Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/f4F2_i0y3a4_JGqgkqEfR-_qkIM.roa
File: f4F2_i0y3a4_JGqgkqEfR-_qkIM.roa (raw, json)
Hash identifier: yVtRxbRuzebzOD2R3Wp3NNq3YnNFPKTai/ozDOHFsyY=
Subject key identifier: 7F:81:76:FE:2D:32:DD:AE:3F:24:6A:A0:92:A1:1F:47:EF:EA:90:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4783
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f4F2_i0y3a4_JGqgkqEfR-_qkIM.roa
Signing time: Tue 23 Apr 2024 22:23:19 +0000
ROA not before: Tue 23 Apr 2024 22:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18307 (0x4783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 22:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7F8176FE2D32DDAE3F246AA092A11F47EFEA9083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:61:3a:6a:2e:ab:87:ec:43:fc:88:e6:38:
f1:98:d8:ad:06:e2:21:7a:90:de:56:aa:2a:9b:66:
d3:aa:fa:32:60:28:e0:3b:2c:cf:31:5d:a2:83:58:
75:37:0f:1f:ab:f3:7c:0f:2d:ec:56:39:d2:7e:29:
4c:5c:18:51:3b:88:51:5e:42:fa:1e:57:1e:57:79:
51:77:09:1f:0f:c9:b3:55:b8:b4:c7:15:57:67:f2:
30:11:2a:bc:6a:42:59:c2:cc:a5:5e:db:90:13:56:
87:6a:8b:bf:fe:b3:73:5a:84:9c:35:37:6e:65:7c:
4b:d9:a3:fb:d9:38:21:db:47:41:2a:a3:3b:62:f5:
99:b7:6b:10:51:af:be:d7:05:dd:41:cc:64:bf:e0:
6c:50:8a:73:8c:cc:dd:f5:22:c2:b2:73:b6:65:ae:
39:38:23:fb:ac:28:a7:e3:e7:44:40:18:53:86:bb:
2a:27:63:34:48:f5:7f:8c:18:ab:ce:e5:56:f6:d5:
ce:88:2d:f5:07:1d:ab:53:16:71:cd:6c:18:bf:17:
54:c2:af:59:04:4f:c5:de:99:5a:ee:e6:42:84:79:
34:a4:47:9e:e8:7c:71:f5:6d:39:6b:ae:df:9a:3c:
85:54:11:b0:ab:77:60:72:4a:ae:b7:63:24:f2:33:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:76:FE:2D:32:DD:AE:3F:24:6A:A0:92:A1:1F:47:EF:EA:90:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/f4F2_i0y3a4_JGqgkqEfR-_qkIM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
70:90:a4:41:c8:78:d3:58:0d:89:1b:17:ed:92:3b:17:34:80:
63:65:ed:71:80:97:34:37:4b:6c:9d:84:d0:56:42:c2:21:93:
0d:0b:10:b9:1c:ee:a3:f0:6f:40:c0:31:ee:f9:5c:12:29:f2:
f4:d9:90:6d:9d:a1:8f:d6:8c:a0:e9:8e:ee:65:71:c4:e9:97:
92:ad:38:7d:f8:82:a0:90:6e:8b:9a:92:27:7b:7d:25:85:da:
ce:9b:69:6c:d1:7e:1d:19:98:2f:40:af:48:e9:81:9f:68:d2:
92:ff:d1:09:f6:1d:e7:78:db:2c:e3:ed:02:30:ae:53:53:f5:
1f:f2:d3:6a:ac:b5:c8:41:36:ca:ae:c8:7e:d3:d6:e5:50:ab:
bd:88:fa:0a:3a:84:f7:21:a8:28:6c:1a:de:f9:7d:10:d8:eb:
2e:61:3c:ca:0e:6a:f8:58:78:cd:9c:0d:93:6c:4d:28:a2:f4:
93:d0:3a:e8:fd:5e:69:7b:7b:5d:3e:ac:81:7c:2a:4d:07:04:
eb:a2:78:df:19:da:88:79:b4:ea:0c:b3:8c:a0:b8:a1:8c:38:
b1:0a:a7:91:74:f4:78:9a:18:15:6a:e6:5a:1b:bf:b9:5c:c6:
0e:26:7f:49:e8:26:9e:0c:52:5f:28:82:10:2f:b1:0a:1d:63:
4a:9a:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:59 2024 by rpki-client on console-ams.rpki-client.org