Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fsiksjUAox6aRJvv1Kz6ZNBHaGA.roa
File: fsiksjUAox6aRJvv1Kz6ZNBHaGA.roa (raw, json)
Hash identifier: OkOcqXxLmVxubkV1UxhFdlDpz5bXaOEvP/tScuR3pmk=
Subject key identifier: 7E:C8:A4:B2:35:00:A3:1E:9A:44:9B:EF:D4:AC:FA:64:D0:47:68:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E5F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fsiksjUAox6aRJvv1Kz6ZNBHaGA.roa
Signing time: Thu 11 Apr 2024 17:52:46 +0000
ROA not before: Thu 11 Apr 2024 17:52:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15967 (0x3e5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 17:52:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7EC8A4B23500A31E9A449BEFD4ACFA64D0476860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:15:aa:82:94:e9:11:cf:8f:26:64:f9:7f:
94:e2:0d:70:c7:85:3a:bf:d2:c3:05:4c:6a:a6:5f:
da:be:c0:ad:22:67:43:8d:76:48:88:5b:45:4b:60:
f6:06:3b:e6:6b:98:7b:93:e4:e6:14:4c:b7:2e:cb:
ea:8e:92:46:bc:1b:6b:13:21:7d:6b:83:2f:5b:6b:
d9:7c:9b:ec:a0:29:b8:6d:9b:6f:97:af:0d:39:f4:
5d:ec:aa:2c:99:16:39:f3:60:25:6f:79:f2:80:0a:
6d:6c:92:00:5f:51:8e:84:89:92:af:73:39:05:a4:
03:3d:80:ce:2f:7d:8b:2d:76:15:d5:5a:b9:d4:c5:
07:8f:5e:41:d7:10:b1:08:e1:b1:d5:9f:58:d1:7f:
05:a5:6d:28:0d:19:6e:c5:fb:a7:fb:19:f3:00:b3:
42:79:ef:76:f1:5b:1c:0b:31:ae:96:6e:54:34:50:
37:94:0b:d7:01:49:fe:98:e3:4b:da:12:8a:ac:c4:
3a:46:48:9a:89:02:51:11:2f:3d:1f:68:e4:54:df:
3e:b0:42:62:2a:19:9b:ad:a3:e1:bb:e7:86:09:d9:
fc:8a:ae:b3:33:06:69:96:9e:49:54:7c:b6:a6:e2:
35:a1:ac:f6:9d:d3:7c:78:2d:95:c7:5f:f6:2d:98:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:A4:B2:35:00:A3:1E:9A:44:9B:EF:D4:AC:FA:64:D0:47:68:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fsiksjUAox6aRJvv1Kz6ZNBHaGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:91:ea:ef:03:db:27:95:9b:7f:cb:00:6d:47:43:0c:e1:4c:
e7:52:d6:ab:16:e9:28:f9:6c:76:9b:2a:39:fc:a7:cc:a3:17:
e7:af:a2:b0:16:b9:5f:95:3e:37:1f:05:a8:35:5b:ee:0c:6c:
22:31:4f:0e:5a:98:a4:8c:b9:d4:a8:0d:88:b7:1a:16:6c:9c:
9a:7e:17:08:80:5e:f3:55:d9:58:14:76:66:71:e0:ce:5e:3a:
8b:b5:50:7d:0f:af:e5:01:99:2f:13:3a:36:65:e1:55:be:78:
f5:7a:7c:8a:a1:37:af:75:23:72:b4:9b:13:b0:8a:dc:37:a4:
c3:26:d3:b1:67:75:75:cd:10:94:29:9b:bc:10:2e:57:aa:a7:
6e:d2:4f:ca:ff:93:a6:d1:ea:d6:fa:a8:6c:a6:28:7c:7f:38:
3b:d4:c0:55:ea:3d:41:9f:21:bf:22:af:e1:42:de:43:fc:55:
ae:3c:5a:c5:9f:7b:63:b2:7b:17:a5:cd:27:2e:52:05:73:4e:
20:b9:d0:ef:22:ab:92:a7:1c:63:e5:32:53:50:23:47:33:ee:
43:a7:65:07:ca:98:b6:46:bf:66:ae:6f:1c:40:5c:bf:d7:ea:
29:70:d5:70:f5:d2:48:86:78:1f:9a:07:d0:37:14:a3:26:f6:
73:a3:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 01:38:41 2024 by rpki-client on console.sobornost.net