Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lkeAqNcGU5iCFfxEA-c_P2FkqGI.roa
File: lkeAqNcGU5iCFfxEA-c_P2FkqGI.roa (raw, json)
Hash identifier: Ujm9J7chn5JQyJwgBBFgb21W43rh1AQ8vdmKXdjiCHc=
Subject key identifier: 96:47:80:A8:D7:06:53:98:82:15:FC:44:03:E7:3F:3F:61:64:A8:62
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lkeAqNcGU5iCFfxEA-c_P2FkqGI.roa
Signing time: Thu 04 Apr 2024 02:22:21 +0000
ROA not before: Thu 04 Apr 2024 02:22:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14499 (0x38a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 02:22:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=964780A8D70653988215FC4403E73F3F6164A862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:98:94:d4:7f:2b:2f:0c:5a:15:ac:9c:50:
e5:0b:2c:73:19:3b:e9:7d:83:b6:db:f8:d7:b0:75:
82:c9:81:11:45:af:cf:b6:83:6f:59:63:4a:47:0d:
15:06:d6:23:4a:a2:11:1b:39:40:f1:1c:4f:a3:18:
47:e8:3b:88:c8:a4:52:d8:0c:e4:47:48:ab:08:8c:
e9:99:ef:cb:2e:ba:4c:c2:c8:15:d7:ef:fb:5d:4f:
bc:d1:3f:53:b2:ad:8d:2d:50:88:81:0d:29:e5:21:
9e:1e:e5:f0:03:e2:e7:13:cc:23:eb:15:c1:b2:3e:
c3:05:61:e7:09:19:b8:76:9e:34:45:b6:81:56:d6:
59:a7:27:31:23:7b:21:da:b4:88:0a:a1:c5:42:fc:
31:80:1c:64:48:89:0d:83:ed:3f:1e:03:a4:db:ae:
77:4d:5b:ee:58:72:0d:4f:59:0c:9e:27:64:a1:68:
56:84:4d:0a:73:60:da:8f:f8:3f:e4:f4:af:eb:87:
c9:7b:c1:ba:57:58:bf:35:a2:13:e1:ec:7e:42:bc:
c6:24:82:ff:ec:76:ce:84:ee:e0:bc:db:25:b6:81:
f2:e0:08:a8:90:64:71:17:78:ff:b5:76:ca:da:cb:
0a:a7:3e:3b:2d:de:ef:e7:c6:2e:02:d8:a8:0a:a6:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:80:A8:D7:06:53:98:82:15:FC:44:03:E7:3F:3F:61:64:A8:62
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lkeAqNcGU5iCFfxEA-c_P2FkqGI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:14:d8:e4:19:1f:40:4b:ee:d6:3e:51:3f:c6:6e:75:9f:6e:
21:12:1b:39:69:c0:d7:12:21:65:02:82:6a:8d:f0:4e:29:20:
f3:09:da:6d:f1:76:2d:f8:f0:a7:0e:93:50:1b:01:30:a2:e9:
15:55:88:45:03:98:ae:2f:aa:a7:00:04:24:54:4b:e2:5b:4e:
b9:66:cd:85:e3:53:25:2c:a8:69:c8:37:d4:97:52:6b:56:1d:
b5:f8:ef:5f:02:24:24:6c:bc:6e:97:92:f9:fc:c5:46:58:51:
65:64:46:b2:69:1e:7b:e2:20:c5:ec:f3:6a:3b:23:66:82:98:
4c:09:96:98:06:bc:27:87:ba:1b:77:d8:65:5e:27:17:8a:4f:
f2:b1:ce:d8:2e:dc:3d:7b:4f:51:8a:0b:e4:22:34:87:fe:f5:
bd:eb:ab:e0:3f:7d:7c:4f:07:dd:8c:bc:12:88:ef:ee:a0:5c:
4f:03:b3:bf:93:21:1c:e5:c5:ab:ba:4c:39:a5:f1:76:83:d8:
b8:c8:cb:12:ad:2b:65:9b:06:84:41:d0:16:c2:fd:de:cd:fe:
22:33:81:6f:ea:c5:57:d2:13:c9:c1:6b:28:30:16:ca:ff:06:
dd:c9:8e:bb:fd:a8:d6:cb:6f:4e:c8:18:9e:cc:e3:a9:a2:b6:
58:01:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org