Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wUUvxQj_AuofpzA7kwIr2qkRv0I.roa
File: wUUvxQj_AuofpzA7kwIr2qkRv0I.roa (raw, json)
Hash identifier: 4lp3hSfbBNsBdFmYbPN8yy1CVP4gLfSNhksb/UeWBUk=
Subject key identifier: C1:45:2F:C5:08:FF:02:EA:1F:A7:30:3B:93:02:2B:DA:A9:11:BF:42
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3783
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wUUvxQj_AuofpzA7kwIr2qkRv0I.roa
Signing time: Tue 02 Apr 2024 14:22:15 +0000
ROA not before: Tue 02 Apr 2024 14:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14211 (0x3783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 14:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1452FC508FF02EA1FA7303B93022BDAA911BF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:ab:fa:4d:94:7c:7f:c4:70:84:a7:18:68:
b5:4a:2d:56:0b:69:29:e2:6c:24:c2:a6:b4:51:d3:
2c:75:cd:50:23:4f:cb:fd:a2:e1:ea:70:be:86:7d:
72:f7:f3:47:f3:20:e1:00:3b:82:d3:a5:57:a7:7e:
5c:44:b0:9a:db:d5:97:46:f3:0f:0a:c3:6a:1c:05:
1d:82:1a:19:a4:88:44:84:6c:24:ec:0b:d3:a5:90:
be:95:cf:82:0b:f9:56:56:01:d5:6e:33:ef:67:21:
cd:6e:5f:82:cc:ae:ea:fe:4f:ea:dc:4a:2b:f6:7b:
ba:a9:63:0d:24:d7:eb:b4:ad:30:ed:99:a9:9d:c3:
75:0a:d3:69:b9:32:39:f4:2c:aa:bf:50:2e:d2:07:
a8:42:93:7c:8d:50:60:75:bc:2a:14:49:1c:56:21:
1b:87:fc:e2:82:b1:f3:cb:5a:4a:01:3f:0c:c3:12:
af:ee:85:ff:95:f7:67:7c:06:e9:6f:af:73:1c:ec:
56:6f:5f:f1:c6:17:93:89:e3:66:a6:94:4c:81:3e:
66:d5:11:fe:31:23:9a:2a:0d:71:c7:de:83:de:68:
1b:2d:13:c7:2a:e1:8e:02:ec:1e:17:2d:6a:e1:5c:
9c:07:a1:8c:9e:95:0c:09:61:4d:8a:86:35:3c:3b:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:2F:C5:08:FF:02:EA:1F:A7:30:3B:93:02:2B:DA:A9:11:BF:42
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wUUvxQj_AuofpzA7kwIr2qkRv0I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:c2:dc:67:ba:c8:77:b0:cb:22:0d:d0:d5:56:1b:b0:7c:2f:
77:dc:f6:16:d2:63:07:ac:c1:e7:07:6a:cc:0d:d1:cb:95:69:
dd:8c:dc:6b:a4:d7:e0:06:b5:a8:1e:6b:a6:55:8b:78:20:a0:
9f:83:bf:f7:38:b6:f9:09:11:ee:ee:59:b8:bd:1d:06:79:56:
8f:95:59:5b:f5:cd:9e:ee:dc:9f:0d:1a:5c:bd:6a:df:bf:95:
e1:eb:39:b6:20:9b:80:8a:ed:b1:26:ad:6e:c5:aa:d3:73:c4:
8e:7c:87:03:b0:9c:4d:a2:32:32:ee:b7:54:8a:f6:b7:1c:df:
5c:f9:45:53:42:24:1d:72:ee:50:93:02:8b:ce:d5:28:f2:c6:
32:cd:2e:b1:61:61:da:1c:8a:98:71:b4:c6:fd:a9:29:a7:aa:
4a:fa:c3:04:09:2c:0c:99:34:f1:7a:13:9f:ca:fa:66:5d:48:
76:4d:f9:7e:a0:8d:38:02:94:f7:ad:43:d9:6b:a5:1b:48:38:
1d:c2:58:b2:f1:52:a6:0a:5a:07:7e:05:eb:65:17:3c:ed:cd:
9f:bd:39:05:64:a6:ed:10:8b:c9:b8:7e:89:14:a7:76:de:6a:
a9:47:d7:ef:36:e2:e7:42:1a:da:55:49:87:bf:37:56:49:8d:
ed:0c:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org