Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jbl54g78HQ8a8mIccczD-JrGtrs.roa
File: jbl54g78HQ8a8mIccczD-JrGtrs.roa (raw, json)
Hash identifier: 7YHx7eXWj2Z2Hli9w47RI4ZvJyVz9HxR7sjB2/KTPzk=
Subject key identifier: 8D:B9:79:E2:0E:FC:1D:0F:1A:F2:62:1C:71:CC:C3:F8:9A:C6:B6:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jbl54g78HQ8a8mIccczD-JrGtrs.roa
Signing time: Sat 13 Apr 2024 11:22:49 +0000
ROA not before: Sat 13 Apr 2024 11:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16299 (0x3fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 11:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8DB979E20EFC1D0F1AF2621C71CCC3F89AC6B6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:80:0a:fb:2b:86:91:2f:8b:4a:7c:b2:44:
1b:ea:fb:a4:bb:b7:6d:57:db:1e:42:11:af:69:40:
f2:90:02:92:f7:37:02:80:e5:f4:99:fe:62:b8:a9:
0a:52:d0:d0:a1:54:ed:12:c5:49:96:a7:50:28:d8:
c6:94:46:bd:59:47:6e:eb:07:57:9f:05:3b:cd:a0:
d2:35:b3:aa:03:a5:cc:1a:72:1b:55:d5:e4:dc:14:
f7:dc:13:92:4e:39:d0:fd:63:a4:93:85:51:4e:98:
0f:b1:bc:61:f0:2a:d8:d9:af:d8:f2:e4:26:12:e2:
9a:60:b1:63:86:60:84:59:3d:33:d4:72:e1:b9:e9:
cd:b4:60:b1:0a:ee:1b:61:91:c4:19:2b:71:ac:8c:
b3:71:db:37:fe:5f:4f:a0:e9:cf:ec:2d:ae:4e:43:
00:15:df:63:6f:fe:15:9d:fb:73:08:13:a9:0a:92:
36:26:38:64:b5:48:65:86:4a:4c:b5:d1:4d:da:05:
32:c9:a6:7f:11:d3:e0:fa:d7:13:67:c0:fe:bf:d1:
ec:06:ed:e5:0c:e9:35:04:b7:c5:10:fc:32:31:df:
90:ff:66:60:81:98:67:f9:f6:80:be:65:34:f6:0a:
cc:b9:9d:34:0b:58:d6:57:5d:d7:93:f6:e6:0b:af:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:79:E2:0E:FC:1D:0F:1A:F2:62:1C:71:CC:C3:F8:9A:C6:B6:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jbl54g78HQ8a8mIccczD-JrGtrs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:48:67:3b:ba:f7:2e:9b:a3:c8:d6:79:33:93:27:c5:8e:62:
89:b1:43:5b:a6:e0:0c:02:63:67:dd:e6:e7:d8:61:a0:43:88:
84:a5:97:35:b9:6b:ba:6b:10:de:3c:77:1c:ba:8e:ba:68:43:
52:b8:98:53:63:3b:38:99:77:42:6c:b1:7e:30:7f:92:22:99:
5c:07:43:09:60:e6:5a:27:4c:32:b8:6b:62:66:09:6d:86:71:
00:5a:88:16:db:e9:1f:46:a5:41:fe:0f:04:eb:db:1a:8b:54:
da:d9:85:8f:8b:6e:06:9d:7c:95:36:7d:db:e1:58:45:b3:c1:
00:0b:0f:14:27:b6:be:13:4e:62:c8:61:b3:7c:e9:bd:09:f7:
86:94:69:c3:3f:f5:cb:67:8f:5c:77:a8:36:57:99:9b:fd:5d:
f0:41:be:ae:2b:4f:45:a0:5a:7e:cc:5f:3d:5c:47:ce:d5:14:
91:01:91:ab:3f:d5:b4:8b:cd:22:f2:61:c3:4a:cf:50:2a:b8:
ba:ce:fc:ca:4d:7e:d4:05:3d:76:f8:d9:64:f9:3a:53:67:2c:
36:7f:9c:82:6b:dc:10:ea:30:17:41:33:b3:44:8f:a6:17:0f:
90:e9:b7:28:49:fd:90:e5:38:94:f5:65:2b:8b:23:01:ac:e9:
2a:de:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:04 2024 by rpki-client on console-ams.rpki-client.org