Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jOId5l1mIyrrRL6AitosfqixNEI.roa
File: jOId5l1mIyrrRL6AitosfqixNEI.roa (raw, json)
Hash identifier: 8CVrsKdoqABhdV9CQjf6hJh+tUwJlRkGqAAp2US0QZw=
Subject key identifier: 8C:E2:1D:E6:5D:66:23:2A:EB:44:BE:80:8A:DA:2C:7E:A8:B1:34:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ABF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jOId5l1mIyrrRL6AitosfqixNEI.roa
Signing time: Sat 06 Apr 2024 21:52:33 +0000
ROA not before: Sat 06 Apr 2024 21:52:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15039 (0x3abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 21:52:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8CE21DE65D66232AEB44BE808ADA2C7EA8B13442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:50:2a:ef:67:9e:f2:b8:f2:8b:ee:c9:78:
00:ba:58:3e:ec:69:65:e1:b4:f9:14:fa:bf:3f:1b:
05:13:77:28:3f:64:2b:f8:5b:61:aa:d5:43:f4:aa:
a0:dd:eb:79:03:34:96:bd:01:a1:0b:8d:0f:f5:95:
71:4c:3a:48:8f:d3:c7:fc:4b:f7:38:d1:74:f2:94:
e3:1a:f1:03:56:74:29:79:c0:5a:f9:93:61:a2:bb:
ad:53:db:09:7f:95:a7:78:ab:ef:97:4c:09:b0:a1:
06:0f:c5:74:4a:64:f3:cc:94:0d:41:af:7b:85:c7:
37:48:f4:37:52:3e:b5:3b:2f:74:16:21:f6:1c:0e:
ee:7c:fb:fa:7e:dc:b2:30:67:30:2f:25:e4:62:5d:
6f:43:2e:87:b5:73:12:4e:bd:d1:2b:d5:c4:1b:43:
98:f2:5f:d7:e1:8d:05:62:aa:70:ed:c1:dc:b0:a5:
b5:ee:2a:2b:46:d4:f4:a3:c7:f9:4d:b0:c6:22:13:
8c:10:e1:54:74:ca:ea:14:57:ac:d2:22:d0:ee:18:
6e:81:d1:f3:72:e6:a7:63:f6:b7:49:2e:8f:ff:fc:
a2:de:f5:97:14:c3:58:c6:03:85:5b:f8:1e:8a:ce:
37:bd:d4:d2:5f:20:f2:5d:2e:d4:bc:98:e6:75:a4:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:1D:E6:5D:66:23:2A:EB:44:BE:80:8A:DA:2C:7E:A8:B1:34:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jOId5l1mIyrrRL6AitosfqixNEI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:6c:1f:8c:54:0d:fc:83:af:6d:4a:aa:41:74:73:39:4e:4e:
7d:d8:9c:16:43:e7:29:71:49:ff:d5:db:f7:d0:d3:ed:5d:9e:
d8:b1:84:6a:7e:01:cc:5b:1d:a0:f5:0f:4a:13:f7:73:99:75:
11:d3:08:d3:27:e1:95:14:aa:45:6c:d2:28:57:2e:cb:64:1d:
d2:45:3d:c8:0c:27:29:41:c5:93:b2:da:cc:21:03:e4:95:3d:
24:3b:77:95:3a:21:da:0d:9a:d7:3e:7a:30:27:a7:b3:1f:b9:
28:de:18:21:e9:c6:f8:ab:23:fc:ed:a0:64:67:2d:2e:9b:8c:
6f:5d:c3:80:ae:83:49:07:b4:ee:0e:09:40:06:87:ee:b0:0f:
cf:a0:5a:60:86:1f:cc:01:de:38:ce:4f:f1:e7:2e:d3:b1:93:
86:84:41:75:27:c6:d7:74:92:41:fb:16:78:98:38:28:96:9d:
45:05:0b:7c:3d:33:50:2a:be:75:57:c5:61:fa:ec:3d:a7:69:
89:6b:52:44:34:f5:ec:63:28:f8:6f:b3:63:3f:bd:22:02:4e:
12:70:54:72:02:f4:e4:f9:44:64:f9:09:82:ec:31:53:1a:f4:
b3:87:d6:64:89:2e:23:46:71:d9:dc:0c:d3:86:67:58:72:5a:
ab:1e:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org