Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sfS7MZqABZJrXGXS1ywgWigHM5w.roa
File: sfS7MZqABZJrXGXS1ywgWigHM5w.roa (raw, json)
Hash identifier: mHZxTF+8F/07LEaxeeZFdbT14+09300473bXpDfW4t4=
Subject key identifier: B1:F4:BB:31:9A:80:05:92:6B:5C:65:D2:D7:2C:20:5A:28:07:33:9C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CB7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sfS7MZqABZJrXGXS1ywgWigHM5w.roa
Signing time: Tue 30 Apr 2024 20:53:36 +0000
ROA not before: Tue 30 Apr 2024 20:53:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19639 (0x4cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 20:53:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B1F4BB319A8005926B5C65D2D72C205A2807339C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:fe:9e:a8:b4:51:64:8d:80:e0:2b:09:4d:
b3:9d:f6:6d:12:4f:94:44:d0:e5:0c:e9:d6:8c:6e:
ea:2c:4b:b6:db:03:a2:5c:34:b4:6d:f8:99:93:1a:
f6:90:3b:1b:65:ba:73:6c:a8:bf:cd:83:81:36:9c:
e2:10:93:23:9b:14:3b:a1:82:6f:48:3e:c4:ae:cd:
7f:1e:56:53:ae:c9:cd:31:f4:f7:23:cd:78:7e:22:
6f:1e:02:0b:55:ef:9a:9e:1f:a8:01:24:1b:db:7f:
f0:e6:0d:44:e0:49:f3:41:b6:f9:bc:26:ae:0a:df:
f1:46:d2:cd:85:b3:db:ad:2e:d6:6c:ee:44:ff:82:
3f:fa:55:3a:45:8d:69:ea:78:da:24:28:c8:2b:dc:
89:c4:63:df:ac:0c:9f:16:94:50:21:6c:71:39:f6:
8e:e2:2a:20:5a:4d:4e:c5:7b:ba:b5:ef:d7:ea:0b:
3c:f9:ea:9a:63:97:16:e6:17:e3:04:b5:a9:39:b3:
30:f5:aa:5f:a6:87:86:a7:04:55:03:11:6e:6e:c0:
2e:99:48:e2:19:89:6d:85:1c:2b:f3:4a:49:14:30:
75:e5:9c:07:93:73:bb:a1:b1:7b:7b:44:5a:6f:ce:
cd:48:f6:98:f4:b0:8c:f3:a4:04:6c:27:34:d1:30:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:BB:31:9A:80:05:92:6B:5C:65:D2:D7:2C:20:5A:28:07:33:9C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sfS7MZqABZJrXGXS1ywgWigHM5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:f7:42:44:c7:a0:61:23:d7:b7:1e:8d:f1:ea:2a:51:1f:df:
f5:7e:35:7a:a3:a5:c3:3f:74:29:7a:59:e6:7c:3e:e8:be:5a:
04:4b:99:93:3a:c4:93:42:13:74:d5:3a:8b:ba:ee:f2:f6:2f:
43:8f:b0:e6:75:71:af:16:f1:6f:e7:8d:4e:ab:0e:1d:96:e8:
14:cd:cd:6f:fe:0a:f3:37:c8:a7:66:0b:48:95:12:8a:2a:7d:
69:89:8f:96:f0:db:5b:57:71:bd:d0:f1:1f:9f:33:31:f0:bb:
22:18:fd:01:84:67:88:9d:f9:f1:3e:af:3f:cf:d5:b0:5d:3b:
c3:8b:a8:31:34:ea:be:99:6a:5d:71:4b:74:61:f6:01:c2:5d:
b0:9b:dc:22:75:32:53:3e:2a:8b:30:08:45:78:f5:14:39:ea:
3e:9b:b0:e0:b9:a5:76:86:58:a8:7b:c5:0d:65:92:47:86:1b:
8f:d0:5f:c7:dd:b7:21:11:56:f8:3a:1f:8f:31:a8:ec:e0:91:
b5:6d:a0:da:42:7c:cd:94:ce:c4:41:f8:ec:6a:50:39:a5:5a:
ab:db:03:9e:8c:67:fa:a1:50:b2:63:bb:43:b4:30:5e:ce:73:
62:fe:87:ff:2f:ac:40:59:d3:df:0b:b0:70:30:3d:a4:35:73:
fe:ae:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org