Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l-7I8kO0b93FmZzloAUsLbvH7Iw.roa
File: l-7I8kO0b93FmZzloAUsLbvH7Iw.roa (raw, json)
Hash identifier: bhHzX59fYBo1lXlsQcHJ48f3J0OoFNJ0/4M0iZ/l1Eg=
Subject key identifier: 97:EE:C8:F2:43:B4:6F:DD:C5:99:9C:E5:A0:05:2C:2D:BB:C7:EC:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l-7I8kO0b93FmZzloAUsLbvH7Iw.roa
Signing time: Wed 08 May 2024 23:53:56 +0000
ROA not before: Wed 08 May 2024 23:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21199 (0x52cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 23:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97EEC8F243B46FDDC5999CE5A0052C2DBBC7EC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:32:59:3e:61:25:3c:e3:70:40:8b:e1:2a:
d5:bc:85:a1:ec:b7:ed:e7:35:4e:a4:df:24:18:e0:
a1:c4:8a:14:c5:16:ef:81:be:1b:b3:72:d2:5d:4d:
05:5d:ed:0a:9e:76:80:3a:ea:39:a2:e5:07:13:6f:
56:a6:fd:6d:09:1b:8b:1d:97:ce:36:dc:c1:8d:91:
67:2c:ad:9e:b7:87:ac:3a:57:b8:3d:66:91:37:8e:
13:c5:e6:03:ce:7f:2e:7e:c2:69:e8:f5:39:79:d8:
1a:67:9a:4b:d8:6f:cc:76:58:6d:ea:59:56:40:09:
1c:cc:d9:2c:7d:7e:2a:c4:c0:b1:1e:29:f0:f7:33:
12:a6:ce:34:30:27:c7:8a:1f:8e:83:32:e6:0b:22:
76:68:e8:cb:3a:ec:92:de:b1:62:dd:5d:ee:dd:58:
fe:4f:ae:f7:5e:55:02:31:35:3f:1d:6e:66:5e:87:
0e:bf:d8:2d:9f:b6:e8:32:0b:74:c6:2d:ce:84:f3:
2f:33:69:e4:0a:cb:4d:40:fb:6e:e7:7f:2e:ce:f2:
d4:cc:c7:af:47:14:d6:11:13:07:cd:fb:b7:3b:2c:
0d:de:bf:ab:ec:bf:a5:54:db:d1:3c:95:57:c4:fa:
c0:9c:48:f7:c0:83:6f:56:d8:1d:a6:6d:a1:f1:ec:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:C8:F2:43:B4:6F:DD:C5:99:9C:E5:A0:05:2C:2D:BB:C7:EC:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l-7I8kO0b93FmZzloAUsLbvH7Iw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:e6:e7:6c:eb:a8:7c:92:2c:8c:d5:18:fc:84:6f:69:3e:3c:
31:03:07:b0:5a:91:b7:99:21:d0:e8:ec:79:d6:69:90:7d:b3:
af:0c:96:03:7b:02:70:b5:ca:09:7b:17:20:c9:a7:0e:49:35:
a9:8f:85:a9:ba:0e:b7:00:33:9f:77:c6:d2:a4:a6:42:a2:92:
5d:02:7b:46:08:58:41:d1:fb:9d:e3:9c:66:2b:d7:1c:82:e6:
96:ca:01:26:50:a0:96:e3:83:62:8f:18:d8:a7:5e:43:e3:60:
06:5d:d8:52:ae:c5:e8:f2:76:92:fc:9c:08:37:f9:a5:8d:00:
c4:b1:bd:41:e2:be:03:2c:eb:1b:9b:43:b5:58:fa:ce:01:a8:
c7:5e:59:bc:5d:0f:57:5a:08:19:f2:16:9f:e7:7e:d7:d5:42:
9e:db:26:09:68:64:9e:ab:26:b0:26:49:54:d5:c5:bb:aa:35:
04:47:6d:50:7d:a4:8c:4c:0c:fc:da:fc:e0:63:0f:f2:20:fa:
06:02:fe:59:49:ca:07:c5:fe:56:c5:40:7b:41:3f:d8:56:da:
b9:40:ba:b5:10:e2:16:60:cd:6d:29:be:1e:be:81:eb:c8:46:
5f:0b:8b:24:25:71:bf:64:90:a8:a8:e0:eb:d9:33:b9:22:42:
52:70:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:43 2024 by rpki-client on console-fra.rpki-client.org