Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xvJSWWjbSJ1M9Vkn1tCwvtdKhb8.roa
File: xvJSWWjbSJ1M9Vkn1tCwvtdKhb8.roa (raw, json)
Hash identifier: FC+x78bWVd6txEBC+mKTnQvjfydV+BwB/F1F4yoGZ3U=
Subject key identifier: C6:F2:52:59:68:DB:48:9D:4C:F5:59:27:D6:D0:B0:BE:D7:4A:85:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5823
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xvJSWWjbSJ1M9Vkn1tCwvtdKhb8.roa
Signing time: Thu 16 May 2024 02:24:16 +0000
ROA not before: Thu 16 May 2024 02:24:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22563 (0x5823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 02:24:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C6F2525968DB489D4CF55927D6D0B0BED74A85BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:04:8b:55:71:b2:a8:46:0d:8b:0d:da:4c:
b7:7a:c0:80:43:78:b5:7a:2d:33:3b:94:04:23:e4:
eb:7b:43:4e:84:50:99:e6:da:69:59:e5:bd:70:ca:
80:50:0c:3f:01:d3:15:9a:82:f6:eb:6e:db:90:84:
60:1f:2f:8a:31:4e:13:a7:86:54:a3:01:a3:d3:14:
06:29:4b:54:e3:fa:c0:14:ac:f2:4f:e2:5b:a6:b1:
fe:68:1b:c8:1b:8f:e9:11:aa:e3:35:9c:21:21:52:
2e:22:e7:f6:93:7c:11:5c:33:02:e8:64:0b:fb:23:
01:42:34:33:ee:ee:1f:e7:cd:e5:60:8b:85:01:3e:
69:fb:27:9e:a8:36:11:fe:f1:54:f3:b5:57:70:bf:
eb:46:55:fb:76:f0:f7:9a:9a:8d:1d:a9:6c:21:88:
2d:80:be:9f:3d:e4:42:6d:74:77:2f:a4:53:da:b2:
9f:99:8d:13:74:56:c1:7a:43:5b:aa:d7:e4:00:68:
8b:99:81:22:9f:e5:b3:70:a7:13:07:e4:d9:31:d5:
8f:fa:c3:85:78:23:40:c1:55:b3:4a:36:0e:09:48:
91:f4:1e:9d:58:c9:c2:55:b5:f4:4c:9b:a2:fa:aa:
73:7c:d0:6b:ba:ea:0a:d5:12:1c:3c:94:26:f9:da:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:52:59:68:DB:48:9D:4C:F5:59:27:D6:D0:B0:BE:D7:4A:85:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xvJSWWjbSJ1M9Vkn1tCwvtdKhb8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:ff:bf:1a:ce:88:ac:43:31:80:2b:94:b9:33:6a:4c:2e:28:
89:07:40:f1:ae:c7:1b:ba:3e:61:5e:66:ec:65:54:7b:5c:d3:
99:0e:34:cd:1e:12:55:f0:46:71:23:9b:80:b6:16:b2:e7:ef:
fb:24:1e:76:fe:21:1d:fc:5f:8d:62:8f:a0:57:19:a9:41:c1:
79:9b:d9:0d:e9:83:64:a5:f5:04:b9:af:3f:e0:93:fe:da:39:
cb:d2:cf:99:ca:b6:53:6e:ae:fe:72:a9:6d:7e:63:7a:79:c1:
4a:46:02:b0:57:82:03:54:57:81:68:0f:7c:bf:65:1a:6e:ec:
c1:59:16:16:5f:ac:4c:85:68:39:d8:5f:7b:13:24:05:02:52:
5c:a8:c3:48:1a:55:85:ac:aa:c8:f9:e9:da:29:45:7c:f3:3e:
eb:ef:c7:ea:ca:04:ad:f3:2f:b0:4f:97:7a:6c:1a:a6:67:a2:
4c:76:b2:8d:1a:a8:6c:f2:ec:f0:4b:a6:84:d0:01:52:a0:22:
0e:cd:44:a4:d7:ca:52:0a:8b:03:a5:ea:54:33:45:c9:94:19:
93:e3:8a:d5:b9:91:b5:01:b1:7e:ff:af:2e:2f:c9:de:a9:d9:
c5:fb:56:2e:bd:cc:87:e2:6b:c2:bd:84:02:60:a8:8f:38:15:
53:c2:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org