Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jYr5kDGtBeVm-leBKTrOI9ktWXU.roa
File: jYr5kDGtBeVm-leBKTrOI9ktWXU.roa (raw, json)
Hash identifier: TfM0GdwuSEuAP4GZShjuiQtBOPb+i0aCeL4GFVUdOEI=
Subject key identifier: 8D:8A:F9:90:31:AD:05:E5:66:FA:57:81:29:3A:CE:23:D9:2D:59:75
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5583
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jYr5kDGtBeVm-leBKTrOI9ktWXU.roa
Signing time: Sun 12 May 2024 14:24:05 +0000
ROA not before: Sun 12 May 2024 14:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21891 (0x5583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 14:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8D8AF99031AD05E566FA5781293ACE23D92D5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:17:87:05:e5:7c:4e:ce:70:3c:4c:63:90:
94:97:21:7f:2b:ce:86:e0:c6:44:c8:49:ac:d2:c7:
ab:95:c8:66:21:f9:11:0d:73:49:91:55:7c:82:9f:
ce:f3:43:0d:45:39:d1:f5:17:b1:06:cf:03:e5:79:
11:07:9f:c0:f5:72:fa:6c:7b:c9:f7:b9:d8:91:c2:
05:55:60:34:5c:83:91:ce:65:72:c7:7a:6f:0b:31:
85:b5:0b:56:cf:8a:1a:08:52:71:5f:06:74:af:cf:
56:23:8d:98:b9:99:0d:41:3c:c0:9f:bb:d1:e4:02:
6f:45:3d:21:14:38:84:ed:87:77:84:d5:12:fc:1a:
cd:6c:f3:a4:6f:6a:b1:0e:de:28:91:01:4f:67:c6:
20:96:8c:34:75:88:c0:72:39:9a:79:af:76:71:54:
6e:03:f8:c4:9e:cb:50:a3:0f:85:6f:c3:5f:dd:66:
35:71:bc:91:16:da:dd:c5:a6:b3:6a:9f:5b:52:51:
55:4a:41:f4:0b:7e:13:68:67:9b:43:39:8d:f2:2f:
3e:7c:de:e4:5a:78:20:37:6c:f9:9c:0e:1c:23:5e:
cb:7b:27:84:51:b6:18:f4:00:75:e6:ec:5b:cb:3b:
64:ae:f2:a0:c3:e2:37:56:88:7f:ca:bf:5d:a7:f6:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8A:F9:90:31:AD:05:E5:66:FA:57:81:29:3A:CE:23:D9:2D:59:75
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jYr5kDGtBeVm-leBKTrOI9ktWXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:59:d2:46:0d:a9:53:8e:92:33:ff:5f:83:74:47:b7:13:0a:
41:18:cd:f8:e1:5b:68:6d:3b:cf:4c:a3:16:b6:c8:61:56:89:
f7:3e:b8:8a:f6:13:90:64:ce:0e:9f:4f:72:67:b8:81:eb:d0:
23:4a:02:66:bb:57:16:9d:04:d1:e9:75:d0:dd:c9:a4:ef:5a:
0e:53:68:e0:66:73:eb:5d:35:94:70:47:52:90:3b:c0:46:b8:
6a:03:8e:b0:28:37:26:a1:11:17:98:2b:6e:d2:91:00:88:dc:
14:1c:91:6d:b1:4b:8d:94:76:20:8f:1f:ce:1e:ac:78:10:ef:
f7:a0:da:40:1b:9d:90:c5:2c:08:3a:84:af:2a:22:62:61:45:
04:6d:86:95:bf:16:c0:86:ff:01:fc:cf:a2:68:db:be:9b:c2:
28:47:ae:60:59:8a:58:28:15:02:f8:1b:d7:7f:e6:93:5f:2e:
c4:62:ed:c0:7e:72:b8:bb:45:1b:b3:fd:00:3f:b6:b2:bf:0d:
f6:9f:76:c1:4a:30:7b:51:5a:33:8d:7c:1c:40:45:56:da:89:
5f:71:6d:62:ed:d2:82:a0:8a:58:4a:c8:ef:03:e1:9f:a1:a2:
e4:58:05:40:9f:bc:d1:dc:a0:f8:7f:b7:2b:58:6b:9a:ed:74:
ba:49:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org