Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kR3oNZAi74K5sA0lg3Rj7v6_d4M.roa
File: kR3oNZAi74K5sA0lg3Rj7v6_d4M.roa (raw, json)
Hash identifier: MKbq2fbJ/Q9sATSiILLFACAZ3DxrPM4UksdKJ8lmoMs=
Subject key identifier: 91:1D:E8:35:90:22:EF:82:B9:B0:0D:25:83:74:63:EE:FE:BF:77:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3713
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kR3oNZAi74K5sA0lg3Rj7v6_d4M.roa
Signing time: Tue 02 Apr 2024 00:22:13 +0000
ROA not before: Tue 02 Apr 2024 00:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14099 (0x3713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 00:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=911DE8359022EF82B9B00D25837463EEFEBF7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:73:ee:49:4a:c2:01:a5:71:f1:03:d1:08:
f9:e0:25:7e:5a:e5:50:9d:d1:e3:27:4c:9a:f5:74:
46:65:75:3f:c3:b5:9e:aa:af:e2:a8:bb:2b:32:06:
e0:4a:f1:28:c3:0d:64:25:e0:47:fe:6c:be:8d:b8:
0a:aa:86:34:f9:37:e8:d3:dd:4f:2b:3d:83:27:ba:
bf:ac:85:31:5c:66:21:8e:d3:68:5c:bf:52:d3:56:
bf:04:16:1a:23:ba:36:69:d4:05:9e:b8:9c:42:12:
d3:22:53:d3:c3:bd:69:a3:8c:5a:ea:bd:81:e8:2a:
98:6a:9c:e8:62:92:5b:43:83:a9:2f:18:fd:90:db:
c6:ad:46:c6:64:f3:93:05:4f:88:2a:81:17:4c:85:
62:8b:ed:a2:ef:00:c0:3f:05:4e:96:92:8f:a3:d1:
ea:6e:60:5e:b3:50:eb:4d:94:1a:15:d3:f4:1b:bf:
41:9c:0c:88:b8:99:85:b0:59:b9:7c:f6:dd:13:27:
94:58:f2:ba:52:91:29:6c:d2:40:49:22:95:cf:a0:
6d:97:cf:d7:e5:df:51:53:45:50:f4:d7:77:01:51:
1f:cf:a5:96:0d:c3:42:25:db:04:2b:d0:86:ea:7d:
bf:dd:1f:ed:58:22:43:88:af:98:d2:5c:67:ce:c0:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:E8:35:90:22:EF:82:B9:B0:0D:25:83:74:63:EE:FE:BF:77:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kR3oNZAi74K5sA0lg3Rj7v6_d4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8d:b8:21:ad:0e:f6:95:1d:0d:d1:b4:b4:47:86:0d:d1:45:3e:
48:b8:19:d9:d6:24:34:b4:13:88:d1:c8:64:2b:d7:0c:45:40:
b2:47:b2:81:30:94:de:e7:d5:04:b7:3b:f3:24:45:3a:93:58:
db:9c:27:ba:40:90:86:a0:ed:41:a8:0c:57:dc:46:18:b5:e4:
ba:57:16:90:a3:ee:73:cb:ef:22:bf:71:b7:c8:b7:6c:01:7c:
b9:7e:78:aa:83:21:b8:7d:f2:c8:47:71:ce:aa:73:94:8e:a7:
ef:4c:93:0b:8e:49:54:46:ff:d0:f8:cf:1e:43:d3:b5:be:cd:
ad:82:77:8f:49:4f:1b:e1:31:67:ef:41:b0:84:4e:57:4d:7a:
e8:b0:46:33:ee:fe:b4:13:31:12:1d:ce:78:7f:63:ca:10:3d:
ea:d6:8f:07:f7:75:f5:95:96:66:e8:33:ca:17:da:1c:f4:43:
0b:2a:33:f7:07:1f:67:b8:96:81:ab:f3:f4:d1:30:c9:cd:e8:
8e:9d:32:49:23:df:32:c3:18:f5:0e:29:79:c8:cb:c7:bd:dd:
fa:9c:ea:4c:b1:90:c9:a9:90:e3:b1:d0:a7:91:29:5f:02:26:
70:68:82:eb:41:d9:23:b0:c0:e2:42:a8:b0:53:f8:15:d3:d8:
22:3d:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:05 2024 by rpki-client on console-ams.rpki-client.org