Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yaWW_V9LKRcRzik310Jv0wE3eU8.roa
File: yaWW_V9LKRcRzik310Jv0wE3eU8.roa (raw, json)
Hash identifier: fhEz0pbJKao8pb5NiCNPx2aijDfz2ZvZDhitvNcPhzU=
Subject key identifier: C9:A5:96:FD:5F:4B:29:17:11:CE:29:37:D7:42:6F:D3:01:37:79:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AAB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yaWW_V9LKRcRzik310Jv0wE3eU8.roa
Signing time: Sat 06 Apr 2024 19:22:29 +0000
ROA not before: Sat 06 Apr 2024 19:22:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15019 (0x3aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 19:22:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C9A596FD5F4B291711CE2937D7426FD30137794F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:2d:71:8c:1e:9e:c5:a8:3f:68:b6:9c:ce:
23:42:ab:59:c0:34:7d:17:a0:49:9b:52:92:7d:ae:
d1:cc:3d:bd:00:bb:cd:16:67:da:7e:c9:d7:9b:ce:
7c:3c:bb:ac:89:d1:a8:2b:b9:97:f0:cd:a6:f4:51:
bf:ce:db:5a:c9:d1:ad:64:35:9e:4f:62:7b:e8:c3:
8b:37:e6:ad:25:bd:76:04:ca:5c:b8:79:20:45:58:
26:e6:b2:51:ee:7f:2d:0c:2e:83:07:6a:dd:70:02:
d9:27:6f:b1:53:04:2c:55:28:93:cc:ad:c2:29:18:
88:1c:bb:7e:d9:2a:d6:3b:93:a0:10:09:d7:36:3b:
55:2c:b3:07:c1:d5:26:eb:df:f5:a1:1f:7e:b4:a3:
87:81:a7:7a:18:98:49:ab:44:a2:28:8e:1b:fa:ef:
15:de:02:ed:45:6b:6a:1e:2a:f3:34:d4:be:3c:28:
d4:ee:84:2b:91:36:c7:a7:ab:5b:61:09:f5:e9:6c:
d1:0f:f1:8f:68:2b:d4:52:14:d2:6a:9c:a1:70:e3:
b1:b0:a5:86:e5:af:4d:f7:c7:d3:6a:77:7c:5b:14:
8b:6a:30:74:36:59:70:7f:47:91:74:40:c6:72:7e:
e5:5e:81:a9:21:35:fc:08:8d:68:a3:2f:08:c7:73:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:96:FD:5F:4B:29:17:11:CE:29:37:D7:42:6F:D3:01:37:79:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yaWW_V9LKRcRzik310Jv0wE3eU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:da:bb:e6:b5:f9:9f:df:f5:cd:76:14:a8:90:03:f0:c2:36:
8f:e9:25:a7:b8:c7:b9:aa:e8:8f:05:46:63:9e:d9:b5:8f:93:
a4:4b:3a:a2:9e:3a:a5:87:81:b0:fc:c3:de:bd:74:0a:b2:f9:
ff:a4:2f:2d:68:07:90:77:6e:6e:b6:dc:f1:b9:9b:54:3b:09:
1a:fb:9b:f3:c8:af:27:9f:59:d4:de:cf:69:07:d8:f3:0b:c7:
81:08:59:81:37:60:36:5b:b3:bf:8e:da:a0:77:bf:ea:3a:b8:
dc:47:14:0e:6f:06:1c:24:e0:23:9d:90:81:c6:1c:d5:b4:d1:
c8:9d:09:b7:6c:4c:e0:89:07:20:15:2d:89:e0:81:b3:d0:0a:
47:f3:7f:da:e9:46:22:0b:ab:38:d0:7f:3b:1a:65:53:01:71:
4d:61:aa:f5:8f:d9:e5:3f:84:dc:d4:7a:74:c5:12:9f:28:7f:
01:aa:3b:20:d8:3e:18:0b:65:62:b9:24:65:38:f8:88:a6:3a:
5c:b1:d4:65:80:92:bb:28:12:6f:66:25:d0:8f:00:ff:87:ef:
57:7d:14:36:18:cf:f0:e5:6c:dd:62:85:eb:d9:1e:64:25:ac:
41:00:33:3c:21:1b:9f:1c:c4:26:db:09:40:ac:52:0e:4e:8f:
54:ec:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:21 2024 by rpki-client on console-ams.rpki-client.org