Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jkC5hlp8AD19wQwOmBFctNqy_i0.roa
File: jkC5hlp8AD19wQwOmBFctNqy_i0.roa (raw, json)
Hash identifier: PR4uMfTwjDbwb84P1alP+rC+yRMx60u7fs/F2fuG9bw=
Subject key identifier: 8E:40:B9:86:5A:7C:00:3D:7D:C1:0C:0E:98:11:5C:B4:DA:B2:FE:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 544B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jkC5hlp8AD19wQwOmBFctNqy_i0.roa
Signing time: Fri 10 May 2024 23:24:04 +0000
ROA not before: Fri 10 May 2024 23:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21579 (0x544b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 23:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E40B9865A7C003D7DC10C0E98115CB4DAB2FE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:65:f0:65:fb:c7:d7:3b:82:b0:cf:da:5a:
26:fb:62:28:30:24:60:b7:97:06:6f:b0:a7:59:60:
e5:ae:9d:5b:47:a0:da:37:ae:f6:d4:d5:92:17:93:
88:d2:ba:8e:a4:c7:6a:c0:c5:1d:2a:1f:e3:36:e1:
29:ef:09:77:87:0e:a4:3c:eb:2a:d5:65:f1:00:21:
c1:55:ea:f2:54:3a:26:4e:7b:12:99:96:70:0f:09:
15:e5:44:83:23:bc:13:47:0d:72:d6:ec:dd:2f:de:
d4:5b:df:8f:27:b1:54:c2:a8:5a:9a:7d:1e:85:ec:
b2:bf:9b:d0:8a:a4:7c:2c:54:c4:4a:26:ba:2b:d9:
19:2e:66:61:f1:dc:32:e6:79:34:28:88:79:c7:52:
19:59:ed:4c:46:27:e0:8d:60:c1:f1:9d:69:c6:3b:
57:6d:f4:62:5f:c6:8d:30:93:47:0b:38:a8:6a:16:
18:58:e1:95:c6:27:8a:8f:a7:fb:00:6e:fc:ae:e8:
61:bb:a1:43:7d:5d:3b:d4:e5:3e:74:ef:78:b6:2b:
04:69:cf:90:df:f6:43:45:f0:2d:f6:d9:56:a8:72:
82:52:05:90:8a:fb:31:ff:54:35:4e:f5:a5:df:21:
f5:0b:eb:cc:2e:5d:44:62:33:74:7a:94:e8:09:10:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:B9:86:5A:7C:00:3D:7D:C1:0C:0E:98:11:5C:B4:DA:B2:FE:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jkC5hlp8AD19wQwOmBFctNqy_i0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:66:d5:3e:cd:2d:db:ba:97:a0:ba:f0:93:60:e3:4d:d3:ba:
44:8a:e6:64:d4:2c:2b:dc:75:38:93:f4:9c:ad:69:92:29:02:
7e:55:3c:11:74:db:df:70:b3:17:0f:79:63:f3:60:23:bb:71:
ef:58:26:1d:fd:8c:55:07:4f:d6:1b:30:99:ef:27:1c:8f:a9:
ae:cd:e1:41:74:ea:b2:d6:a8:05:c6:72:a7:32:3e:23:78:b4:
f6:4a:7e:59:bb:a3:ec:e1:30:7a:21:58:58:aa:b7:ae:7c:79:
f9:56:34:82:e2:60:cf:ad:02:ac:f4:d1:e9:d0:ed:8a:6a:cb:
d3:82:ce:50:09:b2:57:f2:9a:6a:9c:ed:1e:7b:79:2b:e3:06:
70:0e:1c:02:b0:92:53:f5:f4:ac:57:07:63:b6:0c:99:d5:30:
1d:20:c5:2e:45:bc:77:db:9a:d8:ef:ee:38:7e:0f:d9:38:19:
d0:ab:03:37:31:52:64:b9:04:e7:19:41:56:a9:95:69:a0:a9:
b1:6e:e1:2d:6c:c4:80:b8:75:29:df:ad:da:7b:a0:b4:fe:2f:
3c:28:bb:82:10:86:39:12:bf:b0:42:45:db:d0:f5:69:54:08:
88:14:a9:09:40:67:59:c5:7e:af:f7:81:89:e1:a5:fc:cc:aa:
d7:ff:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org