Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eyWZHiArnQRkyl7_79ZCnqr7VsY.roa
File: eyWZHiArnQRkyl7_79ZCnqr7VsY.roa (raw, json)
Hash identifier: 9JUs8PHt2pmUfyBe8y84k0VaYOMVbhpkjg7WMQ5n750=
Subject key identifier: 7B:25:99:1E:20:2B:9D:04:64:CA:5E:FF:EF:D6:42:9E:AA:FB:56:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42B7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eyWZHiArnQRkyl7_79ZCnqr7VsY.roa
Signing time: Wed 17 Apr 2024 12:52:59 +0000
ROA not before: Wed 17 Apr 2024 12:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17079 (0x42b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 12:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7B25991E202B9D0464CA5EFFEFD6429EAAFB56C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:46:ee:69:c9:14:9d:02:ab:54:af:60:86:
8f:33:46:e1:91:62:03:da:77:e7:a1:33:42:e5:5b:
73:89:70:0f:50:9c:70:e6:d5:bd:e6:bc:bb:a9:10:
2b:8b:b1:c9:68:7f:f7:b5:8a:e2:5a:85:44:40:cf:
61:e9:d4:bc:d7:a4:50:52:c9:ec:45:73:73:a3:4b:
e9:34:7b:db:b3:51:6a:d7:ac:51:b3:b6:01:1f:6a:
9e:12:9a:87:fe:22:98:04:bc:e3:eb:ec:82:94:72:
5a:33:56:1f:bb:9c:07:36:1a:50:a9:13:10:a2:8a:
3a:c3:6b:a4:a0:41:32:3d:4f:f2:ef:5b:6b:4b:88:
90:a1:06:a8:e4:8e:cd:d8:af:f3:50:0a:49:5e:16:
ae:c7:84:15:88:f8:ad:e6:03:32:3a:ab:f5:74:61:
09:b3:f9:b7:db:21:de:5b:4c:c6:57:60:5a:e6:4d:
9b:ab:2a:c4:fa:fd:22:7d:19:51:7b:c2:fe:bb:f7:
fa:a9:a5:78:de:92:b5:af:b5:bf:34:0c:23:3e:85:
f5:32:38:ec:19:25:46:93:d6:4c:19:87:f7:6a:27:
f5:09:92:c9:69:d0:9e:4d:c6:e8:54:57:74:1a:57:
21:ec:12:14:aa:00:00:eb:da:ff:fb:8e:96:31:8a:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:99:1E:20:2B:9D:04:64:CA:5E:FF:EF:D6:42:9E:AA:FB:56:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eyWZHiArnQRkyl7_79ZCnqr7VsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:eb:3f:57:a5:71:a5:1e:ec:52:6f:fc:b5:c9:f7:52:ff:d7:
98:7b:17:42:24:01:cd:f4:41:c5:a8:98:00:86:26:47:8e:8b:
8b:b5:10:24:29:ec:9b:96:78:e6:f2:0e:e0:79:7f:db:a2:af:
1c:4c:8f:bf:f4:c6:7c:3a:bc:6b:e3:b0:60:4c:27:87:64:77:
65:28:99:49:d1:99:70:b8:bc:4f:83:9c:d3:77:9d:b9:86:cc:
cd:b3:99:29:67:1f:0b:31:d0:ec:98:40:39:98:b3:52:72:d2:
2c:85:8f:a6:e5:d9:2f:32:04:5b:d9:1c:45:a5:8c:f1:26:4d:
7d:1d:bf:88:81:37:92:ec:82:93:dd:d8:2d:8c:b2:b9:e8:f5:
39:23:6d:d5:66:33:ca:cb:aa:4b:7d:08:8e:c6:c1:0f:e4:01:
c2:0d:95:ee:c8:3d:98:33:17:46:26:11:cd:2b:df:45:e0:7b:
54:56:38:94:7e:d3:cb:ff:15:1e:43:bd:6b:bd:6a:f7:04:32:
54:64:dc:d8:f1:8d:cb:13:ff:00:7a:f1:9c:f6:5d:c8:5f:e3:
b3:51:da:b2:1c:f0:52:56:2e:a0:46:43:ba:71:0c:bb:d1:3d:
dc:a6:a5:89:ad:25:37:b5:44:c3:b2:57:55:e3:21:f2:d3:f7:
53:bc:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:38 2024 by rpki-client on console-fra.rpki-client.org