Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iLysorchM5teS8p4H1KILSdWnwE.roa
File: iLysorchM5teS8p4H1KILSdWnwE.roa (raw, json)
Hash identifier: GGlzzoDd3rbX/bCYdxPG7UB7oaD5ui6A/m9AKVFHxEI=
Subject key identifier: 88:BC:AC:A2:B7:21:33:9B:5E:4B:CA:78:1F:52:88:2D:27:56:9F:01
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FF3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iLysorchM5teS8p4H1KILSdWnwE.roa
Signing time: Sat 13 Apr 2024 20:23:23 +0000
ROA not before: Sat 13 Apr 2024 20:23:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16371 (0x3ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 20:23:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88BCACA2B721339B5E4BCA781F52882D27569F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:ca:2e:c8:72:fe:8c:52:ef:d6:b8:56:19:
2f:27:58:f1:51:c7:d2:bf:87:3d:63:1d:5d:f8:ae:
f8:e9:1a:e1:38:28:0a:cb:c1:73:b3:fe:39:52:fc:
d8:e7:ef:09:25:ff:c0:4e:f3:84:ac:87:5c:12:9c:
fb:de:01:a9:c0:f8:98:ec:cc:e9:a0:a1:b8:98:f7:
56:3c:1d:5c:23:fe:9d:0b:8a:a8:78:4b:1e:14:e8:
63:7d:8e:d8:b1:a8:8a:bb:d9:40:ee:a8:85:8b:22:
2a:e9:28:de:4b:43:9c:80:0b:fc:da:c3:95:86:9a:
95:32:dc:88:ff:87:fd:ef:05:11:75:53:0e:93:3a:
7d:85:f9:0f:e6:81:2f:84:c1:3c:3e:d5:fc:6a:b0:
c5:e7:33:8e:27:08:db:d6:a5:5b:43:1d:b9:ab:48:
11:7c:38:7a:cd:11:ff:dd:ca:ca:63:33:19:43:b4:
f0:4c:bb:fe:4f:91:0b:a5:c1:63:e9:99:36:88:f5:
b2:0f:e8:89:ec:e6:00:06:48:6e:c9:a5:5b:0b:79:
c6:60:a7:d3:28:6a:ca:f5:6e:d4:c0:25:9b:bc:f2:
2c:c5:35:fb:5a:11:b9:8a:e6:d2:93:66:b8:4a:53:
5b:f0:1c:e3:e7:0a:8d:07:77:55:7c:32:b7:2b:70:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:AC:A2:B7:21:33:9B:5E:4B:CA:78:1F:52:88:2D:27:56:9F:01
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iLysorchM5teS8p4H1KILSdWnwE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:6f:b9:08:fd:cf:17:3f:ac:05:72:31:22:29:b6:e7:b3:b6:
f3:71:60:92:3c:6b:5b:d9:b9:59:1c:b6:88:65:4d:f6:4a:a4:
82:9d:05:8e:5d:e1:e8:0c:08:28:74:39:8a:78:6d:36:ed:32:
8a:93:08:fe:c9:f6:85:ce:e4:2f:82:94:0f:cc:51:c7:59:2d:
03:a9:36:14:e0:8c:a6:97:77:dd:e9:fd:d6:2a:72:01:cb:17:
41:20:06:3e:6a:3b:d3:39:53:e0:8f:4d:d9:11:30:ba:6b:85:
ba:bc:95:1c:9b:df:bf:c9:67:9e:08:b6:ec:f4:0c:d8:7f:77:
a0:50:9e:b7:e0:36:8b:37:b5:29:13:6c:6a:b0:80:aa:f5:97:
c4:e9:9c:5b:2f:b1:b1:63:f8:f8:c5:86:24:79:71:88:3f:b6:
a3:d7:1d:1a:42:0a:62:d6:c9:47:04:f6:40:81:a2:e3:dd:b0:
19:c3:4b:18:69:4f:d2:ec:4f:42:cd:14:e9:40:35:0d:20:07:
b6:45:90:db:65:44:86:7a:9b:59:4c:3a:f9:8f:f9:7d:c3:92:
f3:9d:1d:c4:bd:85:50:a2:fd:49:32:ee:ea:3e:ea:44:a2:ef:
1e:ec:c0:6d:b0:bc:11:20:51:29:a1:29:a3:fd:ae:8e:9b:cc:
c3:44:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org