Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pJ6DXwMn-YLi83Tu6NmE9JVpN4s.roa
File: pJ6DXwMn-YLi83Tu6NmE9JVpN4s.roa (raw, json)
Hash identifier: xRvDgYF+a7wWowsjjrs/WfBlb4GLdR37/kWPW/7JAcI=
Subject key identifier: A4:9E:83:5F:03:27:F9:82:E2:F3:74:EE:E8:D9:84:F4:95:69:37:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F8B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pJ6DXwMn-YLi83Tu6NmE9JVpN4s.roa
Signing time: Sat 04 May 2024 15:23:50 +0000
ROA not before: Sat 04 May 2024 15:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20363 (0x4f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 15:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A49E835F0327F982E2F374EEE8D984F49569378B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:e3:5d:c9:c8:c0:ea:d7:12:8e:f1:3e:c0:
ef:2d:1d:40:ef:d7:ac:a4:73:be:53:65:74:c6:8b:
e9:7d:79:7e:9c:33:da:e2:66:ad:ca:9c:dc:4e:84:
7f:dc:57:9e:bb:bd:b1:ed:17:45:46:d4:cd:56:70:
b6:6b:29:06:33:3f:d3:e6:92:6c:1a:13:8c:ee:87:
d1:86:74:d8:90:b7:fc:d1:6b:bc:51:9d:dd:36:03:
e9:e2:79:f5:2e:87:25:2d:f7:c1:c9:ee:80:06:90:
03:1f:fe:fd:cb:e2:e9:d1:e7:4b:93:5d:fe:3e:a6:
39:ce:db:f0:cc:3d:ad:31:c0:db:24:a7:78:6a:a3:
2f:fe:5e:49:6e:06:38:67:1e:65:65:26:9c:22:b0:
38:eb:bf:63:25:4d:e9:6b:a1:d7:71:ce:f9:5e:d0:
c8:85:43:ed:dc:65:40:ff:ff:69:1d:70:a6:0a:32:
1b:00:49:fb:e1:34:b1:f6:a6:06:77:4e:71:b0:a2:
de:ce:b8:cc:88:f0:d8:dd:e5:18:4f:d0:3c:e5:5f:
b4:17:ab:bd:b0:e0:86:74:1d:64:b0:ef:98:ec:b8:
27:37:c1:92:32:49:cf:a0:53:30:2c:75:ff:b9:2c:
b1:73:71:c5:23:0a:8f:24:c9:9e:fc:55:69:9b:8a:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:83:5F:03:27:F9:82:E2:F3:74:EE:E8:D9:84:F4:95:69:37:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pJ6DXwMn-YLi83Tu6NmE9JVpN4s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:f7:cc:1c:9b:03:95:4f:40:3c:45:00:6b:36:d5:5d:4a:3f:
56:7e:4a:a3:11:cd:9a:22:a2:3f:44:33:3d:2d:40:4f:5e:dc:
80:6e:92:90:1d:89:b4:a4:b7:ae:52:1b:4d:e0:f5:3e:92:13:
54:80:f8:88:ed:eb:be:76:84:3c:7c:c3:4f:29:d8:69:ad:99:
97:4e:ae:fc:ae:a8:fb:29:e1:30:12:7b:54:9e:fe:eb:fa:41:
c7:4b:9d:22:62:5c:a4:21:83:7e:a4:18:a5:74:5a:ef:f8:9d:
b9:4c:22:e5:3a:1a:07:d6:59:ba:03:13:75:57:98:60:db:6a:
0d:ea:74:42:f3:8d:de:7d:65:ed:cd:e7:51:7e:34:22:a2:37:
7a:bb:fa:5f:59:dc:fa:fd:97:70:77:fc:77:de:be:9b:2d:a7:
06:c2:77:2e:fa:d8:93:ab:cb:32:42:06:34:38:bc:27:47:16:
57:9a:91:54:90:9f:75:25:5d:59:c0:96:75:c3:de:69:b5:49:
45:d7:2a:3d:80:1c:41:58:5c:d6:e7:93:49:c6:fb:c1:7f:76:
73:98:92:af:66:52:3f:be:33:e9:95:4c:2d:b7:42:5c:e2:f8:
61:6d:84:39:b0:30:20:ab:35:d6:df:77:8f:a6:9b:d7:37:86:
f6:f9:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:11 2024 by rpki-client on console-ams.rpki-client.org