Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/o5rHK2oOJYzMumzOnWYkOBvDFXA.roa
File: o5rHK2oOJYzMumzOnWYkOBvDFXA.roa (raw, json)
Hash identifier: /lx6JQMYJpF71oE1xZM3m3EJEJXCVS4RTPsOKueVoSM=
Subject key identifier: A3:9A:C7:2B:6A:0E:25:8C:CC:BA:6C:CE:9D:66:24:38:1B:C3:15:70
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o5rHK2oOJYzMumzOnWYkOBvDFXA.roa
Signing time: Thu 25 Apr 2024 19:53:20 +0000
ROA not before: Thu 25 Apr 2024 19:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18671 (0x48ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 19:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A39AC72B6A0E258CCCBA6CCE9D6624381BC31570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:14:44:2e:0b:20:bf:89:c7:85:d8:d1:e9:29:
ba:c2:a5:f0:a4:6d:0b:3b:a2:f3:af:cf:38:61:95:
0d:eb:24:78:76:59:1d:7e:d1:33:11:86:07:ab:1d:
ed:a9:37:50:df:02:68:3d:bf:4e:a7:5c:be:79:dc:
9d:8f:06:44:9f:12:08:a9:15:b2:a4:0d:f7:92:9a:
87:d5:0e:90:3c:cc:33:71:37:53:a3:12:48:dc:da:
2a:7d:9f:7f:cf:a0:72:68:a4:8c:15:36:67:c8:1a:
e0:86:e4:f1:4d:d6:e7:7e:50:84:29:34:d1:e3:22:
30:c0:4b:ef:38:df:b7:bb:cd:d7:01:b9:d2:03:6b:
18:d9:10:70:57:82:73:76:b3:f2:f4:a5:bd:6a:b0:
36:40:06:95:9a:d8:53:ec:99:e2:47:20:c3:05:eb:
4f:e5:57:70:2b:05:dc:66:d3:be:e6:50:15:8d:3d:
a9:21:5f:66:f8:9a:ef:da:72:c9:e9:c5:88:da:70:
e4:c5:13:fd:a4:bc:7a:23:13:48:3d:5f:8b:ab:51:
03:da:cb:10:3b:ef:00:b3:24:68:8d:87:d5:28:3f:
7b:a0:e8:8e:6c:a5:7b:dc:c9:80:cd:b7:58:9b:de:
8a:90:19:37:4a:8d:d0:b8:7c:8f:91:da:79:a1:cc:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:C7:2B:6A:0E:25:8C:CC:BA:6C:CE:9D:66:24:38:1B:C3:15:70
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/o5rHK2oOJYzMumzOnWYkOBvDFXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:a5:60:71:dd:1f:5f:2d:84:0d:26:83:09:6a:84:ae:32:5b:
f2:3d:1c:a4:07:c5:d2:b3:08:35:3f:5c:3f:03:19:a7:68:1b:
c1:70:cd:86:87:26:c9:36:f6:dc:35:a9:bb:9e:56:7d:f4:dd:
79:d4:16:b0:13:29:47:e5:11:74:30:30:8a:f4:19:54:0c:47:
f8:47:21:33:fe:2f:f4:c0:65:b3:1b:2d:17:ae:7a:5a:35:19:
46:0e:f1:95:d8:ea:28:0b:2d:f7:25:d7:e3:eb:38:15:4f:f4:
6c:ae:dc:16:62:99:b0:a3:fb:38:d5:66:8b:71:14:12:4b:e9:
5e:6a:cf:b5:6d:fc:03:10:7f:6b:5c:34:fc:58:04:11:98:04:
ae:15:67:ba:8d:ed:b2:ef:47:e7:a1:bf:8a:ec:6f:d2:fe:b8:
5f:4d:34:bd:41:9b:31:a7:f0:4c:c8:ac:a2:4f:47:4a:28:5e:
4e:ea:ec:67:b1:d5:06:df:61:c4:19:33:b3:84:0b:77:11:02:
98:31:23:31:ee:ef:0e:a9:c0:db:2d:87:47:b2:b4:5c:3a:3b:
8c:45:d9:f5:a2:6d:84:2a:0b:34:26:59:e6:68:5e:e5:50:1f:
7f:d8:62:95:47:5b:29:66:c4:c0:eb:eb:b3:50:de:57:88:67:
80:33:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org