Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tZ3e59hVDIHnM9x-VOIBNmzIy08.roa
File: tZ3e59hVDIHnM9x-VOIBNmzIy08.roa (raw, json)
Hash identifier: QnGU+QI/KG4D/JBgamgGyDIdbLDHlyt1geS3pnagUVo=
Subject key identifier: B5:9D:DE:E7:D8:55:0C:81:E7:33:DC:7E:54:E2:01:36:6C:C8:CB:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 489F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tZ3e59hVDIHnM9x-VOIBNmzIy08.roa
Signing time: Thu 25 Apr 2024 09:53:19 +0000
ROA not before: Thu 25 Apr 2024 09:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18591 (0x489f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 09:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B59DDEE7D8550C81E733DC7E54E201366CC8CB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:bf:91:bf:3b:21:be:60:e3:19:3b:72:7a:
71:62:be:7d:3d:d2:00:63:e3:d9:40:74:10:08:87:
f5:91:08:d6:40:10:a7:74:9a:95:00:5a:a5:d3:d9:
08:7a:bc:e4:1b:89:88:a9:e9:1a:4a:01:ba:4a:f5:
1a:6b:b9:a6:ec:31:eb:a2:6a:15:03:6d:3a:9e:a7:
13:25:ec:c4:6a:6e:34:7b:9c:87:80:03:58:32:2e:
77:7a:2c:41:dc:ec:dc:96:c4:bc:9b:9b:04:bf:90:
ea:9c:89:f0:2a:be:51:cb:4b:8a:2f:f9:c5:59:a7:
5d:90:11:8b:81:72:fa:f9:8b:80:5c:1c:9c:b5:cc:
f0:88:eb:6a:ef:7f:9b:79:39:97:9f:00:87:b6:fc:
28:d9:3c:f8:92:a2:0f:24:1c:6a:0f:1d:28:0b:b4:
50:ec:66:66:b6:8d:c0:a1:0e:50:e4:e8:ea:3c:f9:
8a:a5:53:e2:b6:c4:59:8d:f8:fa:db:22:21:de:5a:
a4:31:4e:11:91:c2:f6:dc:45:18:80:fb:b2:ee:1a:
8d:da:f5:de:0c:22:b2:6e:f4:9e:3f:bf:73:e4:db:
d9:68:75:07:8f:58:11:d0:8b:ed:08:fd:20:d1:5c:
e8:ce:76:93:cc:47:f7:63:3f:02:76:1a:b9:79:86:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:DE:E7:D8:55:0C:81:E7:33:DC:7E:54:E2:01:36:6C:C8:CB:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tZ3e59hVDIHnM9x-VOIBNmzIy08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:e3:79:60:2f:b8:21:71:00:46:44:98:be:02:f0:2f:ff:14:
a6:3c:f7:c4:a6:a0:bb:a6:40:ba:05:e1:de:0b:35:31:6a:cd:
57:d6:c5:9d:1f:0d:5d:b6:90:1c:35:57:01:a8:68:a9:82:b7:
c9:69:6b:92:ca:9d:79:80:1c:1a:e4:54:71:01:11:cf:fe:7c:
a7:81:d5:81:7c:fc:ad:15:fc:3b:2a:62:0a:94:1c:9a:c8:e2:
ec:fe:18:4a:14:29:1c:83:86:c6:db:f7:a6:40:78:8d:c9:9d:
32:68:e2:b1:aa:7d:74:1a:34:27:20:fc:10:ae:e9:4a:39:2f:
37:df:7f:22:e0:cf:a1:a0:ee:9f:d8:0a:3d:08:88:4a:ad:0f:
37:15:fe:b2:5a:53:71:c0:7c:3b:e6:6f:dd:4e:9b:d6:fb:e8:
70:99:b6:f1:0b:3d:6f:4c:fc:2b:a7:3a:9b:8c:fe:1c:f0:46:
72:29:9f:03:e7:88:2f:e6:4d:c4:aa:ef:03:4d:1e:d1:1a:4c:
cd:8f:ad:99:66:1f:ed:b0:e9:0f:2f:18:cc:ac:17:c9:d0:7d:
68:5c:e8:ca:cd:0c:6f:11:6e:07:17:47:e8:4b:f8:57:da:af:
47:68:bf:18:d7:51:9f:dc:78:b3:e0:27:11:2f:ce:15:e3:f9:
07:e5:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org