Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iD-fDs7p3_xTiORK1SI1zvkyuzs.roa
File: iD-fDs7p3_xTiORK1SI1zvkyuzs.roa (raw, json)
Hash identifier: ffPYNR0NckTFn5DUjMTuhPMfvsZ2wP6meNW9cOMCxYk=
Subject key identifier: 88:3F:9F:0E:CE:E9:DF:FC:53:88:E4:4A:D5:22:35:CE:F9:32:BB:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ACB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iD-fDs7p3_xTiORK1SI1zvkyuzs.roa
Signing time: Sat 06 Apr 2024 23:22:33 +0000
ROA not before: Sat 06 Apr 2024 23:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15051 (0x3acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 23:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=883F9F0ECEE9DFFC5388E44AD52235CEF932BB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:c9:b6:9d:2a:42:10:6c:cf:cf:5a:83:8e:
31:5a:d9:45:e4:6b:a1:9a:9e:0b:c6:19:5e:20:3c:
c6:f0:14:15:31:cd:9d:0a:04:a1:f2:a1:6a:ef:22:
ed:fb:d7:ca:b7:d2:48:2c:d7:e5:5d:0e:0c:75:e6:
e3:67:d8:6b:70:e9:84:22:48:45:79:a8:6c:0c:0e:
e6:cf:20:93:f6:1c:c6:c4:da:9d:63:35:07:82:81:
03:3d:5c:c3:e6:fb:62:df:35:ec:b2:a9:4d:71:aa:
c9:b4:ea:0c:90:28:c3:31:bf:49:54:49:83:fc:c6:
34:59:7d:b7:5b:1c:38:93:6d:1e:8c:1c:08:11:98:
80:6f:d1:f4:26:93:3d:42:8d:da:a5:94:6a:e0:cd:
c7:65:8f:2f:eb:54:71:ed:a8:ca:cc:aa:f0:af:a2:
08:50:2b:8c:fa:be:14:97:a0:43:8f:1c:ca:27:ac:
d3:ee:fa:e1:9a:cf:86:e3:29:b1:ea:2e:b2:41:8e:
e8:d1:1f:c9:c6:95:fe:9e:57:63:43:2b:5b:c0:7c:
1d:03:35:d1:34:da:76:ea:07:69:73:5c:ed:80:28:
e1:73:80:ab:c3:cd:fe:42:a3:55:85:63:0e:9f:d1:
e8:eb:42:27:40:5c:82:de:60:0a:fa:b6:52:f9:55:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:9F:0E:CE:E9:DF:FC:53:88:E4:4A:D5:22:35:CE:F9:32:BB:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iD-fDs7p3_xTiORK1SI1zvkyuzs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:4e:7b:40:32:0a:ce:86:ee:6d:ab:0a:9a:52:d4:fe:c5:02:
af:52:e6:66:5c:ae:d2:df:d4:4f:78:5d:3d:f6:eb:74:c8:fa:
1e:82:f0:87:e8:ab:f0:2d:46:bf:42:bb:b3:52:a3:13:18:e8:
2c:da:1d:1e:9f:43:73:c1:37:c0:74:c4:f3:2d:17:5d:4f:ba:
6e:6a:28:ee:6a:e0:77:e8:52:5b:51:7d:99:aa:72:fc:50:50:
9f:4d:f7:f2:3c:bf:d9:5e:fd:c9:87:2c:90:ad:4f:35:cf:53:
52:a0:57:e6:b6:3a:75:e0:2a:57:f2:b2:a9:7a:00:95:42:25:
90:5f:10:96:d4:28:90:f6:8f:52:4e:81:8b:3f:1b:f5:0c:10:
60:ad:fa:42:ba:e8:f6:e8:bc:23:76:59:27:99:3c:5b:b9:98:
5b:74:51:10:d7:8b:53:d8:bb:c4:6c:83:90:53:a1:80:91:2a:
72:6e:14:d5:ac:f7:a8:88:18:4c:4b:e7:fe:91:2b:a6:98:7c:
29:b7:58:ac:16:e5:1b:05:3e:e4:6a:18:7d:ae:54:6d:41:f5:
a6:0a:47:63:5b:94:f3:5a:e6:d9:34:9e:37:19:da:7f:3e:2d:
57:1d:3f:3e:12:f3:4d:ed:9e:c7:8f:a2:f6:e6:62:69:9d:22:
db:38:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org