Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gmWKpGBIgxGrhlAQbyY9Y-w-QGA.roa
File: gmWKpGBIgxGrhlAQbyY9Y-w-QGA.roa (raw, json)
Hash identifier: TBrTkFPB7OEH8kdvDrAfVBpCsfydSY1Yp6sG6k81ylY=
Subject key identifier: 82:65:8A:A4:60:48:83:11:AB:86:50:10:6F:26:3D:63:EC:3E:40:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 482F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gmWKpGBIgxGrhlAQbyY9Y-w-QGA.roa
Signing time: Wed 24 Apr 2024 19:53:18 +0000
ROA not before: Wed 24 Apr 2024 19:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18479 (0x482f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 19:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=82658AA460488311AB8650106F263D63EC3E4060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:51:1e:6e:3d:b3:70:a9:87:56:69:b7:14:
1a:fd:2c:82:9a:85:ec:a2:c9:fb:d4:4f:85:c6:1e:
30:dc:53:1c:21:ce:45:78:2b:9a:57:4a:42:f0:f9:
7b:ed:1d:8e:ab:b2:2e:71:54:23:ed:22:0a:f0:b7:
4e:f0:ef:6c:3a:25:2d:b8:31:6e:0d:6a:15:1f:75:
5b:05:a7:19:44:c2:38:12:83:89:5e:7f:e0:d7:eb:
6c:bd:9a:31:1f:47:b0:08:ef:74:83:31:80:32:2a:
75:ff:25:b6:e1:e2:69:95:af:aa:92:30:27:68:9b:
cb:b6:69:a9:9c:f9:21:97:1a:8c:f1:cf:9a:21:53:
6f:93:f7:c3:76:f6:fd:83:e4:e3:4c:5a:b9:61:46:
88:84:cf:7d:73:8e:0f:bc:a2:22:db:af:53:d3:45:
4c:db:c3:0e:ba:80:85:8d:d0:ef:9d:22:7d:74:48:
58:d9:a8:cd:59:e9:85:b1:31:38:6a:39:f2:77:b6:
4c:1c:4e:3a:71:14:d5:92:03:54:0d:85:5a:9f:be:
5c:eb:a6:8d:7d:72:cc:98:d2:a0:ee:69:df:96:a0:
d6:20:19:7a:60:23:20:92:6a:fd:fc:64:f0:ca:d8:
a2:9a:3c:b2:9d:8c:c4:02:74:6e:39:f4:07:be:db:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:8A:A4:60:48:83:11:AB:86:50:10:6F:26:3D:63:EC:3E:40:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gmWKpGBIgxGrhlAQbyY9Y-w-QGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:7e:41:ee:8a:75:53:b7:17:e1:a7:86:fb:fd:88:9c:df:04:
36:75:90:ca:c6:d7:75:0e:8d:37:31:96:68:9d:e4:d3:68:eb:
78:8b:5c:ae:d7:73:cb:3a:32:9f:35:7d:53:89:2e:d9:5c:24:
54:19:ae:f1:ca:10:5d:02:96:f0:79:9f:d3:99:43:fc:33:3c:
e7:16:70:4f:7a:00:c3:ae:58:b9:31:a6:a3:30:c4:c7:9e:0b:
93:de:81:f8:4a:f0:1c:87:2c:5b:98:41:91:5e:40:19:c0:12:
bb:bc:56:b3:5e:8f:fb:28:d1:e1:f0:fd:16:ac:23:3b:45:09:
c7:90:c8:4b:da:92:37:a4:4f:2e:00:db:d8:4c:d3:84:87:64:
80:93:23:34:e0:5d:d9:8f:8c:89:0e:ff:00:38:a4:cc:a6:2f:
3b:d4:f1:c1:d0:d0:43:de:a3:91:ae:ce:5e:99:05:a7:9b:8b:
16:5a:d6:a3:ea:34:d7:60:e7:e1:3e:23:8b:48:44:df:a6:c4:
02:57:4c:5f:94:c2:45:28:4c:19:91:68:73:4b:57:38:ab:b3:
3e:c4:bf:cb:ed:53:c7:62:c5:0d:ad:97:4d:da:95:63:95:8b:
93:cf:6e:fc:bb:7b:c2:cc:d5:d8:06:b9:c7:ef:9a:dc:b6:c5:
62:96:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org