Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gNadqfvB5xgfIEWmMDDsvUmtmDc.roa
File: gNadqfvB5xgfIEWmMDDsvUmtmDc.roa (raw, json)
Hash identifier: OOdGx3Qsflql3BRr0VDLjZdhfnqHkpjLxuhqCG4c6uc=
Subject key identifier: 80:D6:9D:A9:FB:C1:E7:18:1F:20:45:A6:30:30:EC:BD:49:AD:98:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 488B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNadqfvB5xgfIEWmMDDsvUmtmDc.roa
Signing time: Thu 25 Apr 2024 07:23:22 +0000
ROA not before: Thu 25 Apr 2024 07:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18571 (0x488b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 07:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=80D69DA9FBC1E7181F2045A63030ECBD49AD9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:4b:5e:08:aa:95:2b:55:9b:42:ca:9a:27:
4f:c9:f6:ff:45:3c:66:a5:1c:3f:06:e3:9e:03:2f:
0b:1b:25:ae:38:53:11:41:0f:c3:f5:4d:09:5e:06:
e1:1a:25:5e:5b:5f:93:69:e9:4b:3b:0c:a5:05:3d:
b6:05:4c:69:ed:e9:29:ed:5d:35:4d:b5:0d:f4:47:
4e:89:0a:ea:17:46:58:27:ad:0e:87:c5:20:13:d0:
9d:cb:ff:39:e2:cf:2f:25:8e:97:79:76:a4:9d:43:
b5:20:ce:40:d4:8b:2d:46:cc:42:20:c1:25:7d:91:
a6:a3:c6:29:f1:82:d0:e2:19:dd:03:30:73:2d:90:
7f:f0:d3:79:38:cb:da:5d:8d:c6:17:e5:3e:aa:83:
cb:79:8d:bc:35:4a:5b:2b:54:1e:b7:f2:65:32:56:
98:33:fa:c5:de:c6:b0:a9:1d:9b:1c:a9:c0:b1:d3:
1c:75:a9:a3:32:0f:ca:46:4e:6c:50:98:78:17:f1:
6f:c8:73:58:73:29:93:7a:0f:f6:35:c9:c4:30:77:
ba:94:af:2a:42:51:84:d7:c8:e8:15:4e:d2:b7:9e:
99:32:64:52:1a:97:1f:e2:2c:ce:95:ed:97:fd:c8:
ba:05:a1:cf:90:0a:5f:2d:96:3e:ac:80:25:ce:53:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:9D:A9:FB:C1:E7:18:1F:20:45:A6:30:30:EC:BD:49:AD:98:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gNadqfvB5xgfIEWmMDDsvUmtmDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:69:97:65:33:9c:a7:00:58:60:14:5e:ff:d5:9b:8c:d5:bc:
ba:47:c4:11:fd:40:2d:9f:ea:34:9b:06:cd:7d:64:5e:44:39:
ef:1b:b2:11:70:7d:40:d2:36:07:8f:95:77:a6:4a:17:4d:17:
f6:dd:ee:60:6e:5c:cf:57:29:82:33:ff:04:1d:48:8d:ce:df:
09:d0:32:07:89:ab:71:19:37:34:19:99:80:fe:ad:8d:0f:95:
b0:13:7c:3b:23:7d:8f:8f:22:88:f2:6c:cf:5b:a5:96:3e:64:
d3:46:2f:b4:a6:ee:a7:09:73:b5:be:d3:7d:91:cd:98:5e:fa:
48:a6:46:d5:13:a8:45:17:2b:50:ba:dd:74:84:39:48:b6:66:
3b:8e:fd:07:f1:6b:f8:ec:d5:ea:6e:81:8e:e1:69:94:29:3a:
f1:6f:bb:52:38:0f:c6:fd:11:2b:76:ca:9a:01:01:f6:73:4a:
c0:91:7b:10:63:82:38:21:65:48:2b:04:1c:84:50:6d:b2:3e:
59:e1:46:06:ea:6f:b8:73:a3:fe:75:b2:41:2d:9f:53:34:53:
6c:24:52:0f:5e:07:7e:ec:00:05:be:be:ac:bd:ed:97:46:fe:
74:3e:03:53:71:0b:16:bb:7a:2a:46:19:61:72:c5:a1:9c:c0:
06:e0:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org