Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fkKTi2ilqboAx2c8qFCoq82dHEg.roa
File: fkKTi2ilqboAx2c8qFCoq82dHEg.roa (raw, json)
Hash identifier: D6IzR2vKlTnxS6sjE7Ff38au2DVGqWatk/Gwkw26c84=
Subject key identifier: 7E:42:93:8B:68:A5:A9:BA:00:C7:67:3C:A8:50:A8:AB:CD:9D:1C:48
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5493
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fkKTi2ilqboAx2c8qFCoq82dHEg.roa
Signing time: Sat 11 May 2024 08:24:25 +0000
ROA not before: Sat 11 May 2024 08:24:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21651 (0x5493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 08:24:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7E42938B68A5A9BA00C7673CA850A8ABCD9D1C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:b1:46:bb:67:f8:ae:c7:79:3b:79:df:8d:
0a:bd:ab:b9:01:46:86:9f:a8:53:3e:58:8a:83:e6:
32:70:7f:f0:80:1f:e1:43:8f:78:e6:2c:43:70:94:
54:7d:0e:2d:4b:6b:0c:0a:e1:54:9c:47:70:fa:26:
d6:e8:00:6e:ca:ec:35:98:12:9d:d0:7b:f9:77:5f:
47:4a:d5:c7:79:d2:57:eb:79:52:30:a5:94:62:9e:
a2:27:bb:f2:b3:9c:c8:99:c8:b7:47:f8:66:fa:2c:
b3:c8:a1:30:29:86:60:37:a0:26:69:d9:5a:4e:83:
df:41:fe:5f:51:0e:4d:b6:55:c3:82:db:91:fe:21:
bd:20:1b:4c:24:4f:b8:44:7a:18:c7:f5:1e:d6:19:
cf:22:65:30:64:7c:c3:11:09:cb:f1:7d:ee:6c:17:
2b:23:f8:3f:dc:6b:52:1b:de:f1:b5:7a:f4:ea:a0:
b3:a4:78:66:ec:b4:82:01:11:b2:e9:1e:33:ac:63:
ad:1a:a8:86:82:9f:d9:23:06:ee:4c:61:bf:4d:f0:
d2:05:74:c2:a8:b3:15:ef:87:5f:3e:f9:32:df:4c:
83:64:43:fe:b5:c1:c1:ae:a3:3e:46:0c:97:a4:9e:
46:31:18:85:b0:88:ad:8a:2b:db:0a:ec:63:db:f5:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:93:8B:68:A5:A9:BA:00:C7:67:3C:A8:50:A8:AB:CD:9D:1C:48
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fkKTi2ilqboAx2c8qFCoq82dHEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:cf:ef:2a:8d:87:7c:b4:58:76:73:e5:f6:2a:18:9b:f7:a4:
0c:71:0c:08:61:77:11:3c:e4:df:7d:10:fc:49:55:6f:a1:59:
76:6e:1e:40:e5:b5:b0:e1:74:94:90:4c:af:63:52:0e:28:1c:
46:97:a7:f0:01:51:07:56:d0:6c:e1:68:44:f9:bb:fc:19:e1:
18:0d:83:c8:c1:ee:93:d7:ef:b1:00:dd:08:a8:e3:46:b8:8d:
56:1a:58:d9:40:0e:a5:ef:3d:2a:d0:b5:53:b6:a6:f8:36:ca:
20:01:a4:aa:c7:24:51:2e:3f:e0:99:18:83:60:33:13:eb:b9:
3a:16:0c:ae:6a:eb:d9:84:68:0c:e5:51:6c:67:71:69:6d:91:
32:07:65:2f:38:d1:00:9c:77:c6:b2:5d:3b:b0:59:c7:0a:1c:
0d:50:c2:4e:3e:26:be:20:af:36:0d:bc:29:a6:4b:da:d8:0e:
a5:55:83:20:37:c3:bf:7c:0f:4a:a4:09:73:1a:1d:70:4a:e0:
5d:30:3a:7e:ab:23:5e:57:8f:bd:7a:42:d6:6e:a3:c7:ca:21:
08:75:66:b2:d5:4c:71:d9:db:6c:da:38:89:c9:ed:f7:66:e8:
a5:47:19:19:0d:3a:42:ac:50:33:3d:cd:f6:e4:76:52:90:90:
5e:4b:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org