Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/x3zRUDRAB2SpmuEG-uVQ-PB-eco.roa
File: x3zRUDRAB2SpmuEG-uVQ-PB-eco.roa (raw, json)
Hash identifier: BxqwrOQKxNcShGv5mqw9ngnC0dNGF/wFOo8YToe78GM=
Subject key identifier: C7:7C:D1:50:34:40:07:64:A9:9A:E1:06:FA:E5:50:F8:F0:7E:79:CA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 407F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x3zRUDRAB2SpmuEG-uVQ-PB-eco.roa
Signing time: Sun 14 Apr 2024 13:52:55 +0000
ROA not before: Sun 14 Apr 2024 13:52:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16511 (0x407f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 13:52:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C77CD15034400764A99AE106FAE550F8F07E79CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:a7:6a:15:d0:97:1d:42:ed:e9:09:71:a8:
dd:c9:5d:2b:df:bb:c0:26:bc:66:fd:57:90:00:b2:
19:3b:d0:30:30:23:cc:52:33:72:39:ab:cb:6f:42:
79:93:45:59:a4:72:82:44:05:d8:d2:22:42:1a:b6:
23:e6:90:6f:d7:27:31:6b:ce:39:77:7a:04:7a:f9:
1f:16:aa:bb:b3:de:b7:23:7d:70:24:eb:81:ee:8a:
e7:fb:3e:25:c2:0b:07:53:39:61:71:21:f7:20:e7:
20:2d:05:46:d4:ff:1c:02:41:6e:9b:12:91:e2:32:
23:9a:f7:cb:05:b4:63:96:9e:97:ed:47:44:57:9b:
7a:19:8f:a3:d7:c3:9a:93:a9:48:1b:af:9a:e4:9d:
54:cd:3b:67:c6:b5:0f:22:84:e7:71:f5:e9:9d:3d:
dd:10:8b:50:52:2b:08:fc:ea:0d:bd:3e:19:64:20:
22:ee:49:7c:ba:03:83:30:7d:a1:7b:e2:6c:0f:89:
fd:6b:13:ac:88:b8:52:04:e4:4e:2a:e4:11:1e:38:
a3:22:22:06:7d:34:97:65:c9:76:eb:28:a2:86:72:
29:f7:71:6c:f8:3f:5f:dd:04:66:91:48:25:0f:a6:
f8:fd:39:27:72:14:9e:90:8b:3a:cc:c6:10:a7:5e:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:D1:50:34:40:07:64:A9:9A:E1:06:FA:E5:50:F8:F0:7E:79:CA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/x3zRUDRAB2SpmuEG-uVQ-PB-eco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:12:6f:a6:7c:7d:67:f3:93:eb:63:6f:36:93:2a:b3:9e:09:
9e:67:2a:c8:b4:75:ab:5b:99:e4:6b:39:7d:5e:57:23:5d:02:
29:93:ba:05:f7:44:28:2c:f5:9f:7c:8c:8f:e0:e0:b4:5d:62:
50:50:90:ff:0c:ac:1e:10:27:d6:ff:37:8a:18:c5:21:e0:1b:
35:24:9e:2c:64:ed:52:6d:2b:31:b6:ff:33:ed:30:4e:95:bc:
47:0a:78:a1:62:1b:ce:c0:0d:d3:42:2f:df:c1:70:67:9c:a7:
fe:6a:4f:c0:aa:b9:3d:85:40:9c:cc:08:33:04:34:42:8e:e1:
a0:a5:0a:79:d8:58:39:1f:af:94:1f:8d:e8:aa:7a:3f:bb:c3:
9d:f9:38:6a:05:ae:38:06:48:1b:17:f1:0c:40:22:f4:76:2b:
ea:c2:9d:3f:d3:61:64:97:d7:85:20:a7:4b:80:88:4b:ce:45:
7b:9f:c6:e3:cc:18:ff:53:ca:97:64:d6:34:55:f6:4f:fc:96:
48:f8:a2:c3:b8:a9:fb:6c:38:b3:df:a3:84:ae:91:d6:df:c2:
8a:1d:f3:67:98:f6:72:50:ec:91:08:57:bb:0f:a5:90:7d:be:
ad:df:b1:0a:f2:e6:ba:ee:51:42:d0:d1:fd:14:fc:00:2c:ae:
5e:09:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org