Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pURlSbXYGSVXbYp92RPbihJ6tnQ.roa
File: pURlSbXYGSVXbYp92RPbihJ6tnQ.roa (raw, json)
Hash identifier: J2MFQ4Mq5WS3IFDnM/YwIl5zDlAPsd76F8JkoXImurM=
Subject key identifier: A5:44:65:49:B5:D8:19:25:57:6D:8A:7D:D9:13:DB:8A:12:7A:B6:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pURlSbXYGSVXbYp92RPbihJ6tnQ.roa
Signing time: Wed 24 Apr 2024 07:53:12 +0000
ROA not before: Wed 24 Apr 2024 07:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18383 (0x47cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 07:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A5446549B5D81925576D8A7DD913DB8A127AB674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:a5:f2:77:9c:8f:36:9c:03:21:1b:4c:46:
47:f6:e3:09:03:aa:b5:f2:bc:bc:a5:fd:7e:35:6d:
55:5d:9e:74:84:d7:23:17:67:b8:52:a5:5c:13:06:
6a:35:89:37:f3:97:c2:2f:33:98:51:ce:ca:a7:23:
b8:38:cb:f8:c9:14:54:83:73:f4:44:c6:b5:72:30:
86:7b:2a:9f:60:ad:de:64:6d:0b:58:26:ad:5c:14:
e3:38:ff:ee:17:8a:a4:49:24:4f:8f:fe:d0:2a:b2:
08:08:8e:e6:68:cf:65:f3:41:ad:39:1d:df:dd:a8:
ba:03:42:9c:dd:c5:f3:eb:8b:44:9e:2b:b0:cd:45:
fd:65:76:41:75:8a:3e:d7:d6:bb:e4:c6:6d:2b:c3:
38:63:f5:c5:11:40:39:f4:cd:2a:db:da:f1:d5:fa:
d8:0c:f9:d1:59:ff:2c:45:bf:20:67:4e:2f:e1:3a:
43:71:80:76:93:25:cd:ae:5c:42:ee:32:f8:2c:75:
cd:dc:22:1a:95:3d:b5:bd:6b:19:22:7a:83:10:93:
1a:03:00:e0:3f:4f:a5:77:48:94:fc:b1:97:6f:19:
df:78:63:43:93:a3:5c:f2:b5:85:0a:44:d7:79:63:
2a:d4:da:5f:3e:22:5f:c1:30:4a:a5:0a:44:ee:07:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:65:49:B5:D8:19:25:57:6D:8A:7D:D9:13:DB:8A:12:7A:B6:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pURlSbXYGSVXbYp92RPbihJ6tnQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:84:f6:4e:e3:b8:d4:8b:59:ae:a8:2e:ea:f8:5c:8e:61:58:
91:a0:e6:9f:9c:4c:8f:a3:ed:6f:eb:45:82:3a:7b:6d:a3:78:
b5:67:7c:0b:16:0c:0f:9c:91:c0:7e:23:56:21:26:36:7c:9e:
37:48:5d:42:b9:1b:a4:f3:73:b3:10:29:0f:39:95:f8:79:47:
e5:68:14:83:0d:9d:f8:a3:8a:16:22:9a:a7:8c:b1:2d:bc:fe:
0f:5c:83:3e:4e:12:85:0b:8e:3c:ae:a4:ef:f0:28:f0:51:fa:
6e:5e:57:d0:b7:fc:66:82:35:72:bb:21:92:01:ab:ca:a7:6c:
43:d3:42:e9:e5:e4:79:a7:c6:d9:5f:0d:e0:f4:65:e8:49:8f:
57:f5:e5:1b:67:69:aa:55:6b:ca:c5:9e:2d:d1:4a:43:41:1d:
6f:f9:12:8c:07:1d:11:fe:d4:82:33:6f:5d:23:28:9c:be:f7:
24:6a:3b:0d:56:d5:3b:cd:aa:8c:82:a8:5f:cf:80:21:72:62:
42:47:5d:7e:6d:81:6c:b5:90:af:a0:00:38:75:f6:7b:5a:12:
1d:40:55:59:ee:14:ad:7c:e0:ce:c9:12:08:bb:6d:b5:78:59:
6c:8f:06:a2:9c:78:c7:e5:66:21:75:ad:5f:c0:2d:ef:a4:92:
8a:b9:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:11 2024 by rpki-client on console-ams.rpki-client.org