Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/n-MBaP7PFJBQ4KlSMZXqXU7ystc.roa
File: n-MBaP7PFJBQ4KlSMZXqXU7ystc.roa (raw, json)
Hash identifier: Z9ZNSM8XG8wpNzF+pd6t4gbE7unF2CMFUuk1sEXyZug=
Subject key identifier: 9F:E3:01:68:FE:CF:14:90:50:E0:A9:52:31:95:EA:5D:4E:F2:B2:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4283
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-MBaP7PFJBQ4KlSMZXqXU7ystc.roa
Signing time: Wed 17 Apr 2024 06:23:00 +0000
ROA not before: Wed 17 Apr 2024 06:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17027 (0x4283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 06:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9FE30168FECF149050E0A9523195EA5D4EF2B2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:fb:eb:c2:4a:ce:ab:62:4f:73:a4:e3:96:
b5:aa:2a:ae:af:eb:d8:e9:9a:50:4c:31:24:a4:f6:
3a:c1:aa:c7:fb:a3:d6:66:23:e4:bb:08:a8:8c:fa:
2d:e5:53:7b:db:3a:89:af:ab:4f:24:71:57:a8:1b:
7d:c9:17:36:d3:64:8b:a2:30:01:f2:c1:12:c9:66:
ca:0c:73:3d:a4:86:c1:50:8e:5c:16:50:65:6b:31:
35:27:2c:09:19:ca:3f:9b:ef:e7:bb:ea:a5:47:98:
cf:c5:4f:4c:04:41:c1:94:b3:23:48:f6:3f:19:94:
25:15:c6:22:b0:25:00:e6:92:29:96:d7:6a:47:a3:
7b:cf:e2:8b:63:b9:89:e2:bb:8e:8b:af:98:53:2c:
92:57:fa:4e:18:01:33:51:68:ce:5e:d5:b6:7b:2f:
4f:1e:14:65:2b:f9:65:49:55:11:c2:ba:05:84:3e:
70:44:09:61:92:7c:8f:9d:d8:97:fe:60:9a:73:30:
44:da:90:7a:b3:3a:90:15:e5:bd:51:6d:fe:2c:60:
2e:64:0d:42:cb:96:d3:45:36:6a:ba:2d:09:5d:df:
6b:17:07:2a:ae:c1:13:dd:08:d3:1c:81:06:48:d0:
be:a0:9c:51:67:76:b5:3e:5c:88:24:a9:c9:b3:66:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:01:68:FE:CF:14:90:50:E0:A9:52:31:95:EA:5D:4E:F2:B2:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n-MBaP7PFJBQ4KlSMZXqXU7ystc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:f5:aa:5b:ca:c3:b5:3e:26:20:1a:0d:08:d4:99:1c:85:83:
4c:19:fb:f9:2a:c3:97:2d:16:02:9c:34:78:7d:68:83:6c:62:
ad:77:14:7a:70:e2:cd:08:0c:c9:9c:76:95:18:46:11:db:a7:
bb:3e:d8:dc:2d:f2:3e:86:97:c5:1b:86:36:e3:e3:68:2e:af:
9f:e9:d0:64:96:1c:bc:ed:b7:f4:c0:bc:6b:c1:3b:4c:44:42:
19:30:cf:6e:ff:72:4c:1c:85:48:b6:d3:f5:99:6d:4f:11:6f:
80:8a:6c:b0:5a:20:ed:df:2a:d3:9d:ea:5a:10:97:35:66:c7:
9d:47:a7:38:07:64:d9:61:1b:ec:2b:43:04:58:35:36:6f:17:
81:bb:bb:55:b6:e9:e6:df:a0:5f:fa:26:95:e4:02:66:4c:66:
ac:20:7b:53:2a:5b:89:49:02:ae:e7:e0:0f:eb:95:57:8e:67:
2b:31:c3:47:ae:c3:5e:4a:68:cc:61:1f:f3:40:b2:a1:2f:1d:
10:d3:27:fa:f1:5e:f5:00:a1:93:50:94:95:04:8d:68:ef:0c:
df:4d:0a:c9:30:56:74:f5:71:3f:7d:3f:d9:8c:a2:fd:bf:14:
f1:ca:a6:3c:c1:f4:a6:8b:24:ce:83:cf:46:09:e8:01:78:be:
f4:87:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org