Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j5N4N08kK8ToQo0L-xW--Pm70pI.roa
File: j5N4N08kK8ToQo0L-xW--Pm70pI.roa (raw, json)
Hash identifier: lxHXdOQ6iz7n7rcjZAdHPw2+ipxRP20lY5gKWaLCJGw=
Subject key identifier: 8F:93:78:37:4F:24:2B:C4:E8:42:8D:0B:FB:15:BE:F8:F9:BB:D2:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4347
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j5N4N08kK8ToQo0L-xW--Pm70pI.roa
Signing time: Thu 18 Apr 2024 06:53:07 +0000
ROA not before: Thu 18 Apr 2024 06:53:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17223 (0x4347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 06:53:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F9378374F242BC4E8428D0BFB15BEF8F9BBD292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:00:8d:cf:bf:76:cb:f4:13:af:c2:e0:fb:
92:42:2d:cb:2e:1f:a3:b2:07:9c:3c:25:bc:57:a3:
fb:4b:1c:ee:79:bd:fd:18:46:95:c6:2e:5d:45:0b:
cf:63:85:a7:7d:96:6a:29:78:29:27:40:cb:66:6a:
6d:5b:8f:dc:43:5a:55:9c:f2:3d:af:64:ef:3a:63:
0e:4b:ff:c1:8b:0b:f3:81:4e:54:d5:81:a7:1d:b4:
d3:4e:b1:ed:12:c2:2f:00:18:e8:7e:ad:47:b8:72:
59:a2:a9:97:bc:1f:27:d5:f1:60:64:6a:45:4e:f6:
52:1e:30:71:bf:e1:1a:65:c2:fc:ca:25:94:64:80:
62:5a:5b:85:e8:7c:3c:81:db:e0:4e:e4:6d:0b:77:
5d:dc:d9:d7:ca:ea:85:df:6a:11:34:78:f5:95:85:
56:78:1c:01:7c:53:fc:76:ae:7c:b5:95:f7:4e:f8:
48:0c:c6:82:88:68:8e:f8:3d:53:4e:40:2f:7c:28:
b3:8d:68:a3:db:41:4e:97:9d:55:9c:b7:41:be:45:
f9:0f:4e:80:8f:d4:7a:5b:3c:7a:e3:7b:b1:e2:d5:
4b:37:e5:7f:65:9a:a3:b1:f0:6e:c8:02:3f:31:28:
1d:52:d4:ac:7b:d0:64:b5:81:33:e3:5e:bb:d9:e1:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:93:78:37:4F:24:2B:C4:E8:42:8D:0B:FB:15:BE:F8:F9:BB:D2:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j5N4N08kK8ToQo0L-xW--Pm70pI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
76:ec:2d:cb:b4:dd:4c:9f:03:47:dd:9d:8c:c2:c7:e7:67:de:
19:b6:d4:d3:9a:35:53:fe:19:96:1e:e7:90:23:9e:02:1e:52:
6a:e2:70:70:82:3a:45:30:a6:9b:9f:e9:3b:f5:0f:27:d4:87:
9e:06:20:5f:30:42:46:fb:fa:a0:26:fe:78:cc:6c:bd:bd:5b:
55:d4:40:81:a8:f3:5c:1e:7b:bf:b3:6a:42:0c:01:62:48:19:
17:35:c1:54:42:f9:86:3a:c1:60:6c:a2:0b:7a:7c:cd:45:20:
99:6a:81:c1:4c:1f:8e:bb:9b:e3:fd:53:d8:bd:3e:8b:d2:17:
5f:e5:4b:b8:b3:92:d5:98:90:68:84:54:b5:ba:b4:c4:e8:40:
36:f0:44:00:d8:07:eb:ce:5c:b0:a1:fa:bf:1e:9e:6c:1e:a4:
c4:c0:e7:a8:b6:3e:16:46:0d:9f:c0:e9:a3:3f:e7:38:2f:98:
9b:fc:37:e5:23:74:49:4c:59:ab:b4:da:7e:3e:0d:c6:fb:ae:
99:09:8b:7d:a6:29:48:45:ba:f3:7a:e8:f0:35:e4:2d:9f:c2:
61:0b:0f:b1:82:c3:7d:d6:cc:94:f2:32:e2:57:76:37:15:9f:
cb:6c:7b:86:f6:ff:3c:73:e9:4c:d6:36:85:8f:8a:2a:35:e3:
64:ae:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org