Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uzTCokYr7ePWjGFjoNks2TbYVYs.roa
File: uzTCokYr7ePWjGFjoNks2TbYVYs.roa (raw, json)
Hash identifier: D7MLmdoLtIR0Win1ZbVHWO7FSiKjNcU3ZTztK5Y+7ZE=
Subject key identifier: BB:34:C2:A2:46:2B:ED:E3:D6:8C:61:63:A0:D9:2C:D9:36:D8:55:8B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 549B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uzTCokYr7ePWjGFjoNks2TbYVYs.roa
Signing time: Sat 11 May 2024 09:24:09 +0000
ROA not before: Sat 11 May 2024 09:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21659 (0x549b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 09:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BB34C2A2462BEDE3D68C6163A0D92CD936D8558B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:c6:e6:f2:db:e5:c1:92:fc:8c:ee:64:66:
f2:40:f9:a6:e2:03:8a:22:22:ca:25:57:c8:80:b7:
83:d3:20:b1:d4:6f:27:be:fa:1f:2f:b1:0b:df:9d:
e0:8f:d7:af:63:77:1b:af:08:ab:f8:e7:11:d1:41:
c2:39:3c:78:83:2d:3a:84:75:f9:0c:88:6f:f7:5c:
b8:92:ae:f5:0f:cf:25:ae:43:ee:7e:4a:53:0a:bc:
9a:dd:32:ef:59:84:e6:df:69:90:f6:3a:45:43:cb:
ec:86:2a:36:16:94:fe:dd:ea:d9:55:32:ff:79:34:
77:6f:22:e9:e9:4b:ad:13:0a:73:68:1a:e9:48:1c:
4f:5b:34:c0:65:7f:91:03:32:59:2c:28:d0:de:95:
96:f1:4b:f2:53:2b:62:98:56:3a:0f:b7:bf:b4:ea:
86:2f:63:22:f8:25:fd:92:df:e7:9a:46:75:a6:fa:
02:34:0f:e3:7d:41:c5:bd:48:e7:a9:17:76:73:b7:
7e:b2:a1:06:b0:7f:f3:fb:1f:48:e7:f4:ec:2d:01:
52:15:01:9b:68:fe:37:39:7f:c9:75:ad:2e:5e:4b:
6a:bb:1f:4b:9c:23:4b:7d:15:eb:f9:62:44:ec:ac:
21:1a:74:74:07:84:74:83:b5:c0:b9:c6:d9:f6:ba:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:C2:A2:46:2B:ED:E3:D6:8C:61:63:A0:D9:2C:D9:36:D8:55:8B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uzTCokYr7ePWjGFjoNks2TbYVYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
63:bb:0d:1f:ab:ef:19:70:85:ff:ad:d9:8b:8a:27:75:75:fe:
f4:d7:ff:5f:23:31:af:87:45:96:2e:be:53:9b:bb:0f:3e:d1:
d9:68:6e:79:de:fa:83:bd:0c:f5:74:3a:56:9f:79:bf:dd:7a:
be:aa:d3:c5:df:38:f5:76:6a:92:4a:7b:8a:66:2b:aa:c9:ad:
9e:45:c5:ed:d2:ce:f3:17:8d:fd:70:1c:1b:b6:cd:ae:5f:30:
b9:83:1d:47:3f:4b:9e:3a:dc:19:48:39:5f:64:4c:53:5d:d3:
f3:a5:28:d3:bc:af:2c:dc:87:00:82:53:f3:25:2c:5e:85:d5:
e0:1d:df:08:f6:3f:20:65:20:b2:34:8c:24:24:67:36:b9:8a:
bb:97:39:97:4e:b2:39:71:0a:77:32:e5:ad:b2:bf:dd:f4:93:
13:13:44:dd:d4:06:17:5a:05:25:5a:0c:ce:07:f9:c6:b6:40:
f3:43:17:5a:aa:0f:55:00:a5:df:9c:a3:f7:82:e9:21:71:4b:
ea:64:cb:76:45:94:6b:c2:ad:34:75:85:46:70:cc:d3:c6:0a:
94:ae:7a:bb:ef:4e:e4:9c:37:99:66:c6:23:0a:9f:83:39:8d:
8f:bc:53:65:ef:f4:67:30:c1:de:42:e0:2a:1e:ec:df:0a:0f:
41:4a:d1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org