Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uGfhgBY5zIhxqoII9lLKyMT2XDQ.roa
File: uGfhgBY5zIhxqoII9lLKyMT2XDQ.roa (raw, json)
Hash identifier: TYl/kb4byk0K2k0z6jum4LDV0tEdZZ8O3ytLcwKvMwQ=
Subject key identifier: B8:67:E1:80:16:39:CC:88:71:AA:82:08:F6:52:CA:C8:C4:F6:5C:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A77
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uGfhgBY5zIhxqoII9lLKyMT2XDQ.roa
Signing time: Sat 06 Apr 2024 12:52:27 +0000
ROA not before: Sat 06 Apr 2024 12:52:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14967 (0x3a77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 12:52:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B867E1801639CC8871AA8208F652CAC8C4F65C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:96:51:1c:66:3e:2a:e9:a6:2d:76:fd:01:
b3:44:3b:68:44:92:bd:cc:98:df:8c:33:88:a9:21:
9e:30:d1:f9:29:ab:3d:f2:50:9d:ed:12:67:ce:b9:
32:53:2d:64:2a:b2:be:85:ad:e8:ea:72:a5:e7:34:
b5:c1:72:df:0d:a2:26:73:2c:07:1e:9a:86:3a:41:
f5:e2:13:13:ff:b7:18:c9:03:d3:cf:fb:9e:25:30:
8a:42:8f:c3:9c:30:8a:75:fd:7c:f9:8f:3d:d1:70:
a8:3b:73:4a:e2:ac:a4:ac:9e:d9:ee:5f:ca:7f:b0:
58:a1:b4:9c:01:9a:36:3b:2d:82:78:2e:2a:2a:b1:
f4:0a:6a:12:a0:6c:00:f8:8b:15:37:64:b6:13:86:
ca:6a:fe:c2:b4:18:87:bd:b5:1e:e9:5b:c6:8e:0e:
7e:ee:48:99:fb:af:e6:20:32:59:e9:87:85:08:69:
6b:e2:06:0a:75:21:9a:d1:c7:62:ec:23:b9:9d:73:
3d:c1:4a:c5:af:a1:8d:57:79:ab:94:27:32:cc:56:
c6:56:31:5f:ca:e9:e3:0c:0f:39:e9:d7:52:d7:ac:
2f:be:70:21:2e:51:a9:d6:da:b5:31:92:98:98:3c:
79:dc:8c:0f:8d:c7:fe:21:d6:37:09:f6:72:1d:46:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:E1:80:16:39:CC:88:71:AA:82:08:F6:52:CA:C8:C4:F6:5C:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uGfhgBY5zIhxqoII9lLKyMT2XDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
14:09:c9:da:2b:52:c6:6b:11:6a:c2:6e:98:f9:70:88:b6:77:
32:da:db:ab:55:d6:4e:4e:4d:fa:4a:d0:c1:ed:4f:18:56:a1:
5b:70:9f:be:01:3e:d3:33:00:0a:5f:50:88:70:e4:26:d8:bc:
09:25:58:fa:54:37:e1:88:5a:72:64:21:67:92:03:8d:64:d4:
bf:64:9a:18:34:ff:c2:7e:c0:8c:5f:62:a5:54:46:ce:15:5a:
f4:fb:ff:0c:0e:12:a0:6c:9b:b2:6a:2d:11:00:59:d4:43:8d:
7f:32:83:96:60:14:91:f9:13:54:89:f4:a3:0b:75:84:5f:70:
c8:f0:7c:68:b8:8f:07:e4:43:f4:ce:17:11:11:5e:b3:5a:fe:
91:05:d7:7d:34:b1:75:3c:4f:d1:8d:8a:4b:d5:2a:b2:ae:78:
7a:b3:c8:64:ae:ba:90:d0:1a:de:7e:58:25:fe:0c:39:66:28:
48:f6:d9:53:73:d2:47:dc:d7:8c:eb:08:ed:31:0d:57:25:7f:
22:1e:7a:4b:43:71:67:38:78:32:91:81:09:3e:e2:04:03:c7:
2c:8a:0c:3b:82:a0:43:4e:48:dc:5b:bc:4c:7a:3d:5d:1a:da:
d0:32:54:96:9b:9a:99:5d:b1:d8:2b:46:70:90:80:d2:82:02:
1d:3d:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org