Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j1bUysxivOofrDHoy-oxm0nhEmo.roa
File: j1bUysxivOofrDHoy-oxm0nhEmo.roa (raw, json)
Hash identifier: RAI9l/btJFiAluZQIdj+xdmxEirxXfIdIZ8gkSi/KBo=
Subject key identifier: 8F:56:D4:CA:CC:62:BC:EA:1F:AC:31:E8:CB:EA:31:9B:49:E1:12:6A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F4F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j1bUysxivOofrDHoy-oxm0nhEmo.roa
Signing time: Fri 12 Apr 2024 23:52:51 +0000
ROA not before: Fri 12 Apr 2024 23:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16207 (0x3f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 23:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F56D4CACC62BCEA1FAC31E8CBEA319B49E1126A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:68:9e:3c:d8:2d:20:3b:e4:2c:7d:07:9b:d2:
23:f9:ce:5a:db:be:16:bb:4b:c5:62:dc:ae:d7:ff:
c6:9c:36:b7:15:3f:db:70:05:ed:b5:80:5e:16:2d:
de:46:25:24:de:61:d3:2d:b1:3a:db:59:03:95:36:
ee:b7:95:bf:bc:58:5d:87:01:42:38:33:f7:6a:1c:
fb:fe:57:e9:ac:77:6a:8b:a9:63:59:59:5c:a1:00:
c8:0c:6d:fe:20:3e:42:8a:f3:74:c8:32:a7:a1:a4:
6f:bb:4c:10:c7:00:e2:c1:6b:7e:15:66:df:c1:4e:
2f:50:5d:ed:1e:72:df:1b:f8:d1:70:2f:4c:9e:62:
1a:d4:39:df:80:ad:3c:6a:69:28:4a:68:39:e1:64:
82:5d:11:60:aa:d3:ce:a9:3b:e5:60:8c:7b:ca:22:
e8:0d:90:3d:fb:32:2f:37:6c:74:46:58:a2:9e:2a:
e1:45:91:69:67:b3:c7:3a:52:3f:06:97:b7:9e:79:
96:59:9e:81:77:62:1c:b7:c6:6e:b2:ba:ef:03:17:
ed:86:c2:62:ef:ac:d2:4e:2d:55:25:b3:05:1d:98:
83:5e:e8:e9:33:20:ca:9f:52:25:dc:b6:d5:2e:c3:
d8:52:5c:6e:c0:c5:b6:87:5b:b0:f5:06:d3:7d:e4:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:D4:CA:CC:62:BC:EA:1F:AC:31:E8:CB:EA:31:9B:49:E1:12:6A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j1bUysxivOofrDHoy-oxm0nhEmo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:c7:27:2a:49:b6:12:ff:ea:63:db:8a:b2:d9:95:9a:58:40:
b0:30:af:81:2e:14:50:4e:c9:b8:91:9f:18:89:60:6d:96:32:
f5:4a:4b:fc:78:04:61:93:5f:9c:d7:d7:2f:ea:44:1f:9b:12:
f0:58:a1:e4:3d:f9:cf:84:6d:77:c0:ff:87:29:2a:17:e2:00:
ec:14:d7:ec:5c:9d:55:e9:fa:76:0e:eb:02:8c:a5:25:b0:52:
d1:50:a6:b6:87:73:9a:e2:a8:ca:42:23:9d:b3:c8:a0:77:a1:
a2:fe:bf:62:40:bc:2f:ab:7f:04:3b:81:c7:64:24:0e:a0:aa:
17:de:12:11:ab:71:f0:fe:9f:75:01:a8:05:94:ca:7e:35:71:
e7:28:7c:05:7e:7c:af:67:cc:9b:65:0e:2a:61:4c:49:95:00:
6b:0e:e0:a4:f2:30:97:85:1b:13:22:cf:ca:e8:9b:84:d8:95:
a3:d5:dc:9a:d8:87:64:f3:08:0c:88:09:eb:6a:f3:44:96:89:
cb:4f:bf:8d:4e:a5:17:49:39:79:ac:96:a6:46:a9:dd:df:a7:
85:cf:3e:50:ba:27:b3:d7:43:c9:21:91:ee:15:fb:76:50:61:
ca:0b:e0:f8:75:2f:a7:de:a3:2b:c8:47:7a:b8:81:a0:e2:13:
f9:ef:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org