Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iXACpOPNbORyVuYMgxeyTp56JfE.roa
File: iXACpOPNbORyVuYMgxeyTp56JfE.roa (raw, json)
Hash identifier: ksxLjl7rIJn05Xo6S8+n6KwqzZd87NRpV6jh1kIZtrA=
Subject key identifier: 89:70:02:A4:E3:CD:6C:E4:72:56:E6:0C:83:17:B2:4E:9E:7A:25:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3947
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iXACpOPNbORyVuYMgxeyTp56JfE.roa
Signing time: Thu 04 Apr 2024 22:52:25 +0000
ROA not before: Thu 04 Apr 2024 22:52:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14663 (0x3947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 22:52:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=897002A4E3CD6CE47256E60C8317B24E9E7A25F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:41:de:d9:2b:b7:84:04:ba:60:00:65:a1:
78:79:ff:a9:c9:f3:bb:b6:81:87:88:84:bd:3d:75:
12:ed:b0:d0:ff:53:6f:c6:c8:3b:f1:71:72:b6:4d:
73:bb:5a:5f:2a:c6:87:47:18:e3:a0:97:c1:ff:cb:
77:67:31:d5:a5:c0:fc:91:25:b1:78:bb:25:f1:19:
f0:ed:92:4b:b1:95:1b:18:b2:ec:34:56:21:db:97:
50:e1:19:a6:53:6b:ad:ce:d1:6a:0c:65:17:43:7f:
5c:51:66:15:23:44:c4:84:df:91:d7:ef:07:92:04:
f0:90:ef:76:c1:21:c4:19:58:2c:72:de:a2:75:11:
88:15:66:11:09:61:c7:b9:4e:2d:3e:bd:57:79:12:
95:86:4b:84:41:2f:5a:59:15:7a:6f:3f:d7:bc:89:
9d:fe:95:00:f1:71:b9:37:d6:c1:45:d5:7c:80:05:
98:37:07:46:f5:99:16:65:d9:27:4e:04:0b:7b:5f:
64:30:ce:d8:58:c1:81:56:e1:8c:b7:c6:d8:d3:a9:
2a:d6:1c:da:e6:97:7e:ee:bd:8f:da:4a:25:fb:26:
ad:b9:57:20:21:35:33:80:19:0e:bb:8c:84:1c:2c:
d4:aa:a7:c9:2e:0e:89:43:0d:c2:ce:6f:f5:f6:b1:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:02:A4:E3:CD:6C:E4:72:56:E6:0C:83:17:B2:4E:9E:7A:25:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iXACpOPNbORyVuYMgxeyTp56JfE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:37:c0:a8:34:55:6c:05:ed:5b:fa:e6:1c:a5:f7:c8:e5:33:
93:a3:12:db:13:6f:fd:b6:40:56:76:a7:09:46:62:04:25:9b:
07:25:52:7b:df:b3:18:1e:0c:58:39:3f:4b:87:db:91:c3:1c:
a5:ed:8d:ba:a2:a7:57:fd:63:db:71:e5:57:5b:8c:2f:83:04:
da:5f:3a:69:83:30:51:71:32:e6:f7:16:76:46:00:d0:ca:7c:
5a:d3:03:e4:2e:91:18:88:4e:74:35:37:dd:a1:5a:6a:1d:3a:
8b:6d:ab:22:c8:07:c7:1e:77:54:82:9d:ec:65:35:ed:99:d9:
59:32:c1:e5:3e:00:b8:90:33:07:dd:ab:51:27:f4:f1:fd:b9:
db:f1:3a:e3:ad:14:ee:56:9a:22:da:fd:af:62:d8:4e:82:38:
2d:c5:f6:d1:f2:15:bb:d9:f5:dc:74:5f:59:df:63:23:ac:0e:
f0:cf:1e:7c:c7:25:2b:6f:12:40:3a:7d:28:4d:b5:ca:20:a6:
c4:e4:2b:84:6a:6d:e4:be:1f:02:ce:a8:60:07:68:ee:eb:ab:
1d:67:1e:73:25:c4:8f:16:59:06:eb:04:24:3f:51:f4:82:32:
65:aa:e2:84:f6:88:74:3f:f5:17:bb:ac:83:ca:2f:6c:b6:8e:
05:8c:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:41 2024 by rpki-client on console-fra.rpki-client.org