Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/h114Q2Cw2iQielhSrGzGjlQsuEE.roa
File: h114Q2Cw2iQielhSrGzGjlQsuEE.roa (raw, json)
Hash identifier: mKScXoSJcqKYYmXnOtvj7gTS4gIPT8jmT6ZRhAzwSXo=
Subject key identifier: 87:5D:78:43:60:B0:DA:24:22:7A:58:52:AC:6C:C6:8E:54:2C:B8:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 449B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h114Q2Cw2iQielhSrGzGjlQsuEE.roa
Signing time: Sat 20 Apr 2024 01:23:04 +0000
ROA not before: Sat 20 Apr 2024 01:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17563 (0x449b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 01:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=875D784360B0DA24227A5852AC6CC68E542CB841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:13:8e:7f:27:50:21:c8:9c:3a:28:7e:4f:49:
11:82:ef:5f:7e:84:9b:2f:c2:dd:b6:91:e5:fd:b6:
c9:51:ab:b6:4c:f6:77:a5:ac:99:78:3e:c6:1a:3a:
c2:d5:2c:33:b7:0b:b5:33:be:75:53:62:1e:b4:36:
bb:47:3d:87:19:f2:a2:26:65:1d:62:cf:b3:dc:bd:
88:97:0f:d8:b9:ee:fb:83:8a:6f:4e:91:86:6a:8e:
71:32:79:e5:a4:39:f6:2b:4d:1f:16:57:e0:4d:e5:
a5:99:65:0a:db:26:b7:eb:3e:ba:dc:5e:5f:a7:1d:
c0:46:db:a1:e4:5e:30:c3:ce:17:dd:a5:1a:ae:f8:
99:92:a9:19:af:3b:9a:64:92:f5:8e:e6:96:c8:6a:
47:80:8e:c7:e0:a5:78:8d:55:8a:a0:47:fb:bd:df:
13:bb:9f:1e:03:b1:17:1a:29:d9:aa:4f:9e:0a:14:
d7:32:92:5f:1d:78:2f:67:49:3f:5e:e7:81:9a:a0:
7c:01:67:64:9a:46:0a:2b:74:44:07:38:14:7e:b9:
80:b1:07:a9:f9:fc:f9:e9:7d:5b:3d:45:44:94:ae:
37:10:6a:fb:33:e9:a7:9e:71:d6:e1:96:de:5e:03:
a9:8e:d9:82:4a:cb:4c:c8:b8:7c:f0:58:b4:c5:93:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:78:43:60:B0:DA:24:22:7A:58:52:AC:6C:C6:8E:54:2C:B8:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/h114Q2Cw2iQielhSrGzGjlQsuEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
14:23:2b:14:0c:6a:1a:0c:1b:8e:76:89:48:d0:cf:c5:55:80:
72:90:00:89:92:96:e9:b9:4c:09:37:af:6f:c3:1b:27:b7:b0:
e1:a5:71:9f:65:5f:9b:33:a9:57:1e:0b:1a:14:f3:17:ec:6c:
dc:89:91:1c:10:10:13:2a:fb:3a:eb:91:21:a6:80:19:a2:57:
39:59:3f:20:77:f8:7b:3b:41:53:b4:45:f4:c5:9f:ea:41:72:
41:0a:2b:2f:a7:d2:10:7e:bc:1a:f5:67:28:3b:7b:d1:7c:a8:
18:54:e2:38:01:fc:0b:0b:a5:25:31:6a:cc:ab:8f:82:aa:e3:
b8:47:41:24:ef:99:67:48:1e:4e:9d:22:bc:5f:b7:69:02:1f:
87:da:5e:30:cd:7c:18:46:5f:30:9a:82:cf:0f:2a:5c:1a:89:
1f:ac:ee:fb:18:b8:03:57:2c:09:ae:a3:7f:e1:2c:bc:4d:0e:
ec:a6:95:04:1c:5e:8e:b2:62:c3:e6:e3:1c:2a:d3:f0:76:6f:
e0:21:b6:7a:a4:e1:6d:13:01:2e:b2:86:dc:51:cc:05:ae:fb:
84:6a:94:68:18:d1:77:34:7d:9c:d5:47:e3:5c:a9:1c:e4:c3:
fd:f3:a8:04:a3:00:fb:fe:79:91:68:25:b4:d2:e2:1f:42:15:
be:e5:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:40 2024 by rpki-client on console-fra.rpki-client.org