Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sLQjB-S745Ft7_inRkc994BTrfc.roa
File: sLQjB-S745Ft7_inRkc994BTrfc.roa (raw, json)
Hash identifier: x3w3rtenM+ehFIvXs0EfOKbabB6GSMqdFW+k5Sc6F9A=
Subject key identifier: B0:B4:23:07:E4:BB:E3:91:6D:EF:F8:A7:46:47:3D:F7:80:53:AD:F7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F37
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sLQjB-S745Ft7_inRkc994BTrfc.roa
Signing time: Fri 12 Apr 2024 20:52:48 +0000
ROA not before: Fri 12 Apr 2024 20:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16183 (0x3f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 20:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B0B42307E4BBE3916DEFF8A746473DF78053ADF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:cd:dd:6b:b9:90:06:1a:89:e9:54:a8:3b:
21:2c:88:5f:3b:03:a7:da:6a:7a:85:09:e6:7e:b9:
42:b7:35:71:d3:2d:ab:d4:01:00:3e:0e:f9:91:92:
d0:56:f8:61:73:73:13:c5:bc:5b:9c:87:f7:a1:63:
a8:1b:86:51:8f:c1:2e:d8:a5:a2:7c:55:cc:c1:5b:
97:32:a3:dd:0e:ad:ce:1c:4d:76:91:06:8e:87:56:
bf:2d:9c:b4:c9:23:e6:b8:69:fb:1b:dd:cb:08:e5:
72:01:08:74:3a:44:ac:4d:3a:44:34:70:86:88:63:
82:ea:d9:99:9f:eb:f8:9c:97:de:63:e7:59:35:06:
38:1f:e4:49:dd:f8:71:96:9a:1d:ce:17:d7:c9:bb:
34:f7:ee:19:34:ce:6f:68:cf:84:7c:92:46:b6:89:
68:40:e2:05:fe:c2:b2:4a:f4:dc:c0:34:4b:ac:3b:
91:3b:f4:76:f8:68:b5:11:74:38:6e:82:76:04:36:
be:bb:37:6c:1e:29:a9:2d:25:15:48:23:69:35:fa:
e8:eb:7a:ab:51:7b:d1:92:c4:cb:b3:bd:96:47:6e:
c8:d1:49:e9:f2:04:a8:ac:34:e9:97:19:44:94:e1:
ef:71:40:4b:35:30:d0:cc:93:9a:d9:25:cd:f9:ce:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:23:07:E4:BB:E3:91:6D:EF:F8:A7:46:47:3D:F7:80:53:AD:F7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sLQjB-S745Ft7_inRkc994BTrfc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:49:04:6e:f5:69:01:86:51:8d:da:19:5a:b1:fc:ac:72:c5:
02:41:d9:25:5a:6f:cb:8f:24:1c:54:4b:ed:af:62:44:66:e6:
fa:1f:0e:f9:1d:1f:ee:f8:0f:90:a8:7c:ac:d9:7a:9b:ce:2a:
08:6c:ec:1b:85:4f:39:d8:bb:0d:ff:6b:7b:48:c8:3e:63:90:
b1:b5:3f:63:3c:b8:51:21:67:01:79:d5:15:5f:68:c9:1e:d5:
8e:9f:ad:5c:1a:3a:13:49:b1:fa:27:08:6e:54:c0:d5:bc:ba:
9b:68:dd:e5:04:d4:1e:f3:14:33:e7:99:a8:30:92:99:36:ca:
90:75:1b:e7:40:7e:b5:d6:ab:60:75:7c:58:07:45:92:7e:66:
cd:b6:b2:bc:ce:2e:8b:54:8b:b1:ec:eb:ff:34:f0:5c:3b:70:
0d:3f:17:7a:d5:cb:36:80:73:99:84:54:d5:df:b4:7c:d6:6f:
e2:3f:b7:90:e4:04:18:44:e3:c7:69:a8:b7:43:d3:69:6d:27:
15:c1:61:97:9d:08:94:f5:e9:61:7c:67:bb:0d:2a:5f:23:ce:
a3:32:78:3f:55:0c:8a:99:d2:f4:c2:04:81:88:28:e0:05:f5:
43:ef:1a:09:6d:20:57:ff:82:ac:40:58:24:63:bb:c8:aa:6b:
bf:02:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org