Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nxgI4Cj8IB0yXt15nACGMLSOi6Q.roa
File: nxgI4Cj8IB0yXt15nACGMLSOi6Q.roa (raw, json)
Hash identifier: DLnEg7FHTGjva9iklcUplmmFysu++lP2CmAvZr3BjoE=
Subject key identifier: 9F:18:08:E0:28:FC:20:1D:32:5E:DD:79:9C:00:86:30:B4:8E:8B:A4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F0B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nxgI4Cj8IB0yXt15nACGMLSOi6Q.roa
Signing time: Fri 03 May 2024 23:23:49 +0000
ROA not before: Fri 03 May 2024 23:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20235 (0x4f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 23:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9F1808E028FC201D325EDD799C008630B48E8BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:d8:9a:39:43:01:67:dd:99:48:fe:0d:2c:
6e:b9:d2:c5:e9:61:e3:26:2d:2f:31:21:3d:fa:b6:
88:fb:c0:af:08:31:21:b9:93:e0:fa:3e:e5:e9:7c:
02:2d:b1:99:47:30:16:8b:25:63:73:c5:c7:c2:c8:
7d:67:14:39:d0:60:9c:e4:05:b3:48:0a:71:72:bd:
b2:b7:27:d0:0d:2b:7a:50:58:76:19:1f:7d:94:90:
0e:72:5d:a0:cd:49:65:2d:7d:e7:18:19:da:d3:dd:
59:6c:f0:b9:41:e4:5d:a4:6d:8f:10:3a:1c:96:61:
0c:3f:b6:82:53:b8:58:5d:53:e1:fb:c1:87:06:af:
4d:00:a4:bc:00:03:a6:6e:54:a0:86:4c:c2:5c:0b:
a8:95:12:66:0d:8c:e9:95:5e:6a:e0:74:30:f7:84:
84:e4:2c:19:66:d7:59:11:1b:72:b7:36:ef:e2:51:
cc:bb:ef:94:1e:37:f8:48:02:3f:32:ad:81:aa:9d:
59:c2:da:de:08:58:c8:44:90:32:c3:d0:ec:f7:5f:
ad:15:6f:06:de:a9:34:11:96:19:d1:5a:8c:30:cd:
0b:9a:78:81:d3:39:23:1a:7d:6e:e4:00:a1:84:fe:
f5:d6:73:2f:29:29:e5:2f:50:35:ef:35:32:51:9d:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:08:E0:28:FC:20:1D:32:5E:DD:79:9C:00:86:30:B4:8E:8B:A4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nxgI4Cj8IB0yXt15nACGMLSOi6Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:e7:2e:dc:ca:d4:16:c6:99:52:11:8d:99:e3:5d:93:32:d8:
2c:35:46:ba:65:c4:f9:0e:df:89:9a:2e:e5:92:b2:a0:e9:6e:
19:3e:9c:c5:55:7a:30:26:d9:bb:80:95:b4:9a:62:4f:8f:1e:
eb:77:a8:a1:b1:77:bb:f0:8a:a6:ce:ac:23:69:e3:93:81:4d:
32:ae:4c:10:66:58:26:4b:c7:90:70:b6:f5:4e:26:26:dc:6b:
66:93:18:6c:65:51:05:64:f2:ac:38:e8:bc:a1:a7:6c:4f:a9:
a2:6b:56:48:29:1b:6d:da:78:29:17:8b:ad:7a:7d:7d:7d:37:
25:ae:53:ac:00:c4:bb:8c:90:b9:52:96:ae:75:9d:52:ef:bd:
eb:4a:fb:3c:ac:ae:f6:d2:8d:2e:d3:a4:f2:a7:67:99:a6:a8:
bd:99:e5:81:87:89:a8:6d:33:be:c2:a5:f1:31:a9:71:a1:c3:
4b:90:9a:3d:9f:87:bd:6f:20:ba:aa:3c:a3:67:ba:19:6d:f9:
14:17:ff:a6:93:b0:e8:db:30:7d:57:36:00:fc:73:8a:6d:71:
bd:2a:91:6b:93:12:c7:1f:6d:1c:d7:25:58:e4:a5:e7:b4:47:
46:1a:84:1d:d2:4d:37:2c:ce:0d:77:f7:66:32:41:63:38:94:
50:5f:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org