Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/omuRJT5-IkKA3L3daEUKp3awiPA.roa
File: omuRJT5-IkKA3L3daEUKp3awiPA.roa (raw, json)
Hash identifier: BqFNeiIlYk3bArgaITEJbXEMqefNQSktWH/z7EL2hUE=
Subject key identifier: A2:6B:91:25:3E:7E:22:42:80:DC:BD:DD:68:45:0A:A7:76:B0:88:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BBF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/omuRJT5-IkKA3L3daEUKp3awiPA.roa
Signing time: Mon 08 Apr 2024 05:52:33 +0000
ROA not before: Mon 08 Apr 2024 05:52:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15295 (0x3bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 05:52:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A26B91253E7E224280DCBDDD68450AA776B088F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:0e:ce:db:96:05:13:a7:f7:08:b0:e7:5c:
0a:93:2a:65:66:40:b4:88:d6:a8:72:48:8e:69:21:
8b:ac:8d:1b:7f:b0:6a:9f:c5:f6:53:0a:c9:2e:75:
86:2e:59:ad:27:ff:75:3a:99:a8:86:e3:78:0f:45:
7e:b0:b3:27:f7:08:c9:7e:60:13:15:df:c1:f3:ae:
06:bc:62:8b:1c:4a:65:cd:5c:ea:ee:66:35:bf:34:
eb:0b:c8:2e:39:2f:23:3f:2a:cc:1f:1b:71:15:61:
c1:94:0e:01:76:13:57:53:8d:bd:df:59:20:d6:a5:
89:6d:80:00:6a:1a:1e:cd:a8:ba:fb:7c:74:23:2a:
95:08:94:2a:d2:1a:9f:eb:5f:b9:bb:d4:73:f1:27:
34:38:0d:38:23:41:11:0c:34:68:c8:24:fd:92:fb:
f3:c2:21:73:91:fb:69:20:7e:27:ac:41:78:f4:a0:
a1:a8:f8:88:6c:50:58:5e:86:59:25:a1:33:80:1e:
aa:75:3c:3d:d2:d3:9f:de:e7:db:54:1d:4d:67:61:
d0:5a:81:7f:f6:5d:8a:7c:ca:d0:b7:bd:59:f9:8a:
a9:a9:11:39:c1:f7:9f:7a:af:f8:3d:b1:17:bb:76:
af:ef:b4:2a:64:7f:8b:2b:db:ed:67:83:ee:3a:ab:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:91:25:3E:7E:22:42:80:DC:BD:DD:68:45:0A:A7:76:B0:88:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/omuRJT5-IkKA3L3daEUKp3awiPA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:b5:0e:33:48:f7:60:c7:14:2e:65:d6:3e:be:35:c6:cd:50:
b9:d1:0b:74:8b:74:0c:74:83:5f:85:ea:ce:53:2d:89:32:03:
57:f5:1b:31:a3:eb:45:cb:02:45:1b:e5:2a:30:f6:ae:94:83:
86:a4:62:e9:92:6c:63:55:64:d3:5a:74:97:68:07:0f:4f:e3:
81:f3:f2:95:8a:20:e8:24:26:11:90:b7:94:f5:93:a8:cd:ab:
fb:36:15:78:df:a2:50:9b:f8:ef:fa:dc:26:e9:c3:63:c6:f4:
5e:90:78:eb:f1:2d:c3:b6:3e:58:3a:e1:d9:7d:6b:1d:bc:13:
9f:0b:69:f3:3b:d6:8c:25:90:a9:f7:00:43:64:7b:f1:31:9f:
71:45:51:00:1e:50:5e:eb:8b:95:03:7a:95:24:a3:18:4c:cd:
b0:fc:db:91:bb:44:0c:dd:68:fe:71:ee:0d:c7:c9:a0:a0:8d:
be:e5:3b:d5:3c:07:5a:df:2b:30:bc:1e:23:38:6e:bd:83:bd:
72:50:79:e6:9d:84:b8:15:02:ea:3f:e1:40:f7:53:e2:d6:1a:
6e:19:5f:da:1f:06:3a:5d:07:c8:40:e4:6a:b2:6b:e6:98:2c:
b4:98:49:16:f1:82:67:f7:5d:8a:15:6f:e2:fb:bf:1b:fc:2f:
e3:41:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org