Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sjqJmp4VLLAm3ycRiVT22motMDo.roa
File: sjqJmp4VLLAm3ycRiVT22motMDo.roa (raw, json)
Hash identifier: kZ4GtEatvazLeD6TVMb6ttcnGVcxbX6av7WSfFmW/Lk=
Subject key identifier: B2:3A:89:9A:9E:15:2C:B0:26:DF:27:11:89:54:F6:DA:6A:2D:30:3A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 439F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sjqJmp4VLLAm3ycRiVT22motMDo.roa
Signing time: Thu 18 Apr 2024 17:53:27 +0000
ROA not before: Thu 18 Apr 2024 17:53:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17311 (0x439f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 17:53:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B23A899A9E152CB026DF27118954F6DA6A2D303A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:99:4e:28:48:18:27:7f:04:9d:50:f4:03:
de:5e:d7:88:5e:d8:48:6a:17:be:9b:fc:ce:72:f5:
52:80:51:6b:6f:61:4c:57:38:a4:df:03:bf:35:d9:
70:b0:d4:09:a1:5a:06:4e:8b:26:24:5f:31:94:f9:
a0:26:1f:c9:bd:99:82:df:e2:0c:74:ad:91:18:9d:
c8:bd:a9:f8:c5:5c:14:a9:72:37:dc:71:81:f6:01:
7d:c6:d9:71:0a:ca:d4:ac:bf:04:72:7a:4e:09:9a:
c2:17:cd:b9:2f:4b:85:0e:5b:79:98:d2:c2:40:b6:
af:f5:3f:ab:96:92:51:ec:b5:9c:80:0d:f4:c2:ed:
b4:bf:37:a5:14:5b:8c:a3:ec:9f:13:79:96:86:1e:
ff:14:97:1e:f5:98:18:3b:64:48:8f:a1:aa:ad:ee:
44:c0:cc:51:d2:48:93:56:a9:f5:3a:30:2f:72:83:
94:d4:49:71:66:b1:8c:4b:ae:d1:1c:ef:43:c3:45:
a5:2f:e9:28:c2:2f:19:92:66:34:dc:2f:9b:64:8b:
0f:3b:c0:2f:45:25:95:a4:d8:c2:02:15:d8:23:43:
1d:1c:85:62:0c:26:70:2e:27:30:0f:9f:df:38:2b:
07:5b:f1:86:66:30:96:c1:b4:00:de:30:43:f5:89:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:89:9A:9E:15:2C:B0:26:DF:27:11:89:54:F6:DA:6A:2D:30:3A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sjqJmp4VLLAm3ycRiVT22motMDo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:d7:8c:ca:49:7c:b1:e0:df:96:9b:42:47:c7:a4:f3:d9:9b:
01:81:db:73:43:d8:86:eb:7a:ea:e3:d3:48:d0:de:3e:8b:97:
95:68:10:ab:1a:38:d1:36:46:7e:d1:27:9f:aa:cc:c8:04:0e:
db:8d:80:eb:ba:e3:4b:96:6e:a5:bb:cc:8c:4b:8e:d0:a7:0b:
56:36:83:6d:98:c6:6c:24:65:f9:0d:4a:58:64:75:4a:8a:ce:
55:8f:c9:b8:9c:2f:f4:49:4b:64:8c:1a:17:22:7f:98:e6:78:
5b:3e:58:6f:c4:8c:2c:63:a3:e3:a6:63:83:be:09:bc:d9:78:
b9:ef:f5:2f:fd:9c:f1:34:df:17:e6:0b:79:12:ae:00:f4:1d:
2c:c4:1d:4a:a4:d2:cd:80:fb:71:cf:5e:d7:77:15:bc:cf:6d:
5a:17:37:c2:96:88:76:cd:cb:3e:e4:86:e6:4a:9e:37:02:e4:
83:6c:6d:d9:dc:5c:92:17:55:6f:11:86:f6:df:43:16:79:9a:
91:f3:c4:a3:46:99:37:c9:97:00:4b:1b:23:e3:2a:65:e6:81:
b7:fd:f9:d4:f4:51:65:dd:0c:95:8e:8e:45:5c:c2:51:08:72:
c6:79:ef:cf:cf:21:f7:39:b9:5e:7c:4d:57:4c:c1:d8:a9:9e:
9c:15:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org