Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
File: hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa (raw, json)
Hash identifier: gSXmlZm3VPludDL5XTNZI5h/Zzl8gC1xsn8ubIpZ3ro=
Subject key identifier: 84:29:75:14:95:AE:65:16:88:FB:D2:5B:EC:3D:FF:66:51:0D:B8:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 257D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
Signing time: Tue 07 Jun 2022 10:06:23 +0000
ROA not before: Tue 07 Jun 2022 10:06:23 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9597 (0x257d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 7 10:06:23 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=8429751495AE651688FBD25BEC3DFF66510DB8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:99:eb:65:0b:5d:98:d6:8c:e3:b5:3b:6c:
e0:d2:4e:e3:38:d7:c0:6b:a1:dd:07:14:de:58:20:
74:9f:39:01:f7:e2:f3:2c:13:2c:5f:1d:3b:08:98:
80:d7:c5:c0:63:19:a7:69:4a:84:bb:3f:0c:8a:4f:
d0:7f:46:13:92:47:30:53:cf:82:75:97:b1:7a:b4:
ba:c3:9d:af:70:00:c1:e5:7e:51:97:1b:64:86:0e:
f9:a8:aa:72:a2:cc:61:5c:43:d8:6d:16:70:6a:b9:
4a:1a:a5:ca:23:0b:13:fa:4d:39:6b:17:0c:fc:f3:
18:36:5f:8b:e0:91:65:ce:78:23:e6:d8:7c:a3:fb:
bc:de:72:2e:30:bb:70:4b:42:63:8e:15:bc:1d:d5:
9f:9f:ef:f7:82:3c:47:60:8a:a1:d9:e2:ad:3e:69:
9d:42:96:67:9c:2b:7b:73:2c:ed:f6:8c:c1:24:b2:
eb:da:48:10:0f:3b:4a:a9:68:65:df:ff:f8:97:f8:
43:e5:9f:88:91:e4:62:01:a9:2d:40:cd:da:4e:9d:
56:d1:d6:49:f0:b4:d6:6c:83:9b:9b:13:66:19:19:
fa:3a:2c:04:bd:5c:cf:6c:34:07:04:04:27:28:05:
1a:92:cb:57:82:bc:1c:fa:bb:6d:ec:67:65:32:84:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:75:14:95:AE:65:16:88:FB:D2:5B:EC:3D:FF:66:51:0D:B8:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hCl1FJWuZRaI-9Jb7D3_ZlENuMQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:6a:02:e5:7a:20:97:45:f3:33:4e:6e:0f:39:73:de:2a:1f:
a8:b3:df:17:25:df:b8:b5:5a:b5:0b:1b:c6:b2:72:bf:35:d1:
45:45:b1:e2:e3:6d:02:ee:88:6b:cf:42:b9:cb:d2:78:39:55:
8c:59:ff:49:6d:f6:73:8f:94:fc:d9:fe:bb:5a:e6:85:d0:c2:
32:4c:89:69:f8:5c:11:30:cf:02:c1:48:2e:26:86:5a:be:4a:
eb:c8:f9:01:03:d5:be:67:bc:f7:59:b7:ad:72:d3:3d:1b:11:
60:e3:65:96:b8:d0:f5:d8:64:60:ca:5e:83:72:32:3e:09:3f:
6a:95:6c:c0:97:51:4c:01:68:fd:23:a3:01:88:f8:f2:aa:ca:
33:e3:4d:25:9c:d9:56:6d:26:0d:08:2b:59:35:6d:fb:af:d2:
dc:d7:4e:4e:19:63:19:f5:fe:ae:0b:29:7b:6c:cf:c3:01:9c:
74:53:ce:15:79:96:13:cd:de:bb:fa:70:b3:c1:84:05:f8:29:
41:f3:19:21:c4:50:53:f0:2e:cb:14:22:c8:71:1f:79:42:f2:
86:4f:19:c6:22:82:38:ba:27:85:90:54:22:9e:e1:fb:38:fd:
e2:55:7e:d7:93:54:29:a7:7e:ed:11:6d:47:14:9d:3e:6f:4b:
f4:a6:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:01 2024 by rpki-client on console-ams.rpki-client.org