Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zPIKnX8Nl0EYzRVjFFpPWhkyjE8.roa
File: zPIKnX8Nl0EYzRVjFFpPWhkyjE8.roa (raw, json)
Hash identifier: JrbRoI298faVRvYa301ImjZsCW6TYD9ue7o1RlBKSkk=
Subject key identifier: CC:F2:0A:9D:7F:0D:97:41:18:CD:15:63:14:5A:4F:5A:19:32:8C:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3467
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zPIKnX8Nl0EYzRVjFFpPWhkyjE8.roa
Signing time: Fri 29 Mar 2024 10:52:05 +0000
ROA not before: Fri 29 Mar 2024 10:52:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13415 (0x3467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 10:52:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CCF20A9D7F0D974118CD1563145A4F5A19328C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:44:ae:48:a7:7e:49:74:db:9a:75:71:ea:
d3:77:f4:32:4b:a1:42:0e:2f:b0:fb:5b:48:12:3f:
20:03:d0:9b:91:7a:b5:a1:6f:4c:69:d3:e6:55:fe:
77:c1:23:7d:9e:5b:7a:16:26:8f:1f:cf:7c:54:c5:
fd:26:fd:a4:ea:c2:a7:fe:c1:58:2c:27:0d:74:06:
ca:55:6e:8e:58:b1:9d:14:5b:6d:6a:8a:98:ad:6f:
1d:20:48:3e:c8:75:28:f2:c3:94:3b:dd:82:b6:54:
f8:c5:84:57:02:c5:7d:54:2c:d7:26:fa:0d:cf:2c:
a3:cc:e6:9a:d0:70:63:60:28:82:71:f3:3d:4b:a9:
3d:fa:c6:03:f9:f5:c9:77:ad:aa:3a:e4:1d:f8:dc:
a0:2c:c8:18:bb:87:ef:36:46:7d:d7:5e:20:90:97:
93:4e:cd:2d:f4:2f:9a:25:50:7a:3d:e6:1a:80:0b:
63:3f:10:30:a5:fe:54:5f:47:4b:18:fb:57:86:2a:
b2:5b:9b:88:e5:3b:86:b5:00:a3:1e:32:cd:97:d0:
b3:76:e4:f9:d5:01:a9:ec:f8:5e:0b:f7:44:87:33:
19:e8:8b:52:6e:85:6f:6f:3d:9a:07:df:b3:54:56:
05:47:f1:2b:35:40:b8:9f:b5:fa:b7:6c:2b:bc:0d:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:0A:9D:7F:0D:97:41:18:CD:15:63:14:5A:4F:5A:19:32:8C:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zPIKnX8Nl0EYzRVjFFpPWhkyjE8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:87:ba:42:b3:86:a3:af:33:37:a7:72:16:15:b4:46:12:15:
6c:4b:cf:d1:83:7f:4d:5c:33:cc:32:72:6d:a3:21:e4:ec:2b:
32:38:87:0d:73:7b:10:2a:9e:ae:3d:03:fc:36:92:34:14:cc:
6c:5c:43:21:83:3a:1c:dc:43:1e:61:b5:d6:07:b7:0c:97:2f:
9e:e0:8d:f7:d6:40:e5:71:62:81:53:3f:b3:6f:25:06:7a:d3:
53:c6:c4:49:e7:ee:a5:76:c7:d8:01:d8:49:dc:09:46:7b:71:
f5:cc:76:5f:75:04:c3:2d:7a:6e:30:ed:d9:25:3a:d3:84:a9:
dd:6d:4b:f5:45:e4:0b:fc:b1:50:5a:d8:e6:72:3c:4d:81:b2:
bd:76:5f:39:18:2f:d1:dc:ee:b3:e3:de:1f:0c:41:53:8d:56:
cb:85:91:36:f7:bc:0e:45:bb:fd:86:c6:69:75:f5:73:72:74:
58:3b:a0:17:a8:61:0d:eb:33:c2:b6:23:b6:5a:7c:d4:1d:aa:
c6:9d:be:20:db:a5:11:7e:fb:80:84:25:e9:f9:0c:d8:d9:c5:
3d:fa:5c:a3:10:1c:83:0f:fa:b8:62:88:1d:92:cc:34:19:f1:
0a:17:20:87:b9:36:e8:e0:1f:a5:be:31:24:53:9e:c4:c7:81:
cb:07:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org