Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/llQfMYBJnSv04Ww16_-If16TaSA.roa
File: llQfMYBJnSv04Ww16_-If16TaSA.roa (raw, json)
Hash identifier: MNW5RN9ZiUgBfX48IUc3KTIEER7uRC3pVXLFVZdiy9E=
Subject key identifier: 96:54:1F:31:80:49:9D:2B:F4:E1:6C:35:EB:FF:88:7F:5E:93:69:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F2B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/llQfMYBJnSv04Ww16_-If16TaSA.roa
Signing time: Fri 12 Apr 2024 19:22:50 +0000
ROA not before: Fri 12 Apr 2024 19:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16171 (0x3f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 19:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96541F3180499D2BF4E16C35EBFF887F5E936920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:8b:74:89:b7:d8:c8:b8:67:aa:f6:1b:c7:
9a:20:33:15:02:2a:20:06:7a:a7:e6:0d:ab:a5:1a:
76:8f:29:ab:7b:0d:0a:ad:15:88:9e:a4:0e:30:5e:
9d:c1:79:a8:31:8c:be:45:19:2b:8e:fe:81:94:a6:
4e:ab:39:1a:be:04:ac:0f:16:38:f5:4b:08:b3:8b:
f3:51:b8:7b:6f:91:a3:4f:7a:3f:e6:fe:93:45:25:
bf:f6:32:39:80:c0:4d:bd:a5:dd:34:1c:f9:d2:c9:
72:94:7d:fe:11:60:72:1d:9a:f4:8f:63:3c:e9:3c:
15:e3:c3:82:0a:1e:c4:24:1a:1a:be:d2:7e:bd:cb:
1a:88:ed:b1:ce:9e:74:e4:c0:1c:ee:af:0c:b9:c3:
f0:28:54:65:87:2a:39:79:49:ab:9e:5c:7b:a1:3a:
bb:fa:c2:66:c1:88:96:a1:16:39:ca:56:a8:b1:9f:
00:1a:24:8e:f0:5c:38:8b:bc:cd:d7:0b:b3:1b:d0:
bf:25:a0:08:71:e4:57:c7:30:5f:72:8c:91:a5:00:
3c:b3:05:f4:3d:04:95:d8:3b:1b:c9:c5:17:a7:11:
d7:04:c0:1a:12:66:da:3a:1d:a9:39:c9:5a:73:4f:
2f:cc:22:da:13:ba:c3:b6:f9:26:07:3c:30:3f:99:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:1F:31:80:49:9D:2B:F4:E1:6C:35:EB:FF:88:7F:5E:93:69:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/llQfMYBJnSv04Ww16_-If16TaSA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:52:73:7b:73:9b:7b:4e:a5:9f:da:a4:8d:d6:fa:80:a9:23:
49:7e:16:8f:a0:aa:c9:45:7a:75:4a:e9:3d:17:a6:82:03:18:
73:41:bf:29:72:6e:a9:b4:18:b9:47:4f:51:56:38:d4:90:96:
30:7a:6a:24:43:09:da:4f:11:c7:d4:f1:c0:93:76:a6:4f:2d:
f4:2a:c8:10:6f:c8:33:fb:c6:f4:7c:08:c6:99:e3:d5:b2:1b:
69:aa:99:c8:98:81:2a:72:c3:2d:f9:0a:92:f3:1d:5b:5f:86:
6a:fe:33:d0:04:4f:1a:23:33:5a:cd:20:aa:f0:89:55:3a:ba:
40:c5:b1:80:69:4d:66:7c:ed:3e:01:14:a9:cc:3a:61:a6:48:
10:38:f7:6a:07:31:6d:b8:e9:4e:a6:0e:61:87:05:86:51:ec:
1d:e4:bd:ab:30:fb:78:ea:0b:51:a2:b2:ca:19:36:b9:67:9f:
11:5f:d4:20:09:c0:29:90:ff:4d:4d:e2:20:1c:0e:2a:43:14:
81:0c:44:5a:35:20:83:df:b8:34:4e:89:d9:13:e4:e8:7a:6a:
9f:b8:01:67:73:de:f5:90:4c:6a:a5:90:cf:57:0a:62:4f:63:
7d:06:42:ce:50:27:ad:94:57:ad:7e:49:df:71:25:ec:9d:8f:
67:59:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org