Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/in_9qzUUf6LBE_ejHBRu_6zze_A.roa
File: in_9qzUUf6LBE_ejHBRu_6zze_A.roa (raw, json)
Hash identifier: xFWW5BO18oN/SQiIb4Nhr0kYojcK8Ajo/dPjOpkL09w=
Subject key identifier: 8A:7F:FD:AB:35:14:7F:A2:C1:13:F7:A3:1C:14:6E:FF:AC:F3:7B:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3747
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/in_9qzUUf6LBE_ejHBRu_6zze_A.roa
Signing time: Tue 02 Apr 2024 06:52:18 +0000
ROA not before: Tue 02 Apr 2024 06:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14151 (0x3747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 06:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8A7FFDAB35147FA2C113F7A31C146EFFACF37BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:27:0c:23:86:f5:45:54:4f:fa:22:67:d5:
8e:5f:52:71:bf:43:95:ff:d6:b4:41:3a:a4:5f:ee:
fc:e8:fd:61:f4:e7:1f:6a:69:95:35:85:d5:11:c2:
b9:b9:80:b3:cb:8a:b2:95:0c:29:f9:2e:92:93:50:
5a:f2:45:38:e6:98:cd:66:66:e3:06:a9:5c:b9:0e:
7d:26:6f:ed:f1:5c:d6:72:77:96:ea:76:44:6e:e8:
9c:7e:f3:50:e5:5e:26:9b:69:f0:93:99:4f:ac:af:
5c:76:bd:da:87:ee:36:a7:4a:5b:c3:e3:33:ab:55:
3b:1a:11:df:b4:ec:a1:39:ac:ba:f9:eb:67:cf:81:
8f:91:5e:c8:6d:8b:4c:1e:00:d3:1e:73:c1:22:37:
a7:8b:3d:b0:b3:59:bf:68:fe:0e:92:58:2a:91:dd:
4d:6d:f4:d2:e6:95:db:64:31:35:b6:bc:1e:d0:b3:
28:92:68:d2:e9:9b:8d:85:b7:b6:3c:0d:f7:fd:7b:
08:a4:c1:07:78:72:05:e9:8f:18:e7:f4:3f:8d:56:
e0:03:a9:fd:b9:91:96:f3:4c:63:55:2e:49:56:3a:
ec:89:c4:8a:7f:1c:d3:07:c1:28:51:74:41:51:84:
a0:78:ac:10:b6:72:33:19:e4:3a:0b:43:96:72:15:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:FD:AB:35:14:7F:A2:C1:13:F7:A3:1C:14:6E:FF:AC:F3:7B:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/in_9qzUUf6LBE_ejHBRu_6zze_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:a8:ff:47:82:1b:26:cf:5d:dc:97:5c:7d:94:0b:43:0d:cb:
03:6a:5a:b0:e8:d9:5b:22:6c:31:91:f5:fa:56:12:2f:65:fa:
fd:5a:7f:a4:c0:8e:46:89:ff:80:bd:84:86:8b:ee:8d:a0:5f:
60:3f:b0:ba:a2:10:4a:4c:46:10:af:33:be:67:c7:e2:c5:5a:
98:f6:07:b3:42:52:1c:a2:5b:39:12:7c:3d:bb:92:0d:b2:83:
5d:98:40:ac:dc:34:9a:73:88:54:9d:f5:bd:3f:63:0b:58:ae:
68:2f:5f:f2:2e:a7:a7:6b:40:54:c9:b8:9c:6d:9c:39:4e:4a:
0a:bc:81:62:d8:65:64:27:37:a5:d6:63:dc:f0:a7:00:ab:2d:
c9:4b:62:3e:bc:6e:e5:15:9c:3e:4c:42:5d:85:97:47:53:76:
18:c8:64:08:5d:73:f5:f7:d6:ea:bc:b8:37:5a:05:be:d4:1f:
e0:44:9b:ff:fb:3d:c2:31:ce:93:72:84:d8:76:86:4a:eb:28:
59:f2:a0:8c:e4:d6:7d:45:9b:4c:ae:f7:f8:54:e7:47:db:cd:
a0:73:5e:bb:84:49:4a:53:07:a4:a3:fe:33:73:a7:a5:a1:c7:
ee:d6:11:73:3f:fd:73:c1:8f:14:1a:5a:b5:96:5d:59:59:a4:
0e:42:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:03 2024 by rpki-client on console-ams.rpki-client.org