Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MiKfmNq3IHQeFHYrl_xlpyA4T9M.roa
File: MiKfmNq3IHQeFHYrl_xlpyA4T9M.roa (raw, json)
Hash identifier: lNo5dzGzkKEZcXOUfaEIk2cBmi/BsCi/aBxqeWbi8Ic=
Subject key identifier: 32:22:9F:98:DA:B7:20:74:1E:14:76:2B:97:FC:65:A7:20:38:4F:D3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 374B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MiKfmNq3IHQeFHYrl_xlpyA4T9M.roa
Signing time: Tue 02 Apr 2024 07:22:13 +0000
ROA not before: Tue 02 Apr 2024 07:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14155 (0x374b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 07:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32229F98DAB720741E14762B97FC65A720384FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:75:6a:8c:a9:70:26:6a:81:8d:38:ff:d4:
3c:ce:39:53:18:1c:e0:87:60:58:ad:e5:d1:c0:0a:
f9:20:c6:d4:cd:b5:b1:c8:f8:4a:12:44:fe:e2:5e:
56:10:97:8a:4d:4d:ae:6a:a5:8f:1f:b7:a5:1c:42:
d4:33:bc:a8:47:9c:8f:b4:df:69:e0:04:47:cc:8b:
5f:36:66:fb:d2:b4:f1:71:e3:e3:66:2c:9a:46:84:
f2:41:67:22:ec:e3:e8:1c:4b:a8:38:d7:7c:1b:6b:
dc:73:22:b6:6c:22:66:f1:73:2b:41:fd:bc:84:d4:
97:2d:d0:40:32:43:93:f8:25:d8:bc:a4:f6:a6:d9:
59:01:87:22:c3:b9:67:19:7a:47:e3:73:bd:2d:7a:
c9:5a:b3:4b:59:c4:54:65:8c:96:6f:1b:63:ff:4a:
5c:58:9d:59:4b:ce:70:04:94:9a:bf:1a:c4:82:90:
b1:aa:87:39:3d:c6:98:b8:2c:84:a2:97:1f:d6:89:
b7:22:3a:de:d4:27:94:5c:0d:50:49:6a:58:42:55:
71:5e:33:c2:05:aa:64:dc:85:1f:af:d7:22:d6:2e:
69:b0:83:9c:30:c6:06:9b:34:c5:63:2a:be:f8:1e:
79:52:10:ae:75:6a:e5:e7:f0:66:29:c8:61:ec:11:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:22:9F:98:DA:B7:20:74:1E:14:76:2B:97:FC:65:A7:20:38:4F:D3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MiKfmNq3IHQeFHYrl_xlpyA4T9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:d2:df:0c:3d:58:36:ae:06:1e:cc:39:9b:72:bf:ae:a9:47:
50:3f:bc:73:7e:34:ee:f4:86:86:fb:e3:60:6a:4c:b1:9f:49:
77:10:54:0b:18:90:cd:96:a8:a0:d6:10:92:af:36:70:38:e4:
a3:21:1a:c7:17:05:d9:5c:32:8c:bc:5b:3f:32:6f:f1:9d:e8:
04:11:75:da:19:b6:a3:5d:36:2b:7e:6a:7a:1f:bd:e4:ac:63:
05:9c:6a:dd:c0:d3:bb:59:dc:d4:4a:51:9c:f3:7c:f9:bb:f3:
71:ed:79:e3:e1:e5:73:cf:7c:85:4a:6a:ee:4e:76:78:32:1f:
bc:fa:2f:de:0c:b7:73:71:04:0a:ca:18:24:b4:18:e0:2a:5c:
9b:d0:cf:d9:6d:e4:fe:3d:59:77:a9:8a:e6:60:9d:5b:e8:8c:
76:9f:39:13:08:65:c7:e0:cb:48:c7:df:41:b9:89:8d:9d:6c:
45:ff:4c:15:98:fe:26:9e:d4:43:d9:d9:a3:79:1a:85:ff:4c:
2e:2c:65:fa:bd:16:df:95:6c:f0:56:fd:d3:c0:cb:6d:2d:bd:
40:6f:07:4a:80:82:50:0f:ce:b5:f0:53:5d:57:d1:73:62:27:
fb:b3:bf:42:33:83:70:4b:ac:cb:3e:52:74:a4:38:f6:25:dc:
12:4d:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:04:03 2024 by rpki-client on console.sobornost.net