Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/p6gobqfyN2rqAtfIkdrdFIJjZeA.roa
File: p6gobqfyN2rqAtfIkdrdFIJjZeA.roa (raw, json)
Hash identifier: vDIxKpdcOspSZt/VAkQ8NgW3qCu9lGWNxWQ6Hn32RfQ=
Subject key identifier: A7:A8:28:6E:A7:F2:37:6A:EA:02:D7:C8:91:DA:DD:14:82:63:65:E0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E4F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p6gobqfyN2rqAtfIkdrdFIJjZeA.roa
Signing time: Thu 02 May 2024 23:53:43 +0000
ROA not before: Thu 02 May 2024 23:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20047 (0x4e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 23:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A7A8286EA7F2376AEA02D7C891DADD14826365E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:4b:00:ee:d4:9e:3e:c7:82:76:dd:c5:fc:
3b:81:86:72:54:d2:38:04:b6:67:a3:0c:2e:eb:36:
98:c6:7f:d0:e3:ac:17:9e:87:ac:2e:b4:7b:80:be:
2a:88:fa:02:2e:1f:25:95:0c:49:8d:c0:10:26:d3:
90:f6:92:89:77:56:44:1f:f0:ad:2c:6d:f6:de:00:
80:c6:df:f2:02:53:3a:a7:7e:c2:9e:c9:3e:a6:09:
9d:17:75:c9:14:69:e6:30:09:29:71:29:45:45:9c:
a4:a1:b0:cd:ac:86:21:ba:73:a6:2b:02:42:ab:cd:
9a:70:e9:82:8a:10:e9:e6:c4:cc:d2:66:9d:a9:76:
81:1d:50:85:9f:c7:62:17:7c:2b:a9:30:f8:bd:2b:
b4:de:6b:ee:20:a2:d9:5f:02:2c:49:b4:e3:29:40:
64:16:c7:38:1b:d5:94:33:79:22:6e:7c:ac:16:42:
14:26:ae:0a:3b:8f:5d:a0:8f:13:45:27:66:ee:8f:
53:86:c8:46:99:8f:e9:d7:77:73:fd:bb:a2:64:d3:
a6:5a:5b:a6:17:7d:8e:13:69:d1:46:c0:34:3d:5e:
89:36:f9:39:d3:e7:9d:88:a1:e3:92:71:b3:e8:c7:
a5:6f:85:04:c0:11:5b:7f:09:ad:59:25:39:ba:98:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:28:6E:A7:F2:37:6A:EA:02:D7:C8:91:DA:DD:14:82:63:65:E0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/p6gobqfyN2rqAtfIkdrdFIJjZeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:c5:c8:24:85:cb:79:dc:fc:97:b3:31:9a:19:d5:98:7d:4f:
e8:ef:d0:03:fd:5a:2c:5f:f7:a1:9c:ef:5f:22:b8:cc:2e:7e:
57:a1:60:6f:84:9b:12:a6:ae:c4:1d:8a:d7:87:06:e1:0a:b8:
29:2e:a5:0c:02:a9:7e:01:85:f7:24:ef:28:31:da:1a:0c:16:
de:e4:15:75:db:58:32:60:d7:7d:56:10:1f:39:ef:5e:7e:b0:
b8:43:f6:e7:7d:9a:c5:76:5f:ee:63:aa:9d:07:47:70:68:cb:
4c:e0:0e:8d:fc:d8:70:82:b3:06:52:15:1a:c7:c7:6f:2f:76:
c9:86:29:63:d1:b1:55:38:cb:5b:01:c6:13:31:73:18:b3:3a:
01:a6:73:9d:42:ac:29:06:78:43:2c:4c:15:ad:0f:15:69:94:
90:c1:34:7e:b8:a5:ea:03:72:78:a2:cc:1d:01:2c:2d:c7:45:
2f:8a:06:5c:0f:91:10:58:61:39:19:08:45:b9:5c:8a:30:88:
63:a1:0f:0f:73:9e:f3:16:19:15:98:79:f9:25:51:cf:e2:78:
f6:07:59:6e:f6:f4:1c:43:65:9c:1d:57:5d:c4:f8:a3:2c:54:
22:f8:e3:72:72:11:65:35:66:9f:4a:60:8f:bd:8c:61:5f:c6:
9b:1f:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org