Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yX62IIoQFsYlcsRc0wAR3I40QCQ.roa
File: yX62IIoQFsYlcsRc0wAR3I40QCQ.roa (raw, json)
Hash identifier: XPZmL3/fJGHqv/jpzRx6zBHc+5niniOQE8723WwIxY0=
Subject key identifier: C9:7E:B6:20:8A:10:16:C6:25:72:C4:5C:D3:00:11:DC:8E:34:40:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F73
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yX62IIoQFsYlcsRc0wAR3I40QCQ.roa
Signing time: Sat 13 Apr 2024 04:22:53 +0000
ROA not before: Sat 13 Apr 2024 04:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16243 (0x3f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 04:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C97EB6208A1016C62572C45CD30011DC8E344024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:b1:02:3e:36:73:ad:22:bb:bc:17:9e:8f:
5a:7e:84:24:c3:16:ca:c4:59:7a:5a:20:52:47:5a:
d0:c9:69:9e:d6:ea:cf:7a:b1:cf:74:3b:b0:64:fd:
0f:fe:d9:14:0e:f3:8b:0e:f2:f1:44:1a:10:3c:09:
de:88:9d:0a:e7:58:c2:6b:20:66:4e:90:86:2f:e8:
60:f8:c5:fe:fa:c4:5b:ae:c4:df:ae:20:8b:7d:34:
8e:f8:db:40:20:b9:0e:65:f8:f3:f8:e1:76:5a:b9:
78:fe:57:ff:d2:f9:c2:f4:c6:c3:2e:2c:7a:f6:2c:
ad:b5:19:09:bc:54:61:7f:c7:21:ea:3a:e7:62:aa:
fe:fc:92:6e:7b:9a:61:31:1d:1b:ac:4d:91:5b:cb:
5a:4d:fb:b3:a1:39:90:06:da:bc:07:d5:77:23:5f:
cb:ac:86:1e:58:13:4d:6c:36:eb:36:5f:49:ff:6c:
be:43:69:5d:05:30:41:60:c6:b9:0b:e1:5e:2c:6a:
25:50:25:a1:79:b9:4c:92:2d:84:73:d2:08:0c:fb:
0e:da:55:cc:aa:1c:0d:e5:97:46:7e:76:b1:b6:c1:
43:08:9a:83:d3:c0:ad:f1:bb:69:58:ac:2c:36:17:
b4:4d:41:b2:56:96:c7:6a:b3:e9:4c:4f:9e:c7:4c:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:B6:20:8A:10:16:C6:25:72:C4:5C:D3:00:11:DC:8E:34:40:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yX62IIoQFsYlcsRc0wAR3I40QCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:95:bf:e0:96:b5:c4:9a:68:dd:3f:31:ac:35:95:6d:0b:67:
33:fa:13:4c:fc:7e:a7:16:49:dc:60:4a:1b:34:c1:96:a0:3b:
33:af:aa:5f:7a:9e:c2:2c:89:fc:87:c9:5b:15:0e:fa:c9:4e:
c2:bb:4e:c9:75:16:f8:07:62:4f:d0:3e:30:07:e2:c9:f1:0a:
43:3c:8d:b5:87:f5:93:96:70:7a:c4:74:8b:3b:16:e1:ac:93:
da:66:77:01:6f:7d:44:62:b2:76:ee:dd:19:69:7a:c5:ce:12:
40:82:20:32:22:a1:97:2c:7f:1f:87:99:d7:ff:9a:bc:55:56:
d5:9c:8a:64:04:4a:07:2a:65:be:14:2d:22:2c:38:df:1c:9b:
f9:11:74:a3:d2:d9:e5:d6:54:3a:c6:2c:e8:28:dd:1b:6f:4a:
4c:4f:d3:5a:a4:09:28:21:ec:a1:86:6a:d6:49:f8:58:d6:4c:
2a:35:b7:f8:75:56:9c:c2:df:1a:32:c6:a9:2a:d1:54:a1:99:
53:e8:44:8f:6b:2c:2e:76:4e:e2:71:5d:a6:37:2f:4e:fe:b3:
14:35:a7:55:70:b7:3b:e1:01:0d:59:ea:b5:ed:d1:5d:38:1c:
3e:1c:ff:66:46:34:8a:e9:a2:15:0a:43:57:50:28:2a:dd:78:
03:82:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org