Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iyxvKENBUz0BZyKI91bOMfcCKV4.roa
File: iyxvKENBUz0BZyKI91bOMfcCKV4.roa (raw, json)
Hash identifier: azTFtkPCzSX4BKmKLg1OVdI+k/z360aDvWpV4eC+nRQ=
Subject key identifier: 8B:2C:6F:28:43:41:53:3D:01:67:22:88:F7:56:CE:31:F7:02:29:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 576B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iyxvKENBUz0BZyKI91bOMfcCKV4.roa
Signing time: Wed 15 May 2024 03:24:34 +0000
ROA not before: Wed 15 May 2024 03:24:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22379 (0x576b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 03:24:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8B2C6F284341533D01672288F756CE31F702295E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:56:14:e8:3c:6c:c9:37:01:60:fc:42:de:
59:51:c5:00:14:39:ca:40:f3:96:f0:7c:42:53:6e:
87:33:4f:ef:ac:16:a2:79:6e:6f:ef:6e:87:79:84:
c4:98:f9:34:9f:a5:ea:ee:20:1e:af:60:cc:26:87:
5d:66:65:1e:0d:4c:1c:fb:71:d1:36:c3:48:9e:42:
ba:01:b0:95:e0:f2:84:45:b6:ea:a5:f2:69:46:fa:
3c:aa:62:f6:e7:9e:0e:bc:c8:ea:c0:63:7c:75:c4:
7c:98:31:56:fa:ce:16:14:27:6f:7a:a2:d0:44:6e:
2a:d9:89:c6:cd:a5:f9:1b:58:cf:ae:31:c2:39:52:
67:12:41:e3:7d:88:77:29:90:19:a3:5e:d1:68:c2:
ea:1d:3d:c1:5a:6b:d0:29:b9:66:68:50:60:f4:d1:
82:4c:55:b8:30:e1:11:52:9c:20:2f:f4:68:33:55:
2c:eb:b4:54:2d:fc:81:b5:d9:03:9f:94:f0:a2:48:
c6:69:18:b3:8b:c9:22:f7:c1:cb:f2:df:6e:bc:d5:
46:9b:a6:24:ab:d9:21:7d:01:dc:8f:55:25:33:97:
0d:db:3e:5a:4c:56:e4:0b:82:65:d0:7a:b8:01:55:
d1:71:28:5c:7c:26:43:41:91:6c:ed:1e:5c:7c:64:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:6F:28:43:41:53:3D:01:67:22:88:F7:56:CE:31:F7:02:29:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iyxvKENBUz0BZyKI91bOMfcCKV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0c:69:f8:57:10:ed:62:cc:9a:c6:18:1e:db:eb:f3:6b:f6:cd:
ba:77:5b:86:0f:fa:58:01:fa:4a:19:8d:30:30:c3:4d:1b:b1:
5c:54:c1:62:31:c1:5c:6e:62:a2:90:97:1c:31:71:53:d1:20:
79:74:3d:40:39:43:bf:4d:86:69:e6:97:f2:2c:5c:3a:da:08:
3e:69:39:cb:de:94:ac:bf:99:71:68:6b:12:21:2f:1b:d5:48:
cb:34:8c:aa:45:bc:c9:f9:27:87:ac:e7:a2:0f:f0:a1:41:45:
bd:4a:20:b0:1e:49:49:76:7c:6f:92:1d:6e:4c:1e:60:b4:f8:
49:1a:ff:b1:02:a5:da:8c:ab:03:d1:2d:c3:31:c3:29:8b:3d:
a7:05:ab:32:86:30:4a:6c:3b:dd:0d:5a:42:28:0f:b2:ce:1d:
ce:c7:b5:94:aa:50:d5:5c:e0:63:ca:1b:01:bc:ca:de:fb:98:
70:9f:3c:dc:e6:cb:35:2d:9a:7a:52:57:2d:9c:37:2b:aa:a3:
08:18:66:6e:bd:ea:5d:33:75:3d:a4:a1:46:89:b9:e4:5b:9a:
5e:90:31:d7:26:4b:c8:e8:e5:6c:ab:cc:31:5a:1d:4b:c1:b9:
4c:be:c8:17:a9:22:74:d6:42:38:df:48:99:68:c5:17:6a:91:
ff:86:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org