Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/jj9OX_BDJGP2_CeXUhcBnUMYB08.roa
File: jj9OX_BDJGP2_CeXUhcBnUMYB08.roa (raw, json)
Hash identifier: uaeCVo6s52LI2Ye42Fhe82KNfweF15v6FDLVcFwVILE=
Subject key identifier: 8E:3F:4E:5F:F0:43:24:63:F6:FC:27:97:52:17:01:9D:43:18:07:4F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4097
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jj9OX_BDJGP2_CeXUhcBnUMYB08.roa
Signing time: Sun 14 Apr 2024 16:52:53 +0000
ROA not before: Sun 14 Apr 2024 16:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16535 (0x4097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 16:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E3F4E5FF0432463F6FC27975217019D4318074F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:98:dd:a5:db:f6:cd:25:90:3a:35:59:f5:
7e:fc:43:13:a6:49:1f:63:c7:c4:3a:c0:7e:d9:db:
49:b0:b1:00:7d:06:02:42:2a:19:3b:3c:bf:af:80:
4f:28:74:ff:41:09:dd:8a:06:88:e1:70:8c:56:5d:
0c:4c:20:5f:b1:c0:56:02:9a:95:05:0c:97:ec:14:
d0:d7:0b:5b:5e:46:3b:7d:9d:81:e1:46:05:ac:28:
70:50:49:fc:b2:fe:fe:8f:1a:d4:c1:fe:24:d8:be:
2d:54:0e:37:39:11:9b:4c:33:7f:cd:aa:c7:15:8e:
1b:fd:51:e9:97:ff:41:ea:89:0f:26:b3:44:9e:03:
37:86:a4:a7:7a:92:2b:dd:31:ce:00:fe:99:47:a3:
9d:48:1d:2e:69:4f:1b:f5:8e:00:16:7a:63:aa:05:
e3:0c:3d:06:4e:80:6b:4d:3f:ad:76:aa:ef:63:cd:
a3:f3:57:12:a9:9c:0b:fa:e2:50:a7:1a:47:d5:e7:
24:20:4f:cc:e4:c5:5d:e9:01:e1:ad:ed:4b:0b:f5:
6f:ce:ae:fc:25:ff:1f:42:d5:4c:3c:54:19:8d:08:
e4:54:51:7c:e3:27:69:56:55:47:ea:76:02:08:eb:
da:90:33:74:1a:06:7d:2b:9d:e9:50:e5:39:dd:4e:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:4E:5F:F0:43:24:63:F6:FC:27:97:52:17:01:9D:43:18:07:4F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/jj9OX_BDJGP2_CeXUhcBnUMYB08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
53:3d:33:e1:2a:26:1e:15:b3:09:b0:26:d7:16:7a:d0:a8:76:
ce:4c:db:5f:d6:3c:4a:70:13:a7:47:9a:3f:62:5c:da:25:54:
ad:f7:9a:48:e1:74:de:cd:f3:ea:84:31:ec:01:dd:04:e5:ac:
8f:74:c3:8c:e4:e5:26:79:23:bb:18:0c:4b:7a:72:e2:ba:9a:
b1:5c:b6:8d:35:a2:56:29:ee:6e:a5:d1:a9:e0:c9:a8:f8:e2:
b7:cb:7a:4e:5b:e4:80:e9:8c:12:67:f8:f4:f0:d0:39:91:96:
33:0d:47:15:e7:c7:a8:47:9b:49:03:47:e3:2d:74:c6:ca:b1:
58:67:6b:6d:5d:ac:7c:6d:9f:26:03:94:a2:68:54:d8:df:ef:
ef:52:1f:9b:9e:a1:0f:20:66:ef:89:4d:9a:15:5a:65:50:00:
93:92:c5:2b:ef:bf:c2:bc:a8:1a:bb:6e:b0:20:57:eb:a5:05:
83:b2:76:0f:0f:f8:6c:63:eb:80:7c:3c:db:ba:c8:3a:42:69:
ea:9a:13:1d:c0:9a:8b:0f:9c:a2:b4:ad:1d:4c:85:01:14:be:
6e:ce:dc:e5:d3:10:6e:58:5b:7c:b9:41:75:3c:9c:09:cc:b6:
20:04:91:f4:5b:c8:62:ea:20:a7:b1:59:e1:f6:c9:9a:5c:57:
35:9a:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 22:29:59 2024 by rpki-client on console.sobornost.net