Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sOgkXlOYjMwa2UAuVmfh90i2Cd0.roa
File: sOgkXlOYjMwa2UAuVmfh90i2Cd0.roa (raw, json)
Hash identifier: rlQO0cJyb2pEhB7wkfRjTEELVOh68Ov+NvXPzs6pUGE=
Subject key identifier: B0:E8:24:5E:53:98:8C:CC:1A:D9:40:2E:56:67:E1:F7:48:B6:09:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EB7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sOgkXlOYjMwa2UAuVmfh90i2Cd0.roa
Signing time: Fri 12 Apr 2024 04:52:48 +0000
ROA not before: Fri 12 Apr 2024 04:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16055 (0x3eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 04:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B0E8245E53988CCC1AD9402E5667E1F748B609DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:e5:e1:76:01:b5:da:e4:92:1b:98:ba:8b:
be:a3:ed:60:db:5e:13:05:36:1f:8d:43:c3:ab:b1:
ab:36:07:2e:83:1b:05:e6:6b:28:6e:c2:e1:10:aa:
2d:e7:bd:02:fd:5b:9c:2d:c5:f6:74:38:96:67:a1:
02:64:5b:ea:56:14:1a:63:3a:63:2d:42:62:81:d0:
ff:84:4a:4e:bf:f5:4a:1f:b8:21:21:aa:32:3b:43:
27:96:8f:ef:64:bf:ac:4d:2a:74:b9:19:72:99:0d:
57:e1:f4:5c:fb:3d:57:61:d9:ca:65:8d:b6:59:f7:
96:54:b8:f6:9e:2f:b1:02:43:2d:a1:c8:bf:ca:14:
2a:a1:77:65:81:aa:d0:7c:99:42:4c:85:6c:4f:56:
f5:63:19:28:01:92:d5:a3:e5:42:8d:67:0c:02:38:
b9:db:7a:a9:cd:1f:43:51:f4:ea:6f:03:73:5b:12:
47:ec:c6:97:21:40:9c:d3:b9:fc:e8:63:13:4e:bf:
86:5e:e1:92:e6:68:5a:6a:bf:20:70:78:5a:3c:79:
45:51:c3:f4:12:27:15:e4:cd:91:a8:e0:6b:07:c3:
26:53:7e:57:7f:eb:71:4a:3d:19:40:fe:aa:a4:b3:
fd:69:86:ca:34:ce:b2:e3:e7:29:07:a7:36:52:82:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:24:5E:53:98:8C:CC:1A:D9:40:2E:56:67:E1:F7:48:B6:09:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sOgkXlOYjMwa2UAuVmfh90i2Cd0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:a8:73:99:33:27:03:2e:aa:8c:ed:22:35:a8:8a:bc:4c:3d:
f9:e5:97:01:ce:89:23:48:5b:a7:f6:1e:13:d3:b4:17:eb:d7:
87:c7:1e:ea:1f:2d:d9:e7:17:2b:40:f1:32:6e:4e:e9:77:8f:
ea:e2:7b:e2:61:01:d4:68:d9:9e:aa:e1:b8:4a:94:45:64:5e:
3b:08:8a:86:fe:27:8a:e8:42:75:fa:26:26:60:67:12:2e:68:
ad:5b:8f:20:a4:fe:94:82:09:ae:3d:28:50:b0:73:21:2f:25:
c4:5e:49:b5:9f:38:08:bd:10:4b:88:84:a6:3f:43:1d:e3:66:
9b:a7:34:db:5a:ee:28:5b:c7:35:8e:ef:27:1f:5f:13:c3:c1:
ed:a6:28:62:6e:08:ee:6a:20:0f:9c:2b:d8:a0:10:ef:60:bc:
b3:52:47:4e:f0:98:3f:ba:fa:57:69:e9:73:8c:3f:d2:17:08:
7c:c1:21:0e:bd:83:f3:8f:34:24:40:62:51:1a:55:e0:78:d2:
6c:90:e0:50:c6:67:56:a9:19:37:2c:52:27:4e:72:89:94:62:
c4:26:15:04:33:2f:3b:ec:cf:6a:c5:29:24:45:78:ab:e2:95:
04:e8:00:96:0a:08:6e:32:bf:7c:cd:83:71:85:f4:9a:a5:15:
c1:04:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:14 2024 by rpki-client on console-ams.rpki-client.org