Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/x0Fs3O6-DjBendvNm0XoBlIDi-k.roa
File: x0Fs3O6-DjBendvNm0XoBlIDi-k.roa (raw, json)
Hash identifier: SkDGfAHkfC30549gVVJCrLjIYwV9AavUdTzfSFmubnM=
Subject key identifier: C7:41:6C:DC:EE:BE:0E:30:5E:9D:DB:CD:9B:45:E8:06:52:03:8B:E9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 501B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x0Fs3O6-DjBendvNm0XoBlIDi-k.roa
Signing time: Sun 05 May 2024 09:23:51 +0000
ROA not before: Sun 05 May 2024 09:23:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20507 (0x501b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 09:23:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C7416CDCEEBE0E305E9DDBCD9B45E80652038BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:97:f8:11:9f:16:41:44:d3:cd:9d:d1:d3:
6d:0f:55:e6:7e:d6:3d:41:ba:89:71:45:0a:79:95:
1d:45:d1:7d:95:03:24:0a:fd:9f:17:e7:37:ad:8c:
89:86:b7:96:e7:a3:09:e1:5e:9c:82:cb:65:69:2c:
69:73:74:b6:80:e5:23:d1:69:d3:f3:92:70:e3:39:
61:cc:3c:92:87:03:5b:73:0c:e1:20:a5:0d:c0:fa:
02:27:5d:30:b2:b5:3a:d7:8d:98:3c:57:5e:6e:fb:
f1:b1:c4:9f:53:48:3b:fb:d2:c7:b2:b5:e4:c0:f8:
d5:a5:91:58:a1:55:3e:f8:8e:ab:4f:da:16:a8:02:
11:93:01:c4:a7:c7:dc:7c:52:52:01:89:06:b0:6b:
74:65:c8:d4:57:a9:e5:9e:e1:8e:1a:cd:72:90:67:
28:67:67:b1:00:05:67:ff:4d:47:45:a7:ef:8a:4b:
be:d8:20:1b:3c:b6:29:be:db:fb:88:6a:ba:81:d1:
d9:75:08:b6:10:d9:fb:40:89:91:9f:70:5b:03:76:
dc:a0:37:2c:f3:80:ef:f7:2a:36:08:ed:72:7d:82:
22:2e:2b:6b:03:61:54:6d:73:9c:cf:23:69:99:9a:
fd:00:78:ae:e3:ac:0d:f3:f7:a3:0c:2d:bf:42:fc:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:6C:DC:EE:BE:0E:30:5E:9D:DB:CD:9B:45:E8:06:52:03:8B:E9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x0Fs3O6-DjBendvNm0XoBlIDi-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:13:d2:25:a1:0e:c9:e9:0b:6d:cf:04:a0:0a:da:8a:70:dd:
1b:64:d8:23:f9:53:ae:28:f3:8b:3d:ef:f3:0b:87:0d:06:72:
4c:b2:d7:6d:bc:28:56:66:15:ef:b4:fb:75:8a:2e:b7:cb:fe:
39:12:80:8a:14:3b:4f:c6:b1:d2:b4:50:8d:dc:09:1d:66:2a:
53:14:3c:8b:a8:e6:b6:72:0c:ba:72:d3:3c:eb:f9:02:17:46:
ec:5d:4c:54:8d:61:2b:aa:08:6e:33:7a:8e:cd:38:3f:0c:4a:
73:c0:51:77:08:c6:15:c7:1c:7f:ca:48:1f:97:2d:f0:67:43:
1b:ab:0a:cb:ca:4d:9f:bb:cf:0a:ff:ff:c9:2d:bc:ae:f4:94:
92:5d:8e:91:d5:95:54:9d:2f:c5:36:ec:31:54:b5:2e:8e:fd:
c2:cd:e0:56:7b:6a:b8:a3:48:97:ee:18:33:85:22:c9:4e:ce:
9c:4a:d5:ef:80:e4:87:20:eb:ab:39:2e:78:87:81:f8:03:93:
0c:fa:7e:4c:63:f7:a7:45:8f:0c:2f:af:c5:78:a3:84:36:13:
fb:46:8f:17:fb:51:7f:d9:87:6d:b5:43:80:56:de:1a:2b:0f:
cf:0b:96:26:6b:53:90:03:17:a6:28:f9:98:34:aa:df:f2:ec:
71:92:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org