Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oVoX-RRkv777vd8SZ4SKGGv8s1M.roa
File: oVoX-RRkv777vd8SZ4SKGGv8s1M.roa (raw, json)
Hash identifier: BUrTraUVP1q4wHcf+8vMqmmyl91I2ffeyuRQfH+pdzI=
Subject key identifier: A1:5A:17:F9:14:64:BF:BE:FB:BD:DF:12:67:84:8A:18:6B:FC:B3:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oVoX-RRkv777vd8SZ4SKGGv8s1M.roa
Signing time: Fri 29 Mar 2024 20:22:06 +0000
ROA not before: Fri 29 Mar 2024 20:22:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13491 (0x34b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 20:22:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A15A17F91464BFBEFBBDDF1267848A186BFCB353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:05:27:29:ad:2d:f8:5b:43:ca:58:9a:11:
fd:cd:7a:35:dc:10:bd:37:86:71:b4:cd:f9:ed:5a:
32:8e:11:97:c3:2c:75:37:1e:c0:13:2c:9f:23:52:
97:33:d7:b9:d5:98:58:e5:5b:0b:29:87:6a:32:00:
a0:b2:4b:5c:7a:eb:99:39:37:ea:b4:79:31:58:98:
34:e0:49:4d:e0:f4:87:80:83:f0:91:bc:d4:1f:da:
d1:0d:06:ce:89:81:c7:70:58:2a:bf:c2:28:c9:58:
e3:44:5e:f6:21:41:fd:86:82:eb:8a:86:ce:8f:bf:
23:df:14:f3:73:11:bd:c6:e5:cd:e0:ff:87:44:4a:
24:df:81:f0:40:d0:d6:a7:7a:98:0f:91:74:3e:08:
0c:dd:6e:31:6f:db:07:5e:23:ef:ac:58:25:0c:77:
a4:db:a9:33:3b:3b:b8:c5:21:74:5f:36:18:b5:3d:
e6:87:c9:d6:c9:5d:25:e2:81:cc:f6:c1:5f:99:8c:
4e:50:1e:cb:40:80:02:21:f9:6d:b4:0d:34:f4:65:
96:e0:ed:12:0c:2d:d0:f0:b0:43:1b:a6:4f:ad:eb:
d1:13:82:c9:8e:d7:f3:36:62:f6:9e:c1:14:d6:b1:
a6:c0:1a:c3:80:bf:ad:b4:6e:33:56:5b:24:fe:d2:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:17:F9:14:64:BF:BE:FB:BD:DF:12:67:84:8A:18:6B:FC:B3:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oVoX-RRkv777vd8SZ4SKGGv8s1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:1c:e5:69:ba:6d:18:8b:50:6a:d6:41:a9:79:10:db:5c:ce:
07:cd:95:70:d2:e9:4c:5d:c8:62:84:d5:f1:47:0f:99:13:19:
4c:72:28:74:37:52:f9:1a:1b:88:47:23:bd:2a:e1:ca:fd:fb:
bb:51:70:74:26:c4:91:8e:c5:3d:24:97:5c:fb:5d:5e:a2:7a:
db:79:7d:51:30:03:60:f4:d7:40:f6:81:b3:d7:b3:50:12:d8:
13:f2:e5:44:18:f2:7c:3e:2d:b0:a7:23:6e:0d:47:5e:7d:52:
d5:9e:ef:71:37:27:bb:3b:fe:6b:2a:35:cb:8c:fe:45:41:e0:
d3:ea:0d:06:93:20:a6:16:5f:f1:69:32:9c:cd:7b:d9:94:c9:
88:bc:a7:44:60:9b:6c:18:5d:94:0b:5a:80:04:82:f6:a8:5f:
6e:fe:fb:2f:d7:b4:52:bb:9d:a2:3f:7e:6f:2e:19:09:db:05:
53:bf:b1:a9:77:4f:9a:bc:e2:86:e2:c4:19:6e:f4:60:87:9b:
4e:66:a5:28:b0:68:6c:56:d4:17:1a:1d:6f:59:56:09:52:27:
7e:6d:c0:ba:0d:87:af:71:25:bf:fd:4c:23:6c:19:24:56:0a:
2c:ad:0c:36:3c:6a:00:e5:12:5b:c9:5a:2d:14:d1:90:13:3b:
94:34:38:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org