Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v4DyuZEcq67AGZStPB5gpnWpsgY.roa
File: v4DyuZEcq67AGZStPB5gpnWpsgY.roa (raw, json)
Hash identifier: g6a0+/kJnEWnkL/C424DvAwnQ+sgiRyCj/5XMISLZv4=
Subject key identifier: BF:80:F2:B9:91:1C:AB:AE:C0:19:94:AD:3C:1E:60:A6:75:A9:B2:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v4DyuZEcq67AGZStPB5gpnWpsgY.roa
Signing time: Fri 12 Apr 2024 03:22:51 +0000
ROA not before: Fri 12 Apr 2024 03:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16043 (0x3eab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 03:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF80F2B9911CABAEC01994AD3C1E60A675A9B206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:78:c6:4c:a0:bb:5a:04:a1:b3:24:af:33:
90:f0:95:98:97:7e:dc:1f:c6:2e:64:aa:3b:e9:d3:
f1:cc:c7:d3:77:64:df:ce:59:6b:39:26:8d:f4:35:
a9:03:2b:07:c5:5a:d9:38:6d:9a:4b:d3:d8:68:16:
4e:57:60:5e:40:63:1a:62:e9:ea:97:72:ed:d7:e4:
8d:c0:db:65:92:73:2c:a8:da:43:61:d0:08:f9:63:
b7:dc:f9:56:d7:35:f7:92:60:3e:99:b4:55:0d:11:
a9:cc:19:f4:dc:a3:0e:77:a7:e9:ff:fc:38:c2:a7:
d6:8f:fb:2f:1b:ea:22:47:a8:4c:82:6c:89:78:b1:
da:08:ac:c5:56:5f:95:fb:83:24:d8:78:7a:70:c5:
26:f4:ec:c8:cd:aa:64:92:ee:b9:44:e3:0d:15:c7:
3c:1b:79:28:fc:52:b3:c3:e4:e3:91:8a:2e:c0:1b:
99:e5:03:38:57:25:3c:e1:1f:36:ed:ea:f6:f3:2f:
f3:8e:dc:83:4b:68:1f:ee:d5:3c:6f:78:cd:ea:4d:
08:c0:50:c5:af:f8:01:3a:e3:f3:a5:61:ea:8b:e0:
27:a8:9b:c4:77:f1:fd:13:80:01:5d:06:28:b9:cd:
94:ff:76:06:91:02:83:e8:31:b4:f4:22:f0:dd:8f:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:F2:B9:91:1C:AB:AE:C0:19:94:AD:3C:1E:60:A6:75:A9:B2:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v4DyuZEcq67AGZStPB5gpnWpsgY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:7d:fd:6f:1d:49:28:4b:3a:4b:61:e1:5b:f1:cf:f1:7b:a1:
00:80:86:f3:0c:aa:92:1a:56:45:8d:65:c1:98:b5:47:06:86:
7a:9b:91:d1:a2:5a:ac:23:a4:49:13:05:90:fe:44:a8:7d:4f:
34:17:3d:0b:81:5a:e5:14:24:f9:f2:c8:7f:71:68:50:48:6f:
d4:be:81:68:57:2f:5e:2f:73:13:b9:7e:ea:9b:99:e2:7c:ae:
af:5d:c6:e7:34:77:b5:7f:dc:02:80:03:41:72:33:52:65:cf:
23:ea:bf:7d:08:d4:c8:d1:7b:f7:6e:1d:2b:35:9f:2b:43:79:
ec:20:85:c6:50:6b:9a:6a:a4:38:82:5a:d7:04:d6:e5:04:65:
16:35:f1:06:e3:93:96:e0:6b:bc:42:6f:ed:1f:7e:92:da:96:
e3:fe:a9:e6:3e:53:fa:dc:00:67:b9:6a:5b:8b:20:5a:2f:38:
2a:ed:32:55:b7:3f:6b:c8:75:8f:d2:c1:b6:1d:0b:62:34:4b:
a2:ae:ca:49:57:18:15:db:5d:76:d9:77:c9:0a:38:1a:2d:48:
75:46:fd:64:97:19:32:50:c0:16:d8:6c:28:82:94:12:69:d0:
a9:dd:eb:15:9e:9b:cc:11:94:c4:65:81:72:30:e0:9b:ca:bb:
1c:96:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org