Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wYgsoueM4lPZT7ex-FqEUwni_Hk.roa
File: wYgsoueM4lPZT7ex-FqEUwni_Hk.roa (raw, json)
Hash identifier: UA7W4OwiaNuQiJcCes0QCc2vLVwsasxgUyawiLYgVis=
Subject key identifier: C1:88:2C:A2:E7:8C:E2:53:D9:4F:B7:B1:F8:5A:84:53:09:E2:FC:79
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wYgsoueM4lPZT7ex-FqEUwni_Hk.roa
Signing time: Wed 24 Apr 2024 13:53:14 +0000
ROA not before: Wed 24 Apr 2024 13:53:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18431 (0x47ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 13:53:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1882CA2E78CE253D94FB7B1F85A845309E2FC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:95:ea:58:82:af:a1:78:34:8c:db:aa:6e:
0a:44:0c:b4:77:5b:07:e3:f1:ea:22:1d:f0:51:56:
dc:1b:5a:ef:ec:16:70:90:f0:d0:21:dd:ac:aa:ac:
35:fa:3a:b1:6b:33:8e:54:ba:40:48:b4:93:93:c7:
c2:83:84:e2:b5:d4:7c:dd:f2:02:23:5e:a4:03:b6:
09:e9:1f:d0:f0:35:d8:39:27:13:bd:81:6d:db:10:
e6:98:19:36:06:62:5f:d0:fe:64:b0:e5:8d:e8:98:
f0:91:cc:70:45:19:0e:3a:77:83:ae:72:cb:8a:76:
f0:86:32:83:f2:1c:0c:79:e6:7c:56:d8:7f:e1:8e:
f4:97:d0:42:e9:31:fa:cb:f4:e3:9f:8e:82:f5:f0:
ce:f8:bb:5f:c8:77:2f:ef:0b:ed:41:15:e7:03:33:
d0:1c:25:a9:ee:e1:22:f2:ef:19:00:a9:3f:2b:6e:
f5:20:6d:90:df:82:07:69:a7:21:91:a2:2a:e6:ba:
5f:b0:ae:cb:8f:33:72:02:71:66:77:04:a5:9d:06:
78:f3:6d:dd:ca:49:38:48:59:76:06:e2:cb:46:d5:
9a:b5:f6:7d:a1:3d:73:67:14:b5:98:ee:4d:d8:93:
bd:7e:c5:6a:a9:9e:2c:71:f6:02:17:69:ef:ba:e9:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:2C:A2:E7:8C:E2:53:D9:4F:B7:B1:F8:5A:84:53:09:E2:FC:79
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wYgsoueM4lPZT7ex-FqEUwni_Hk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:3e:a9:c9:98:80:99:8f:4b:d8:cb:c1:46:d0:91:98:97:b3:
27:d7:23:92:8b:84:38:40:00:41:be:67:70:e6:a9:bc:d7:56:
ae:40:a5:c4:66:bc:af:b4:7c:b5:29:f6:23:7a:f9:24:24:a3:
ee:bf:de:d7:f9:0b:5d:43:0b:90:fb:97:02:7e:76:42:41:44:
04:aa:24:9d:57:77:87:fa:22:ae:f6:4f:26:b9:d3:d8:a3:e7:
46:93:15:47:34:1c:1e:87:37:ed:0e:03:d3:8c:6c:18:4c:e4:
85:41:16:4c:60:a1:f1:f2:ea:65:b4:f9:80:ce:93:34:e0:a8:
e5:7b:bf:8d:05:57:b0:e2:cd:f1:8a:23:fd:0b:73:37:48:cc:
9f:bc:62:a9:47:ca:e6:13:f8:3f:43:2e:7d:d7:a0:69:32:2b:
65:d1:28:14:ae:ba:4a:fd:fc:07:8d:a2:1d:fe:e6:ac:5f:1e:
b9:d6:3d:e7:56:c0:e2:18:a9:53:09:a3:21:73:3e:6e:22:16:
37:58:00:5c:22:6d:ec:7c:a4:84:c7:57:86:08:8e:ca:30:3f:
31:ef:f5:30:cf:38:00:b1:39:f3:ee:4e:f8:44:ad:49:ef:81:
68:86:2e:60:e7:43:4f:83:10:dc:a4:c8:6e:80:ad:95:da:b5:
7c:95:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org