Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lmNkgHIWBeQrwSO_c4IhXXYMCVs.roa
File: lmNkgHIWBeQrwSO_c4IhXXYMCVs.roa (raw, json)
Hash identifier: /C0qu2UZ/bMz2Hunq2chqmvoE21QvctdNeZ5e7ZxY9c=
Subject key identifier: 96:63:64:80:72:16:05:E4:2B:C1:23:BF:73:82:21:5D:76:0C:09:5B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5507
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmNkgHIWBeQrwSO_c4IhXXYMCVs.roa
Signing time: Sat 11 May 2024 22:54:24 +0000
ROA not before: Sat 11 May 2024 22:54:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21767 (0x5507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 22:54:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96636480721605E42BC123BF7382215D760C095B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:89:6f:87:4f:a1:c4:a4:cd:c5:57:f9:de:
57:50:3c:d3:39:87:1c:b2:ac:69:90:e7:05:c4:b6:
04:4d:d2:b0:c3:cf:6c:33:9d:cc:13:10:26:22:36:
85:a6:b6:94:52:c4:72:9b:85:6f:e6:8c:a2:a4:8b:
4e:82:69:f7:b7:cf:af:6f:23:d7:fb:4c:e4:af:65:
f0:4c:f0:f1:52:9a:c7:44:31:d0:ab:7f:df:49:e0:
b2:05:e2:5a:0a:a9:c0:ca:2e:80:e6:0b:10:4d:e0:
a6:2a:37:a1:e5:e4:8c:7b:09:f3:3f:8c:c4:4c:8d:
1d:7f:c9:21:a6:31:8f:ef:dc:d3:d4:5e:d8:18:0e:
b0:c1:66:6d:be:ec:ec:f3:08:9e:6f:e3:d6:49:df:
3a:b0:49:6f:7d:7c:76:b6:75:32:d3:7d:90:a1:b4:
b8:0f:eb:a3:38:a7:4e:98:02:f9:72:6f:fa:d7:53:
ab:33:d9:c2:29:f0:c2:ae:d9:0b:c1:d5:ce:d9:aa:
52:0c:8d:6e:ae:4d:c6:07:c5:26:e4:8a:1b:3f:85:
ba:b3:6d:f2:27:b4:ac:d8:90:b6:6b:cd:6f:b4:44:
02:31:ad:3b:1f:5f:cf:fa:a5:93:af:e3:d4:4a:79:
78:f5:88:11:51:d2:3e:91:4e:76:95:8a:d6:6a:1b:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:64:80:72:16:05:E4:2B:C1:23:BF:73:82:21:5D:76:0C:09:5B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmNkgHIWBeQrwSO_c4IhXXYMCVs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:dd:1c:fc:ba:a0:35:eb:9c:ab:7b:62:08:f5:38:15:a4:fd:
3c:c1:80:49:fc:5e:e0:c4:e2:49:92:a9:02:c3:e0:20:27:d6:
a2:92:91:06:be:47:33:bf:2a:34:dd:fb:bc:5d:d0:49:cd:f6:
e2:6f:3c:e3:ae:cd:e6:f8:f9:dc:05:6a:f4:f8:05:32:da:0c:
66:76:52:f2:da:1b:3e:ea:2b:d7:39:d6:64:ff:d8:a9:bf:aa:
f0:e8:77:a0:69:c6:0a:fd:f2:2c:01:77:26:7c:ed:2a:7e:be:
de:41:84:c6:ff:96:63:20:93:0f:b7:1a:59:ac:53:d0:1d:2a:
3c:23:ab:53:3a:18:3f:3d:fc:01:bc:86:58:ed:62:26:3c:a1:
09:66:e0:dc:f5:08:89:ec:e9:77:6b:83:b7:5a:a3:91:46:88:
1c:74:e4:02:f4:01:9c:5f:2e:5c:02:58:dd:0c:cb:59:c0:1e:
e5:e9:18:b8:e6:95:0f:4a:aa:98:85:9a:40:2f:21:69:13:07:
46:79:3a:a8:54:b3:31:17:99:e5:b0:2a:d2:3b:c9:fa:37:6d:
80:6c:f7:47:ad:67:70:1f:c0:2d:7e:2a:ac:15:41:54:b8:e2:
f5:37:70:93:8c:50:fc:39:8d:4e:83:c5:fa:72:3c:fd:a1:31:
18:00:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org