Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vkGGkwkeaWXBSGLbitbn_4zFD5s.roa
File: vkGGkwkeaWXBSGLbitbn_4zFD5s.roa (raw, json)
Hash identifier: wPlZFwqfUZ+ie4p6bsIYUv14hLh7UNQtGkt82It9pcQ=
Subject key identifier: BE:41:86:93:09:1E:69:65:C1:48:62:DB:8A:D6:E7:FF:8C:C5:0F:9B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D37
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vkGGkwkeaWXBSGLbitbn_4zFD5s.roa
Signing time: Wed 01 May 2024 12:53:38 +0000
ROA not before: Wed 01 May 2024 12:53:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19767 (0x4d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 12:53:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BE418693091E6965C14862DB8AD6E7FF8CC50F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:de:9e:75:6b:62:fe:38:7d:44:2a:11:fd:
37:f8:a3:bd:71:65:e7:4f:9c:b8:b9:ba:cc:83:88:
1d:3f:b2:c3:b8:97:f0:34:c2:3a:c5:2c:ac:e3:80:
ea:44:07:ed:f3:1c:83:b3:07:8b:c4:d5:4b:5b:40:
8d:ac:77:57:67:78:09:a9:b3:e3:4a:6a:92:5c:a6:
24:21:b0:89:d3:d0:8c:c7:26:ac:63:1f:b5:00:27:
cc:c9:82:49:91:cf:8c:3b:0a:ed:2c:1d:6f:cf:1d:
29:eb:c2:87:14:2b:d9:dc:b1:d3:bf:37:1e:6c:19:
66:b8:94:a0:89:1c:ec:a3:01:e9:44:dd:85:c5:95:
ab:87:f8:6e:7b:02:b9:0e:fc:6e:ae:a2:7d:3f:5d:
c7:96:58:44:1f:30:59:97:2a:2f:9d:e5:f9:c9:34:
c9:d9:ed:98:18:fb:c5:c9:71:9d:ed:65:1f:9f:e7:
42:65:87:87:be:aa:ac:13:dd:c6:7e:8f:5a:8d:7b:
9f:33:4b:86:95:8b:a5:a9:b0:1d:44:bb:5f:75:2c:
25:ff:dd:99:eb:6d:df:0f:cd:19:05:0e:01:1b:60:
df:c3:cc:32:71:c6:83:ce:b0:c3:e3:12:47:db:ad:
f6:98:f8:bd:47:17:53:aa:e5:ff:de:cc:fa:e7:79:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:86:93:09:1E:69:65:C1:48:62:DB:8A:D6:E7:FF:8C:C5:0F:9B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vkGGkwkeaWXBSGLbitbn_4zFD5s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:81:35:0e:e1:29:c1:8e:65:c2:1d:b9:99:e9:4a:97:1c:7c:
df:9d:49:a4:97:d5:f2:d9:e2:62:a3:1c:5d:d8:59:b3:bf:da:
61:26:d9:7f:7f:30:aa:99:92:3e:1e:4f:53:bc:fc:fc:58:ee:
a8:f9:34:c7:54:c2:e5:61:7a:64:a3:ac:b7:a6:4d:f8:a5:61:
a7:9d:cd:d5:48:4b:fd:f4:3f:7f:10:05:8d:ba:74:ba:8b:27:
3c:24:04:c2:22:a2:c3:04:15:b0:61:49:25:13:b1:cd:f1:f4:
1f:f9:38:fe:58:a1:8a:c7:ff:02:d6:44:49:c7:fc:41:aa:38:
85:e1:38:87:ea:9c:09:6a:8c:6f:57:cf:8a:43:18:1a:67:63:
b5:87:90:7f:3b:76:4e:72:14:65:5d:a8:67:bb:a3:34:80:04:
7d:0c:bd:17:70:b9:a4:5e:f4:6f:0e:3c:26:5a:23:2d:c0:16:
89:8f:28:a3:b1:dc:16:71:03:e5:7b:12:a4:f4:8a:d4:17:20:
6c:dd:d0:46:16:fe:2d:e6:d6:a7:07:08:bb:44:db:b1:e6:c3:
29:0e:63:04:c2:90:d8:7b:7b:83:50:85:28:e1:39:8f:7e:e8:
6a:91:27:bf:5c:ec:2f:ee:fa:8e:f8:ca:55:5a:9d:ca:79:5a:
e8:30:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:18 2024 by rpki-client on console-ams.rpki-client.org