Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mPmOFmoPKuj4ZL5x1aZoQ85d5uQ.roa
File: mPmOFmoPKuj4ZL5x1aZoQ85d5uQ.roa (raw, json)
Hash identifier: JTcnEqMvvIqJ0ee/sHtkERtEUZbS1g3VeGPKerJWNY0=
Subject key identifier: 98:F9:8E:16:6A:0F:2A:E8:F8:64:BE:71:D5:A6:68:43:CE:5D:E6:E4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 409B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mPmOFmoPKuj4ZL5x1aZoQ85d5uQ.roa
Signing time: Sun 14 Apr 2024 17:22:52 +0000
ROA not before: Sun 14 Apr 2024 17:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16539 (0x409b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 17:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=98F98E166A0F2AE8F864BE71D5A66843CE5DE6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:3b:32:22:bf:45:f9:8d:cf:f2:68:ed:b6:
ac:03:75:83:f7:52:c2:d4:af:74:a8:05:02:92:32:
9a:59:82:bc:9a:3c:c4:65:2d:0c:6f:dc:26:51:7f:
b4:a3:18:87:0a:d0:9f:5e:28:18:f1:ec:19:9f:87:
11:96:30:74:ca:de:a0:48:54:0a:20:bc:ea:4f:76:
b0:cb:b6:59:88:70:33:3a:c4:6a:bc:6f:4c:d8:5d:
c2:bb:f8:ef:64:e6:f5:7e:2c:ab:63:5c:02:c5:3a:
be:2e:6b:8c:84:da:96:77:49:02:1b:f7:31:95:85:
e0:13:cc:61:4f:41:f6:26:d7:72:cb:eb:ca:47:42:
1e:93:9c:0b:df:cf:30:d7:f7:f9:a9:a9:99:26:fd:
4f:93:56:94:af:64:a2:ba:0d:6b:cb:40:bb:d7:d1:
c7:bd:8b:d3:23:92:cf:b5:28:f0:b6:63:78:19:69:
5f:a7:df:36:1f:33:dd:10:19:58:8b:4d:9f:11:36:
cf:c8:f5:83:b6:fe:18:ae:c1:bc:e9:52:0f:d1:d1:
bb:5c:c9:eb:65:1f:3b:90:0f:e8:51:3e:94:ad:ca:
66:ef:14:c1:a9:c3:e0:54:70:e9:5d:d0:1f:32:e5:
35:20:e9:be:39:54:4e:bc:fc:d3:d0:6d:51:00:9e:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:8E:16:6A:0F:2A:E8:F8:64:BE:71:D5:A6:68:43:CE:5D:E6:E4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mPmOFmoPKuj4ZL5x1aZoQ85d5uQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:cb:a7:53:c9:06:37:3d:26:54:ce:d8:bd:18:9d:44:08:99:
fd:c9:46:ec:a2:64:78:72:7b:fa:82:d1:bd:3b:68:59:a5:b3:
b9:34:f5:48:26:e1:90:cc:6a:54:5e:c4:11:fa:98:71:53:0d:
b3:b4:80:c7:39:6a:ae:4a:24:4c:b2:ca:3d:52:08:e2:8f:f0:
62:37:21:bc:47:34:c5:ee:ff:a1:b7:bb:f5:3a:09:61:e0:aa:
c8:60:43:4e:a2:a5:f3:59:2f:0c:cc:2d:15:01:59:0d:fb:98:
59:af:4a:7d:70:95:3e:22:0e:6b:ab:1a:29:b1:81:3d:51:4b:
b9:15:b2:56:42:18:df:19:8f:2b:56:f4:dc:ce:94:88:51:99:
24:d1:df:de:1c:36:71:00:b9:30:d2:39:58:1d:30:d1:4d:65:
08:09:7e:a1:16:7c:e4:f1:2f:55:27:fe:84:b1:6b:85:13:61:
0a:d4:a6:28:01:a1:bf:f7:07:ca:1a:6e:85:97:d9:c3:b0:7a:
7c:40:7f:0c:7b:43:f9:b3:e2:81:c4:29:e6:4e:9e:63:a4:0d:
2a:66:78:8c:96:c7:77:98:2b:20:72:24:b0:c4:00:37:12:e7:
b9:3c:a0:11:09:dd:73:cd:27:e6:1f:24:17:af:f9:3e:51:38:
c7:a2:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org