Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oJggBD4-xdkdrJjAiKYMfNxZ_mM.roa
File: oJggBD4-xdkdrJjAiKYMfNxZ_mM.roa (raw, json)
Hash identifier: qBvWw21if9TGkg9FbP6pC2yu9afDJue9bcw4QJoOgPM=
Subject key identifier: A0:98:20:04:3E:3E:C5:D9:1D:AC:98:C0:88:A6:0C:7C:DC:59:FE:63
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D1F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oJggBD4-xdkdrJjAiKYMfNxZ_mM.roa
Signing time: Wed 01 May 2024 09:53:34 +0000
ROA not before: Wed 01 May 2024 09:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19743 (0x4d1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 09:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A09820043E3EC5D91DAC98C088A60C7CDC59FE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:24:f6:4d:1d:06:02:cc:3e:60:76:f9:96:
d8:66:f7:b4:60:a5:84:a9:d2:4d:4d:a6:2f:3d:7c:
5a:bc:d3:b7:67:a3:f5:3a:67:c6:c3:10:75:54:59:
40:63:c0:e9:bd:c9:ae:e8:b4:06:7f:c8:60:00:9f:
bb:c2:35:6a:8e:d2:cc:13:39:de:3d:f9:60:44:af:
3a:12:a1:9d:13:18:a4:c8:0e:81:3f:10:3f:23:e7:
dc:3b:e2:23:31:dc:34:b2:6e:61:05:93:0d:95:d5:
b0:54:98:13:e0:c2:37:ff:7e:4f:03:a9:c8:b5:fc:
9a:9e:5e:9c:03:2e:3e:81:dd:29:f9:f8:7c:75:7f:
17:3d:bf:f5:e6:8f:4e:b8:d5:04:b4:f6:54:6d:1a:
56:e8:a3:d2:fe:72:e4:8f:a5:fb:6b:30:db:1e:a7:
6d:fe:76:3d:fe:cb:f1:56:4d:41:b5:14:78:c7:4c:
f2:66:03:a7:c6:27:c7:85:d2:07:d0:d8:59:f9:e2:
fe:0e:0a:e9:2f:09:e1:cc:8e:6e:eb:b7:3c:5b:8b:
86:b5:cf:b4:65:96:2d:de:5f:cc:81:30:9b:7f:62:
20:17:75:90:61:77:a3:97:2a:72:09:83:a1:d9:28:
68:a9:f7:4c:0a:7e:de:d1:f2:15:1e:71:6e:66:07:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:20:04:3E:3E:C5:D9:1D:AC:98:C0:88:A6:0C:7C:DC:59:FE:63
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oJggBD4-xdkdrJjAiKYMfNxZ_mM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:1e:d4:81:4c:73:00:72:e9:0e:39:8e:3d:c2:3f:cf:ad:5a:
3f:0e:f0:b6:0f:d9:ef:f5:db:a4:f0:8d:97:40:e6:b9:d4:79:
69:41:54:86:f0:c1:b5:00:c3:6e:d8:b0:f0:39:db:dc:74:bf:
9b:cc:2c:fc:55:de:e1:de:c0:0b:78:d3:f2:fd:9a:44:e4:57:
ac:7f:dc:b0:1e:7b:54:ed:bf:1e:27:5a:d2:b2:a2:fa:1d:61:
fa:ce:78:31:f8:6b:94:fd:81:53:b4:fa:ae:02:b4:c4:37:60:
5e:5a:2c:01:33:7d:c8:dd:f6:21:99:7e:75:fa:f6:06:17:32:
47:c3:23:4d:2a:ac:21:11:7e:26:9f:3c:3b:24:2f:af:8e:48:
c4:20:a0:6e:bb:58:e2:75:c2:34:d8:f0:89:93:89:8c:65:b7:
ad:fe:24:13:82:03:66:17:49:c2:b4:2f:c4:5d:80:3f:81:5e:
06:a7:45:6e:65:5f:c9:27:d7:a5:7e:15:4a:9c:5f:32:22:91:
68:e6:4d:1e:c3:f9:4f:6c:f7:0d:6b:aa:15:e1:db:b9:fb:60:
b2:ac:60:40:2b:27:88:fb:13:6d:62:f9:fd:ab:9c:f2:26:af:
f7:e4:b2:64:61:29:82:ca:5c:57:ed:a8:27:a8:4e:eb:e2:ba:
65:c6:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org