Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/n__efqdtkYMCulGh-Y_PKMj4piM.roa
File: n__efqdtkYMCulGh-Y_PKMj4piM.roa (raw, json)
Hash identifier: HJj/LjSdcvwmRU5nGvF03w9ByyRaktPba+5todPhVy8=
Subject key identifier: 9F:FF:DE:7E:A7:6D:91:83:02:BA:51:A1:F9:8F:CF:28:C8:F8:A6:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F67
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n__efqdtkYMCulGh-Y_PKMj4piM.roa
Signing time: Sat 13 Apr 2024 02:52:53 +0000
ROA not before: Sat 13 Apr 2024 02:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16231 (0x3f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 02:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9FFFDE7EA76D918302BA51A1F98FCF28C8F8A623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:04:20:69:82:52:72:09:0b:38:7f:cc:45:
ae:8e:9d:51:35:cf:14:1a:c6:c5:71:2a:f6:f2:7f:
56:b7:9e:35:fe:10:b9:8f:06:2c:7f:2d:1d:7c:ca:
c1:c6:67:ac:60:c7:25:11:01:01:86:c4:04:d3:2d:
5c:1e:69:93:0c:3d:87:c1:e9:15:a3:e8:13:f9:3f:
22:2a:ee:86:cc:88:a8:b5:7b:4a:26:f9:be:f8:1b:
e9:59:9e:f6:40:98:12:db:79:ff:9d:1e:04:c5:d5:
9f:7e:3e:53:71:23:95:4a:c9:de:4a:db:c7:36:d6:
1f:a9:52:d8:d1:43:78:a9:25:d5:59:22:95:39:63:
0f:4a:2a:bf:79:45:6e:e5:87:7e:f6:fc:39:3b:40:
44:fe:11:5b:63:f1:20:a9:6e:be:a3:b8:53:82:d6:
91:66:7d:09:49:d1:db:22:0c:77:0d:09:ac:d6:f8:
88:b6:b8:2c:b5:b5:64:5c:f6:2d:0b:2c:03:5b:ed:
11:b4:c7:03:c7:54:a9:1e:2a:9c:2e:13:21:e5:83:
0f:0b:a4:30:74:9e:63:28:b4:7c:19:c3:4d:13:6a:
f5:47:2d:be:a5:b7:d6:1b:06:5e:7b:66:99:de:3d:
25:e4:ca:f5:8c:ea:85:bf:d3:50:9e:9e:34:01:cd:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:DE:7E:A7:6D:91:83:02:BA:51:A1:F9:8F:CF:28:C8:F8:A6:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/n__efqdtkYMCulGh-Y_PKMj4piM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:47:5a:a0:f8:82:0a:e4:32:52:2d:2c:61:74:59:6e:a9:2b:
d5:0e:69:ac:ca:57:32:ce:aa:45:13:9d:88:df:14:a4:05:91:
b7:17:3f:d2:11:9a:82:07:1d:53:b9:98:e6:f5:8d:b1:f4:dd:
46:93:f2:1d:e9:20:ff:50:2f:14:a0:f5:7a:d3:ee:9a:1d:16:
66:13:22:31:1b:02:08:22:42:25:0a:6d:f5:15:09:e2:1e:fb:
3c:3a:e4:6a:1e:46:a8:f0:51:d7:ea:13:e6:df:02:04:21:35:
09:df:8d:ee:49:e8:c7:4a:1a:d4:62:a3:4c:43:82:68:8d:b3:
d5:48:71:13:fd:51:22:13:8d:ef:7e:0c:2f:99:c8:7b:31:fa:
1b:5b:0d:2c:0d:26:c0:d5:22:ab:0a:96:b7:ae:37:ea:d1:c3:
92:8a:53:a5:51:71:12:af:4d:42:60:d5:b9:a9:64:3a:94:19:
ea:ef:df:b6:a2:31:63:ed:18:71:ea:c6:ab:cf:29:13:6e:4f:
ab:10:78:0d:39:bc:13:c8:7f:2c:17:4d:32:8a:71:ac:67:6d:
52:9e:89:9c:c7:cc:d6:7e:ff:7f:aa:57:ae:ad:13:35:21:cf:
4a:4d:7f:c6:af:83:9c:ce:de:5c:4d:eb:91:2a:73:e0:5f:26:
cb:b4:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:09 2024 by rpki-client on console-ams.rpki-client.org