Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xN3cYKo-1_yhwkHiBVLXGSc6pyE.roa
File: xN3cYKo-1_yhwkHiBVLXGSc6pyE.roa (raw, json)
Hash identifier: k5Ql9TBzgKoidZWn5m8rDrgf7LVccfHv3BcMM+AmLHU=
Subject key identifier: C4:DD:DC:60:AA:3E:D7:FC:A1:C2:41:E2:05:52:D7:19:27:3A:A7:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xN3cYKo-1_yhwkHiBVLXGSc6pyE.roa
Signing time: Wed 15 May 2024 11:24:18 +0000
ROA not before: Wed 15 May 2024 11:24:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22443 (0x57ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 11:24:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C4DDDC60AA3ED7FCA1C241E20552D719273AA721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:26:4a:71:e3:f7:82:34:72:8f:3b:52:31:
06:8d:2c:dc:99:d4:c2:85:3e:1f:9f:99:85:84:8b:
7e:7f:1d:d0:c1:12:98:b3:e8:51:9e:97:9e:98:dc:
91:1a:d2:b0:71:65:91:79:59:f8:df:f2:5a:3c:f7:
59:be:89:25:95:b9:55:7a:bb:16:07:6d:7b:31:ba:
bb:9c:ab:a4:5e:a1:ce:48:65:a0:95:ba:84:b1:25:
f7:7a:43:88:83:96:e6:45:32:d3:23:d2:26:e8:4c:
b8:b1:91:d5:d4:40:82:91:f9:cf:a3:b2:a3:d2:21:
e9:c3:f7:38:4a:c7:0e:d8:18:48:de:cc:d4:9b:7b:
74:93:db:db:36:64:04:f2:69:f7:1e:32:a4:16:bc:
08:f3:96:df:7f:ec:19:de:ee:0f:3c:84:33:f2:ae:
d2:a9:4f:47:d9:1a:6d:b0:77:96:4e:4d:9d:19:78:
ec:88:66:65:f7:d0:c1:ac:3b:30:de:0d:cb:df:27:
80:29:8d:d0:5a:80:82:b7:51:8f:a3:fb:da:15:b7:
43:86:6d:91:91:31:9d:e7:b4:f8:17:6d:d6:a1:43:
3d:76:f6:df:d9:be:32:2f:d4:71:ab:7e:34:a6:1f:
92:a6:6b:12:60:3d:81:1f:b8:da:42:2c:31:3e:9e:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:DC:60:AA:3E:D7:FC:A1:C2:41:E2:05:52:D7:19:27:3A:A7:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xN3cYKo-1_yhwkHiBVLXGSc6pyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:e5:19:ba:0a:23:9e:3b:c5:1f:77:54:04:6f:1f:35:22:14:
cb:a8:70:5f:a8:49:f6:59:62:ae:63:83:ce:0f:2d:be:3b:66:
73:4b:16:7a:7a:81:cf:37:24:07:5b:cf:56:f9:2f:e4:f9:05:
cd:32:dc:0a:59:14:b9:27:6b:3e:ab:ef:ba:f1:e3:48:8e:d8:
9e:8c:65:0a:f3:67:18:34:47:19:d8:31:7e:5b:84:99:9d:62:
fd:9b:1b:8d:22:41:26:8e:73:0c:7b:ca:1a:28:bc:e5:5a:e1:
a8:93:50:84:df:66:f8:f1:60:e1:08:d1:f0:3d:85:46:42:b7:
29:1d:8d:ba:eb:fe:bc:4b:4b:87:7e:04:89:6a:48:43:a3:6a:
76:7e:cd:78:49:d3:a5:54:62:d4:47:71:ab:55:73:d3:32:2e:
25:af:99:c5:aa:34:51:d1:09:de:6b:cb:74:37:fc:24:56:04:
a5:2a:f7:02:d0:7e:5c:29:7e:69:fa:88:74:44:bf:44:4b:ea:
3b:99:16:3b:f7:a7:01:28:a0:0a:74:ec:bb:3c:31:6b:ac:51:
f4:b4:ad:f4:82:5f:ad:fc:fc:1a:71:61:58:e9:20:f6:58:c3:
c8:58:81:b6:a7:0d:68:64:63:d4:42:2f:2e:b9:5a:74:f3:29:
de:1a:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org