Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g4Lpl1-z65apgsFIzrW8zU1wwxY.roa
File: g4Lpl1-z65apgsFIzrW8zU1wwxY.roa (raw, json)
Hash identifier: wYpdlWGFCNGBA+6FHxEwM74t2R0wS4d7yFy4WFxarQk=
Subject key identifier: 83:82:E9:97:5F:B3:EB:96:A9:82:C1:48:CE:B5:BC:CD:4D:70:C3:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4267
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g4Lpl1-z65apgsFIzrW8zU1wwxY.roa
Signing time: Wed 17 Apr 2024 02:52:57 +0000
ROA not before: Wed 17 Apr 2024 02:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16999 (0x4267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 02:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8382E9975FB3EB96A982C148CEB5BCCD4D70C316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:39:2c:57:ac:ae:5a:b9:11:fc:cc:43:cc:
4c:01:3f:75:e9:e0:1e:6d:97:96:15:3f:8f:d4:c9:
a4:4e:dc:ea:6b:a1:96:66:1c:0f:92:28:88:0d:97:
d4:7a:bf:68:80:53:57:cf:b1:70:8e:4a:f8:62:51:
dc:93:df:7e:58:66:a4:44:63:6a:2a:57:90:c8:90:
3e:cd:0c:ff:cc:6e:5a:2e:34:6b:91:49:66:22:00:
5e:b1:80:5b:fe:85:bd:2a:57:9d:16:39:6a:fd:bd:
02:ef:ae:74:bc:d0:8b:82:bc:6c:ec:ee:76:a0:af:
05:84:4a:ef:ae:9e:99:c0:bd:ff:18:b4:9d:b8:89:
fc:3c:2a:f1:9b:db:71:70:19:2c:d7:3c:ce:ab:ae:
30:5e:ae:25:1b:b8:34:a8:17:12:9e:3f:c1:5f:1e:
94:11:da:3d:2f:dd:9d:18:38:f9:28:93:47:59:03:
9e:82:18:3f:8f:23:e7:d0:b3:52:5f:95:a3:94:d4:
3e:71:8c:3c:ed:59:e5:4c:e8:e0:72:e3:5e:cd:af:
89:e0:13:04:cf:82:05:0f:91:56:65:21:57:b1:54:
9f:37:5f:52:33:7e:64:d8:85:a6:eb:d7:2a:5d:8c:
5b:d5:72:af:ec:13:9c:3c:e1:53:c4:9e:a3:42:15:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:E9:97:5F:B3:EB:96:A9:82:C1:48:CE:B5:BC:CD:4D:70:C3:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g4Lpl1-z65apgsFIzrW8zU1wwxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:aa:2a:70:8c:52:c1:3b:c8:c7:cd:63:cd:f5:35:ab:6f:e3:
60:53:91:25:a8:58:21:da:7f:31:ce:78:f8:53:bf:90:b0:7c:
5e:7b:a7:51:79:ad:35:3a:93:21:96:55:cc:e6:11:2c:92:81:
45:83:70:b9:27:c0:d5:3c:80:ac:84:cf:4e:c0:82:9a:da:c5:
29:98:d2:61:df:78:df:a1:e6:50:9d:d4:1a:e5:b3:0a:cd:29:
c9:ca:f6:ba:de:d7:d2:cc:5b:47:8d:9a:ce:24:c3:3e:47:22:
8c:03:12:06:c9:9b:a3:2a:7e:6f:5c:73:76:7d:19:57:f1:1c:
dd:d2:b4:43:b1:38:f9:18:ac:ff:f3:7f:9d:ab:51:e1:68:7e:
d8:fb:0e:51:41:e2:39:87:67:5e:3f:ab:a6:55:ee:e4:fc:be:
80:3d:30:c8:15:15:92:0f:b8:3e:91:f3:01:d7:b6:2b:66:aa:
a8:2f:8d:78:ef:21:5c:07:ee:7f:5a:db:81:d3:2b:55:3d:dc:
9d:da:de:ac:1c:35:e3:88:9a:2b:1f:78:14:6f:14:11:6d:ad:
f7:db:c7:91:d6:c6:b2:0c:41:be:00:a8:a1:32:47:ef:b3:61:
1e:14:e5:69:8e:71:40:79:b2:f0:98:a1:f1:7b:7b:82:30:d3:
d1:51:9c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:00 2024 by rpki-client on console-ams.rpki-client.org