Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rYZC1g7rvYmbquOB0KjrnSB5Wrc.roa
File: rYZC1g7rvYmbquOB0KjrnSB5Wrc.roa (raw, json)
Hash identifier: mvW2cmbxGMC4ueoE2TFtAtTTUBDY3rIUMOOZlTIQOkI=
Subject key identifier: AD:86:42:D6:0E:EB:BD:89:9B:AA:E3:81:D0:A8:EB:9D:20:79:5A:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rYZC1g7rvYmbquOB0KjrnSB5Wrc.roa
Signing time: Tue 07 May 2024 21:53:57 +0000
ROA not before: Tue 07 May 2024 21:53:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20991 (0x51ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 21:53:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AD8642D60EEBBD899BAAE381D0A8EB9D20795AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:49:99:07:43:6a:2d:2b:e8:a7:2d:57:e8:
6a:b0:91:ec:16:12:09:13:d3:a2:d6:c3:96:b7:d5:
2b:77:5c:2c:48:a3:f1:e5:6e:3b:70:e7:ee:49:6b:
2a:58:5b:77:26:73:2c:46:7a:af:77:6c:7f:3f:8c:
6d:c6:07:3b:e2:ae:f2:d1:8a:de:bf:e3:d6:54:8a:
a1:ef:9d:2b:f4:c9:d3:da:16:99:f0:84:2a:57:3e:
d4:9e:a0:d0:d0:15:c7:2e:b7:25:0f:3e:06:09:b2:
46:42:da:21:63:f4:33:ca:77:7f:38:23:59:94:bb:
a6:9b:0a:f5:83:73:71:ea:b9:11:18:93:0b:eb:a6:
c3:66:6e:9e:ef:ef:6b:d2:ce:db:b8:c8:bc:b2:04:
6d:6c:5f:ad:ca:4a:dc:9f:bb:f9:c5:f4:5c:42:7a:
67:4c:af:02:09:de:a1:3a:bf:8c:44:f3:c4:f2:77:
55:cb:5e:77:64:e7:e6:5c:3c:35:80:2f:db:89:cb:
9e:91:64:3d:2e:24:0d:14:e1:de:18:85:fc:33:31:
f0:49:e0:93:81:56:c5:5d:f5:d3:98:71:64:68:76:
99:e4:f9:6c:21:58:35:2d:30:e7:ae:f9:88:b2:7e:
50:ea:ba:69:67:e2:72:07:8f:2c:8f:3b:3a:7a:01:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:86:42:D6:0E:EB:BD:89:9B:AA:E3:81:D0:A8:EB:9D:20:79:5A:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rYZC1g7rvYmbquOB0KjrnSB5Wrc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:6d:72:03:80:fc:88:0d:11:6a:89:97:51:f8:41:d8:cd:33:
cb:ed:37:79:02:d1:45:82:ed:25:b8:a4:c1:7d:11:5a:ac:56:
ab:fa:21:f4:1e:8d:9e:a4:18:30:03:08:77:b4:dd:a5:b8:ab:
9f:88:71:f4:fe:6c:c7:3a:71:ad:a2:c0:16:ce:3a:e0:84:1c:
92:04:c1:2f:12:2c:d6:a2:88:96:2b:a1:24:ea:64:1d:cb:33:
1e:c0:17:00:98:38:8a:22:12:08:a5:e2:32:8e:0f:cc:15:90:
4f:63:88:b7:f1:8b:86:e7:b1:24:68:e4:65:9f:b0:6c:16:10:
bf:e5:55:26:ae:b7:c0:66:7d:77:6a:b9:bc:4f:e7:74:20:98:
e9:7c:3f:54:ac:f4:30:94:24:d6:5c:52:b4:bb:4a:20:e9:9e:
fa:97:8c:8c:c6:39:42:86:f5:47:1d:d3:17:4a:f6:8a:5b:89:
bd:09:63:93:56:cc:bc:ba:65:c4:d5:2b:2a:51:28:c3:16:f2:
4b:cd:a6:3a:ee:e8:ae:48:59:31:71:8c:4a:74:2d:3b:6a:3e:
df:9b:1b:84:94:6f:d3:0e:92:46:9d:93:e7:c9:bc:bb:a2:56:
7a:16:e2:29:3c:5f:16:ac:6b:cf:3e:1f:ee:40:82:ba:fa:34:
e9:4b:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:13 2024 by rpki-client on console-ams.rpki-client.org