Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/huDWuklQHSvW7Dv3ErcoMY-dW6c.roa
File: huDWuklQHSvW7Dv3ErcoMY-dW6c.roa (raw, json)
Hash identifier: +R0UDKoc4yJDNmTjsqQ27OV1eXKzTXLr633wOS4TPmk=
Subject key identifier: 86:E0:D6:BA:49:50:1D:2B:D6:EC:3B:F7:12:B7:28:31:8F:9D:5B:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F4B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/huDWuklQHSvW7Dv3ErcoMY-dW6c.roa
Signing time: Sat 04 May 2024 07:23:53 +0000
ROA not before: Sat 04 May 2024 07:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20299 (0x4f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 07:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=86E0D6BA49501D2BD6EC3BF712B728318F9D5BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:3b:f1:1c:4f:4a:76:7c:c3:8d:6b:12:47:
94:ff:39:b9:f4:f0:32:d8:8a:c9:74:a9:a8:82:63:
72:63:97:4c:7d:dd:6e:79:8f:81:ee:56:44:9f:85:
6d:df:c8:4d:a4:d5:3b:ce:48:3f:72:be:c1:09:af:
f3:72:bd:b7:97:b4:b0:ee:ab:a5:6f:9d:72:c5:37:
ac:45:0e:48:3f:13:c1:3d:4f:ad:b7:7e:28:ac:81:
f7:df:c9:00:30:37:f6:5c:84:f2:22:23:ef:6f:a6:
a2:f4:a8:e9:e6:07:43:48:97:02:ad:1b:5b:47:3a:
40:7a:c6:8c:ff:4a:2b:ce:bd:5f:fb:6b:91:5d:ba:
ab:18:dd:64:f8:39:82:8b:5a:88:eb:9d:61:0b:00:
1d:08:e1:c8:99:a7:c3:15:2b:ef:7d:60:bd:ef:00:
ea:9a:18:20:5f:99:a6:00:20:a1:87:e8:7c:c6:ef:
aa:94:4c:ad:4c:cb:ec:8b:1f:62:80:43:e0:9a:e4:
73:64:57:65:4e:40:72:bb:dc:dc:10:e6:af:93:c1:
86:2e:3a:8f:2b:32:d3:6c:8d:45:51:af:dc:f3:a1:
93:fb:35:2c:cd:66:0d:16:bd:65:76:65:ce:92:ea:
2d:1b:5d:16:7f:8e:ac:36:77:29:fe:91:c6:72:1a:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:D6:BA:49:50:1D:2B:D6:EC:3B:F7:12:B7:28:31:8F:9D:5B:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/huDWuklQHSvW7Dv3ErcoMY-dW6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:44:80:be:1d:24:04:c9:48:d9:e3:d0:23:d9:34:f0:00:cf:
34:12:e1:7f:84:c1:e4:dd:17:aa:21:fc:ce:0c:93:7b:77:47:
c0:dc:3e:71:fa:55:bd:ca:2a:f9:0f:19:76:f2:10:c8:52:32:
51:62:a7:db:92:80:9d:5a:b3:a4:60:07:9e:ca:49:7f:d2:d4:
00:66:e8:59:72:f8:7d:ee:ff:ca:d0:c3:f7:c4:3d:23:99:83:
c0:8b:7a:74:c3:bf:a3:3d:9e:e1:0e:c8:14:80:a5:62:fb:ca:
b8:f1:fa:35:f4:1e:3c:a6:29:8a:96:e5:95:15:1b:34:1b:06:
d0:21:ab:0c:a4:e5:40:00:ec:ad:72:ac:fb:a3:70:0b:50:6b:
55:4d:89:ec:cf:43:41:b2:55:6f:85:65:02:73:8c:54:21:8d:
6a:c2:be:14:7a:e3:68:75:46:36:f0:f8:c3:9a:17:13:b7:50:
c5:e7:64:05:90:38:51:cd:12:a1:f7:7c:13:f0:5f:56:1a:6a:
8e:0a:96:cf:6f:a2:3c:66:6b:4a:d1:12:1e:54:25:e4:3f:be:
c2:1e:16:55:95:c9:e1:80:99:e6:5e:5a:7e:e4:ff:85:e7:a1:
06:7a:13:3c:10:bb:dd:1a:4c:9f:7b:51:e1:e4:63:91:05:f8:
a1:ce:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org