Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jqTzAe66P1sBD3zhi4zUbVwrccE.roa
File: jqTzAe66P1sBD3zhi4zUbVwrccE.roa (raw, json)
Hash identifier: pbO4g/82tpNp5fDom/9quWY5VPYA0ZDahNj35nUUQrs=
Subject key identifier: 8E:A4:F3:01:EE:BA:3F:5B:01:0F:7C:E1:8B:8C:D4:6D:5C:2B:71:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jqTzAe66P1sBD3zhi4zUbVwrccE.roa
Signing time: Sat 20 Apr 2024 08:53:06 +0000
ROA not before: Sat 20 Apr 2024 08:53:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17623 (0x44d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 08:53:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8EA4F301EEBA3F5B010F7CE18B8CD46D5C2B71C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:11:34:32:59:16:33:38:13:c3:33:64:6a:
aa:b5:3d:87:05:ff:58:ff:97:ba:01:da:aa:f1:c2:
05:b4:be:ec:ef:0e:b8:25:23:9d:e8:0a:d4:81:e6:
4b:3e:53:ba:62:de:04:ab:e9:78:dc:5a:47:e3:17:
0d:eb:c3:04:4e:ab:6e:bb:93:7f:07:12:91:be:f7:
23:fd:42:92:ab:ac:5c:a2:d2:a7:a1:a8:5d:58:2f:
99:e9:16:a1:c8:0c:c0:a3:93:fc:6b:bf:f4:4d:2a:
33:6f:78:58:f1:eb:57:be:ad:97:5c:e6:ef:78:57:
4a:09:05:79:31:73:1c:52:41:d3:89:66:c6:c7:b3:
05:d7:bd:0e:e0:a7:b6:2f:14:31:dc:33:6a:dd:43:
2a:0b:12:41:56:36:68:cc:d1:58:c3:97:6c:1b:e4:
dc:8a:1f:b5:d0:73:f8:d3:80:ce:a3:da:87:f1:49:
90:a2:80:6b:29:97:ce:1c:50:de:b8:12:46:d3:3d:
81:94:8e:52:95:92:18:65:90:19:c8:a8:82:9f:8c:
a7:37:a4:1e:19:ec:2e:0c:83:7a:c9:b2:b5:1e:17:
a1:98:2a:5a:2b:9f:ed:36:cd:43:91:6f:b6:b2:0f:
b7:5b:8d:e7:3c:39:1f:7f:42:3e:4f:84:3c:84:2b:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A4:F3:01:EE:BA:3F:5B:01:0F:7C:E1:8B:8C:D4:6D:5C:2B:71:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jqTzAe66P1sBD3zhi4zUbVwrccE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:47:c1:4f:10:ed:08:e2:f7:e1:24:b4:b3:e4:77:64:1d:88:
22:e3:74:70:44:3d:9f:6d:53:2c:e5:38:b4:de:5b:1d:24:e5:
d1:22:0e:f9:ac:e5:a4:fa:8d:ea:28:83:cb:59:db:b5:a3:4b:
f4:8e:d9:99:42:d9:37:48:b1:d0:96:2a:54:9a:04:d6:cb:ce:
f4:98:0f:34:c9:5a:77:7d:1f:e0:a3:94:d5:42:90:01:00:78:
11:b0:87:8a:da:b8:4c:2b:e7:7a:0e:50:10:15:3e:8c:f4:30:
c1:2a:1d:25:75:c1:89:ec:55:63:65:c9:7c:55:a7:1a:c8:2c:
fc:96:e8:a9:cf:91:d1:0d:b9:c5:6d:2b:22:e1:ba:60:4f:0e:
37:a9:4d:00:b5:50:ee:48:cb:c3:20:a5:5a:7a:0c:a9:ca:73:
be:91:a1:e5:ec:fb:be:05:27:2d:64:67:7d:e6:a4:aa:c7:4a:
a7:3f:6a:31:52:fe:2e:2a:f5:f9:d5:a5:bd:04:85:f1:75:c7:
79:f1:26:70:94:ee:62:ba:fa:11:9f:40:af:e6:2c:0d:0b:97:
a7:35:42:f4:53:16:40:70:a5:52:99:20:06:74:39:09:36:ce:
cc:12:ee:46:76:fd:f8:58:09:cb:e3:66:9d:98:55:43:15:a2:
1e:b2:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:42 2024 by rpki-client on console-fra.rpki-client.org