Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xv2BILfXRY-fJrFLnvdeBTebRok.roa
File: xv2BILfXRY-fJrFLnvdeBTebRok.roa (raw, json)
Hash identifier: Rcm2vddWBzsdD+vfwyvmLRU4LmblkbIIF+MQ6AbD5cs=
Subject key identifier: C6:FD:81:20:B7:D7:45:8F:9F:26:B1:4B:9E:F7:5E:05:37:9B:46:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41AF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xv2BILfXRY-fJrFLnvdeBTebRok.roa
Signing time: Tue 16 Apr 2024 03:52:57 +0000
ROA not before: Tue 16 Apr 2024 03:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16815 (0x41af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 03:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6FD8120B7D7458F9F26B14B9EF75E05379B4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:db:c0:95:09:33:d6:cb:fb:a7:48:a0:1d:
d0:d9:14:a6:96:45:e4:32:52:c1:20:b9:99:c2:b3:
0c:f0:64:10:92:ac:fd:af:20:95:fb:32:ba:20:c7:
4f:a0:db:99:ab:2f:65:9c:80:ee:67:ba:dd:9c:b5:
15:de:6d:cf:91:84:be:72:52:2b:34:45:3e:4e:fd:
71:c6:38:b0:2d:8b:4d:bb:78:43:e8:fe:bd:90:c5:
61:0b:37:cf:b9:43:d9:7a:e3:d7:b5:19:dc:24:22:
f0:2e:a9:d9:ed:79:7a:71:26:de:5a:1d:94:1d:e8:
e2:94:3b:ce:6c:53:af:26:92:74:86:88:9f:10:da:
01:2f:b9:45:1f:aa:7d:79:a8:45:9d:07:ce:55:6e:
f2:8d:3c:16:bc:60:bd:b5:64:73:99:6a:05:a0:48:
64:56:f4:da:00:9c:5b:12:20:5a:74:51:43:31:88:
9f:2f:02:85:cb:18:33:77:e6:ca:36:50:75:53:8d:
0d:2d:ff:7a:3b:67:31:ff:4b:aa:f3:a0:13:97:f5:
c2:fe:b7:66:db:1b:7d:ce:2a:45:5e:ba:ab:69:d0:
9f:ca:f0:92:97:87:e8:bc:0a:2a:94:a1:31:df:96:
31:dd:ba:f6:34:05:85:96:44:8b:fc:27:e8:24:70:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:81:20:B7:D7:45:8F:9F:26:B1:4B:9E:F7:5E:05:37:9B:46:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xv2BILfXRY-fJrFLnvdeBTebRok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:35:a0:bc:32:64:67:c8:d5:bd:be:c3:c5:12:42:95:39:57:
48:be:cb:eb:48:d6:7f:14:8c:69:8b:02:79:4b:3e:44:70:8b:
2a:0b:b0:39:7c:9a:43:f6:bf:92:fa:ea:54:1e:a1:fb:38:d2:
4d:d4:00:6e:86:e3:03:f7:81:bb:b4:68:db:f9:54:e6:c0:e5:
43:5c:e4:23:3f:29:d5:9a:15:02:6b:6d:11:fa:d0:82:7b:c2:
35:b3:3f:59:8a:e0:9f:c6:6d:f8:7b:50:b0:dd:00:8f:85:5d:
3e:06:fe:be:3f:38:65:6f:3f:fa:9f:35:17:b4:73:63:52:57:
0f:c6:70:6e:26:41:04:e6:04:84:46:eb:56:7b:44:71:b3:7a:
60:63:a2:e1:2f:7d:9d:48:53:80:b4:00:62:4a:a8:3b:29:d4:
fc:52:d1:0d:29:87:2e:c0:d2:8d:e3:4a:fd:e5:ab:26:a6:4c:
fb:a7:9a:ae:0a:38:4a:97:1a:88:61:2a:12:1b:76:9a:0d:f1:
66:b2:a9:6a:9c:ab:f9:d9:ad:c1:e2:7a:45:20:df:3d:ee:26:
9b:d2:1d:67:f5:d9:65:5d:79:cb:4a:6d:f2:36:25:ad:4a:83:
29:d8:73:dc:1c:5c:cf:76:6b:e6:03:2a:af:b6:26:5d:68:cf:
e7:00:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:20 2024 by rpki-client on console-ams.rpki-client.org