5f:70:a8:bb:6a:4c:38:60:97:
e7:0a:fb:2d:4e:af:47:87:6f:62:e8:7f:a5:41:c4:
eb:14:17:19:c7:9d:5a:4c:36:95:62:86:af:23:36:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:E8:F4:73:DE:BC:CF:54:FA:40:9A:78:E2:C6:30:51:4C:82:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/djLo9HPevM9U-kCaeOLGMFFMgoc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:47:57:9f:11:58:dc:c6:65:19:f9:f5:a1:a9:a3:17:1e:b8:
24:a3:8a:17:99:38:15:35:5c:7f:18:af:d3:e8:fa:8b:fc:c4:
c0:34:2b:a1:31:f0:42:bb:b6:6c:11:3f:31:3e:cb:c0:5e:7f:
b0:a9:a1:91:04:4b:36:57:e7:8e:78:da:6f:69:dc:73:d3:e1:
1e:d3:24:15:e1:e5:62:67:be:1f:2f:9e:39:da:e8:bd:dc:b4:
bc:41:82:1a:7c:a3:08:8b:d8:19:50:8f:3c:98:e0:46:8a:2c:
9d:1f:90:1f:bb:5e:b6:91:a6:03:e8:2a:d2:c0:d2:ca:08:b7:
d5:40:09:32:64:14:20:ce:87:6c:d1:ed:c5:50:f9:57:1b:8c:
7e:86:83:16:e9:63:d3:70:3a:4e:5e:9b:56:e3:96:ae:d6:2e:
73:58:53:ee:7a:f4:a5:9e:5e:6e:1b:5d:9f:f8:0c:07:f7:3a:
bc:24:7a:ed:d5:d8:43:55:0c:c5:ed:2a:be:b8:f7:9d:11:60:
94:bd:91:97:72:ee:76:eb:8b:ea:c0:28:6a:df:62:9f:d4:e7:
bd:4f:a8:23:1e:cf:4b:ed:87:f0:dc:e0:e4:29:cc:ed:f0:23:
0c:83:d0:bd:c7:d2:b8:c6:da:ac:cd:46:d4:fc:48:d2:68:0e:
38:cb:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:57 2024 by rpki-client on console-ams.rpki-client.org