Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eNz5k-CceRxqPkkX_1l-EGXUQ30.roa
File: eNz5k-CceRxqPkkX_1l-EGXUQ30.roa (raw, json)
Hash identifier: hEW84ogbC17LV5P0Oky56KNoUtVisBJUiskwIReGGHw=
Subject key identifier: 78:DC:F9:93:E0:9C:79:1C:6A:3E:49:17:FF:59:7E:10:65:D4:43:7D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C6F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eNz5k-CceRxqPkkX_1l-EGXUQ30.roa
Signing time: Tue 09 Apr 2024 03:52:40 +0000
ROA not before: Tue 09 Apr 2024 03:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15471 (0x3c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 03:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=78DCF993E09C791C6A3E4917FF597E1065D4437D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:68:48:7b:0d:13:9f:8e:66:3c:03:52:c0:
ed:47:e6:68:0f:28:f6:56:b7:b8:e6:e7:95:a8:c8:
19:87:04:97:d1:4f:7f:a2:b5:0a:4f:57:2c:9c:a1:
c8:a3:ef:a0:32:2f:19:c6:6e:41:a3:6d:1f:1f:7f:
00:7a:57:7a:24:24:04:99:43:61:e6:ff:24:40:81:
15:71:5f:cf:45:b2:74:13:6b:5d:9d:fe:9e:93:71:
6a:f7:7d:65:e8:16:f9:e1:64:09:16:d8:e0:c2:8a:
81:00:f0:3f:7f:4f:35:ad:fc:83:97:8c:72:dc:6d:
22:44:7d:21:62:0d:55:44:95:d0:4f:19:2a:95:fc:
92:05:2e:f1:0b:5d:25:86:a5:63:76:08:bc:35:80:
40:74:80:b0:38:7a:b9:f5:9f:29:39:b4:f9:02:c8:
b0:7b:1c:78:43:2f:bd:c1:32:32:bf:30:98:db:de:
39:4d:e9:c0:86:67:cf:f9:08:39:04:6d:56:25:a9:
ef:87:ec:5a:6b:7c:5a:91:5f:47:5f:d5:1a:51:e5:
e4:7c:bf:fe:57:17:a4:2a:6f:a2:6d:3d:67:b4:cc:
dc:d4:1d:2c:97:e4:3e:7c:8b:fc:79:f8:1a:35:82:
07:b9:b3:79:08:dd:90:15:26:fd:b4:e2:45:34:c7:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:F9:93:E0:9C:79:1C:6A:3E:49:17:FF:59:7E:10:65:D4:43:7D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eNz5k-CceRxqPkkX_1l-EGXUQ30.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:d8:79:89:6d:44:05:3c:14:d1:61:ff:1a:ff:d1:6e:78:4f:
7e:5f:e8:10:98:c6:91:a1:5c:cf:f7:30:8e:e6:63:37:2a:9a:
ab:aa:2d:c2:d6:e4:9b:0e:bd:82:b6:dd:83:10:58:2f:3a:2d:
da:89:01:73:b6:f6:6a:97:69:64:ab:f0:8d:55:fb:3a:39:47:
30:ee:21:8b:50:cf:4f:4a:fb:38:bc:cf:a7:8b:95:39:1e:c6:
e1:ee:cb:9a:73:75:68:cc:71:14:19:6e:62:ed:e4:d8:ea:15:
67:f9:cd:60:19:da:8f:fc:05:7c:9f:9a:32:e7:a4:28:ef:d1:
50:cb:40:56:8c:d8:d6:f9:05:1a:2e:d1:df:d3:b4:f3:c1:d4:
9b:15:12:38:13:37:d6:67:64:d4:82:8e:75:57:3e:de:79:dc:
1d:ee:6d:4e:e8:a3:29:b3:b2:71:eb:68:42:f8:58:d4:c5:30:
70:28:6b:3e:ec:a5:f8:6f:c3:3b:60:2e:af:b9:5a:38:f8:6b:
d3:0a:e0:fb:9b:34:63:36:0d:e0:5d:c5:99:10:93:48:c5:33:
ec:0b:32:97:19:75:82:fa:94:3c:8a:b3:c6:23:c9:f8:9c:55:
4f:ce:e1:e4:50:9c:9a:92:e5:8a:15:7e:06:ac:9d:44:0d:ed:
e0:5f:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:37 2024 by rpki-client on console-fra.rpki-client.org