Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/inEsverGniOUK854RGmpODZvzZ0.roa
File: inEsverGniOUK854RGmpODZvzZ0.roa (raw, json)
Hash identifier: gra9RId7LnNI2Jf+Z1moeseMqmQwK3FUycChmCNyzvM=
Subject key identifier: 8A:71:2C:BD:EA:C6:9E:23:94:2B:CE:78:44:69:A9:38:36:6F:CD:9D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35AF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/inEsverGniOUK854RGmpODZvzZ0.roa
Signing time: Sun 31 Mar 2024 03:52:16 +0000
ROA not before: Sun 31 Mar 2024 03:52:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13743 (0x35af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 03:52:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8A712CBDEAC69E23942BCE784469A938366FCD9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:ec:ae:73:13:d4:92:a0:54:ca:59:5a:87:
b0:a7:c9:cc:8c:f3:cd:d7:8f:e6:36:31:14:50:e4:
00:45:43:71:25:23:52:46:0c:da:cf:b8:be:83:76:
3b:0a:50:6d:91:8b:51:63:d6:6b:6a:09:37:25:61:
af:97:f9:c8:02:94:f3:a1:9a:6e:b9:22:8e:bb:b5:
c6:c9:68:5a:63:8b:f9:9b:96:0a:47:c8:b7:48:14:
69:01:7c:a2:05:ad:16:04:54:40:ca:24:d1:d0:9a:
3b:29:75:72:8a:b8:e1:d4:4b:ee:bb:71:98:bc:b3:
17:2e:6b:a2:7a:2c:9a:19:04:aa:b5:0b:0f:b2:7d:
01:cb:f1:3e:36:0f:93:87:9e:77:f3:a3:f4:c1:7e:
1a:e5:55:40:0e:74:4e:b9:8c:d4:29:fe:7f:fc:54:
cb:36:1e:48:14:b2:89:27:ee:a7:a1:a4:87:2b:8e:
8e:a5:67:77:35:37:f3:93:13:94:19:f4:38:48:75:
99:01:51:94:cf:2d:c9:e2:99:b8:b7:ce:f5:e2:1b:
a5:94:b8:dc:af:26:fb:08:e8:32:ca:ce:74:e0:ae:
98:9a:dd:b7:d5:cc:8f:b1:23:08:5f:c5:1a:dc:6f:
fa:e7:6a:76:a4:0d:0c:15:e8:ae:1a:f9:d3:27:25:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:71:2C:BD:EA:C6:9E:23:94:2B:CE:78:44:69:A9:38:36:6F:CD:9D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/inEsverGniOUK854RGmpODZvzZ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
69:ed:44:c8:f2:02:16:a0:29:25:80:fc:40:2d:01:33:91:b0:
5c:5f:14:52:52:67:a0:6f:78:f4:89:6c:7b:9a:1c:77:dd:a3:
3b:28:3a:8f:a7:3a:b9:95:a6:b6:66:8f:d7:a3:cf:16:65:a7:
2f:4c:a3:4c:da:f7:74:33:6e:92:12:07:48:f2:0a:e1:85:54:
49:d1:49:8c:cc:b2:c9:3c:52:55:e9:c6:47:d4:49:df:11:7a:
c9:4c:8f:15:41:e7:37:d7:2b:87:1b:ed:58:ee:cf:b8:6e:2c:
b2:a0:fc:87:00:e7:fd:41:13:2c:63:dc:60:c0:0d:40:35:82:
46:08:9d:7d:f6:25:24:c3:ce:7c:40:0d:fc:ca:06:77:56:9b:
ff:22:ff:d4:81:31:15:60:43:e6:41:3f:ac:10:a4:7f:d4:26:
f3:3d:1f:2e:e5:d0:db:c8:a8:14:9c:32:2c:37:2f:51:9a:d0:
86:c8:83:67:0a:76:b1:37:10:a7:e1:9f:c6:79:33:b0:48:8e:
64:b1:4f:e9:05:dc:2d:9b:4c:49:86:f1:e9:89:07:0a:d5:4b:
0c:8c:f0:bc:5e:ed:27:1b:1d:06:fa:72:92:47:74:4b:fc:ab:
e6:68:c5:ce:78:bf:ab:f5:98:72:a8:87:55:b5:76:46:c6:6b:
49:40:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:03 2024 by rpki-client on console-ams.rpki-client.org