Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eO6Bus44-Jeh9Gx1znmt1B6OBxU.roa
File: eO6Bus44-Jeh9Gx1znmt1B6OBxU.roa (raw, json)
Hash identifier: 3ufmn7Bk9Jqfg022XT5JJZb7Bie6N4Z8Xin+AJRpNUo=
Subject key identifier: 78:EE:81:BA:CE:38:F8:97:A1:F4:6C:75:CE:79:AD:D4:1E:8E:07:15
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AD3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eO6Bus44-Jeh9Gx1znmt1B6OBxU.roa
Signing time: Sun 07 Apr 2024 00:22:31 +0000
ROA not before: Sun 07 Apr 2024 00:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15059 (0x3ad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 00:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=78EE81BACE38F897A1F46C75CE79ADD41E8E0715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:11:81:36:c2:f0:c5:19:7e:08:5d:58:15:
70:da:47:10:b0:1f:dd:57:45:b8:81:4d:7f:95:81:
c3:f3:81:f5:3a:f6:00:51:5b:77:89:6a:d6:f7:8e:
51:ec:9c:64:ee:7d:2b:61:66:a5:92:85:f2:48:b8:
04:e7:fe:35:e3:4a:5d:d1:8e:d6:3e:2e:d3:40:7d:
bf:2e:52:b3:97:85:20:f9:bc:b5:e5:a5:4e:4f:e5:
e1:fa:bf:07:4d:e1:92:f7:10:2b:89:17:a0:c3:cd:
83:2c:50:21:c3:5f:27:36:0d:2b:9f:30:3a:65:75:
cd:09:f0:76:37:91:36:59:fd:9f:9a:e6:b1:9a:5c:
1a:c2:90:14:93:e3:b8:97:b7:03:fa:2b:ac:6c:c5:
3f:0e:ae:5b:d1:a2:f5:53:df:80:36:0e:e7:45:59:
9d:84:00:59:8a:5e:e8:2d:65:e3:ad:0a:d8:07:5d:
9f:37:f8:c6:d5:96:19:4a:0d:74:08:e7:e5:8f:79:
79:92:e6:d0:63:84:cf:8d:d2:74:cf:89:26:b8:fc:
0d:8b:44:28:7f:fa:f6:1d:3a:2d:7d:53:29:5e:0e:
71:49:6a:c0:d3:6a:22:08:36:3c:97:a4:3e:d0:2b:
e8:37:fa:db:09:8d:a2:02:dd:36:28:48:79:44:e3:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EE:81:BA:CE:38:F8:97:A1:F4:6C:75:CE:79:AD:D4:1E:8E:07:15
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eO6Bus44-Jeh9Gx1znmt1B6OBxU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
af:4d:2d:3a:b2:f7:cc:bd:ec:fc:37:6e:ed:60:f2:71:b5:3d:
93:93:7b:b3:4c:a1:93:f0:94:39:60:68:ca:79:80:45:f2:38:
43:e8:d9:d1:ed:e1:0e:f5:06:e4:23:50:c7:b8:41:5a:4f:e9:
c3:d5:f6:33:ed:af:5a:b9:2c:f7:23:5a:df:1e:2a:d9:8b:6c:
da:d8:65:7f:f1:bb:3f:49:8d:97:84:84:94:50:d0:f8:e3:f1:
25:3d:87:55:8f:05:33:11:50:66:4c:ab:bf:40:9a:2f:c8:70:
fc:ad:9a:3e:d0:1b:44:e1:61:15:0c:e8:84:85:a6:24:ed:5c:
9f:01:32:00:7a:73:dc:a6:a7:21:a0:e0:c4:41:bf:11:83:98:
45:a8:52:61:ce:36:3c:08:5e:46:db:41:af:ed:bf:98:f4:c9:
7d:64:d5:da:f2:b8:a7:b0:db:d9:6f:3b:0b:73:cf:2e:13:21:
d5:ec:7f:1e:91:4d:53:d0:10:e5:fb:22:3b:8d:e3:2e:a5:87:
92:ec:9f:15:e1:5c:a8:49:a8:c7:13:1f:85:9f:9e:ad:b0:fe:
6f:fa:80:82:79:fd:d0:e4:c0:37:72:cb:a0:54:2b:8d:54:98:
d8:b9:3c:df:ee:58:50:39:04:ef:0f:11:d0:ca:46:13:aa:16:
ef:86:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:58 2024 by rpki-client on console-ams.rpki-client.org