Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/u67RPuA-j-mZ0gH6TGAfSr2qyEc.roa
File: u67RPuA-j-mZ0gH6TGAfSr2qyEc.roa (raw, json)
Hash identifier: 2JXRmvjGLnsmH0+rnue3c7bBg15q+756Om2MEVFqrAE=
Subject key identifier: BB:AE:D1:3E:E0:3E:8F:E9:99:D2:01:FA:4C:60:1F:4A:BD:AA:C8:47
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5607
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u67RPuA-j-mZ0gH6TGAfSr2qyEc.roa
Signing time: Mon 13 May 2024 06:54:11 +0000
ROA not before: Mon 13 May 2024 06:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22023 (0x5607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 06:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BBAED13EE03E8FE999D201FA4C601F4ABDAAC847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:8b:d6:6c:73:24:a7:c7:7f:2f:a5:34:f4:
cd:a4:9b:58:3e:d0:11:d4:0a:ab:4c:4b:cc:28:61:
b3:45:f9:ef:b4:7f:5b:92:1d:da:59:8a:ae:6b:9c:
1b:8e:ba:2b:50:5d:a3:e6:96:75:dd:68:2d:9d:d5:
f2:65:ac:6c:3f:4c:2c:37:dc:27:fa:20:d7:10:41:
74:91:50:ba:bc:5f:ba:ae:d3:4d:38:af:1b:b2:b1:
96:fd:66:87:11:4b:b1:95:c8:cb:79:a3:15:ec:e6:
92:5d:dc:b2:45:cd:97:2e:99:d3:0b:19:d2:71:e3:
05:48:cb:50:f2:69:53:0b:f1:29:b8:05:7b:31:27:
fe:48:c7:44:6f:0e:b6:d0:5d:5f:2f:0b:c8:d4:e6:
05:ac:13:78:06:8d:a4:87:84:43:c7:f8:9a:98:c1:
d0:37:d0:f1:0a:2c:a8:3a:f0:b9:5e:cc:35:0e:15:
e6:3a:e4:b9:3a:52:18:38:ce:77:42:2f:86:be:04:
77:60:09:54:ab:02:0d:70:b9:c2:31:d8:ed:63:e1:
f0:2d:3c:06:5b:ec:bf:1e:33:3a:38:5a:e8:c0:12:
ac:1f:68:d7:5e:c4:62:9e:6d:24:31:96:e9:63:d6:
c3:50:6e:d4:b2:02:6d:25:6d:ee:ef:09:83:9e:04:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:D1:3E:E0:3E:8F:E9:99:D2:01:FA:4C:60:1F:4A:BD:AA:C8:47
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/u67RPuA-j-mZ0gH6TGAfSr2qyEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
20:45:a0:a0:a8:67:c0:a0:b9:fb:bd:80:1b:15:60:51:2c:79:
77:40:d1:fa:1b:c5:08:b7:90:0c:85:63:11:d7:63:04:71:2b:
60:cc:16:ca:69:1b:20:db:08:de:e2:fa:c4:dd:94:7c:80:50:
2c:e1:57:83:ab:81:13:63:59:ec:6b:f2:30:c4:8b:31:d9:fa:
8f:45:51:fd:b2:11:f2:ce:b5:36:c6:ae:47:25:2c:1e:7f:58:
f9:a2:d9:00:56:4b:f9:58:49:49:a0:40:ef:2d:55:d0:96:b9:
04:cd:5d:8e:b6:de:23:82:f9:46:ac:e5:49:1f:ff:75:ae:18:
92:cb:72:2e:d2:09:0e:88:f2:20:e5:a3:f5:9f:17:94:6b:30:
ca:27:2d:e3:23:99:90:ea:92:e7:da:4e:0a:54:b0:db:72:bd:
19:1b:62:d7:b7:c1:00:22:7a:b8:63:e0:86:a8:68:05:ef:c0:
86:01:0e:00:c6:cf:14:32:5c:8f:12:b5:3f:06:62:b4:8f:3d:
73:3e:72:5d:01:c5:b9:0a:f0:22:83:99:22:fb:4a:2d:73:af:
a8:8f:10:e8:eb:e0:ed:08:87:40:f1:d1:2d:f1:0c:ca:28:3b:
35:b8:1b:8a:91:19:23:b3:b7:12:da:fa:c1:d7:71:8a:36:49:
1d:c0:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:16 2024 by rpki-client on console-ams.rpki-client.org