Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qPmJkuTCvT-lEBsm336oAStjZno.roa
File: qPmJkuTCvT-lEBsm336oAStjZno.roa (raw, json)
Hash identifier: cBe7loY7GJMA71hHEuCa+Vhq43DtF8hfKUvCXvVwGiY=
Subject key identifier: A8:F9:89:92:E4:C2:BD:3F:A5:10:1B:26:DF:7E:A8:01:2B:63:66:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FFF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qPmJkuTCvT-lEBsm336oAStjZno.roa
Signing time: Sat 13 Apr 2024 21:52:52 +0000
ROA not before: Sat 13 Apr 2024 21:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16383 (0x3fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 21:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A8F98992E4C2BD3FA5101B26DF7EA8012B63667A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:fa:8f:3b:cb:a2:9a:f1:dc:0a:d6:a3:2e:
f7:e9:25:2b:6a:b5:48:45:97:03:30:ea:f6:30:69:
ae:e4:09:56:19:ba:ff:66:f7:f5:76:6f:b7:42:51:
f0:53:86:ac:e4:3f:7a:a5:be:f4:43:04:c0:96:81:
66:8c:d0:ab:b5:93:b1:a4:8e:be:7f:4d:cf:4c:05:
53:ad:1c:2d:d9:5b:e1:88:ff:3f:15:85:3d:8a:ea:
70:c0:84:5a:80:c0:a0:c3:14:62:26:f3:6a:cd:61:
96:ba:cf:d5:bc:93:1b:61:22:7c:f2:26:8e:31:a4:
f8:b7:6a:97:77:02:b0:33:fd:18:05:fb:68:d1:f5:
9e:57:f0:78:2f:34:4f:89:8c:9b:a1:47:a4:92:22:
d3:5c:b1:66:8e:2c:11:8b:bf:92:25:59:85:6b:20:
0f:f5:1d:b9:56:15:3e:1a:bb:22:4a:03:98:aa:68:
64:8c:53:c2:bb:05:c9:26:f3:91:67:26:04:3e:e0:
b2:2d:ad:12:dc:98:53:9e:15:8d:61:62:92:b8:13:
c5:b4:8b:84:1e:8d:ab:5e:2c:99:64:14:a8:7f:96:
94:cd:e2:22:ff:85:94:cd:58:f1:9d:12:d6:d1:e5:
e2:94:3d:18:10:54:84:e5:9e:4b:23:37:b3:7e:6d:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:89:92:E4:C2:BD:3F:A5:10:1B:26:DF:7E:A8:01:2B:63:66:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qPmJkuTCvT-lEBsm336oAStjZno.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:77:06:92:f7:a3:75:2b:28:c9:2e:71:e1:30:0f:43:0f:1f:
f6:14:3f:db:f5:aa:31:e5:03:98:be:5b:33:6a:d6:58:53:ae:
e1:58:5d:23:90:50:c5:b7:0d:4f:53:42:19:bb:f0:eb:d4:93:
de:dc:cd:80:3a:52:67:06:1f:86:08:83:fc:f1:c3:4d:15:f3:
7c:e5:cc:ad:34:74:c2:b3:30:df:36:32:53:4f:f1:f4:a9:81:
e9:ef:cc:0f:39:d8:cf:bc:a8:b2:68:80:85:a9:26:c6:15:d4:
1d:10:8f:a6:d5:12:a0:29:8d:58:37:e2:73:2a:c3:63:77:b9:
bb:8f:94:eb:65:0b:ee:4e:2e:9e:ac:12:12:36:86:bc:a5:ef:
83:db:5c:31:ef:81:19:54:94:6a:91:94:c1:9e:cd:09:c5:34:
52:87:7c:b0:98:71:84:c7:f9:82:2a:6e:99:00:ff:e1:24:d0:
30:10:7f:80:fb:fe:1f:28:ea:dc:84:a6:65:9a:45:5e:14:ca:
84:0b:b4:89:25:2a:71:fb:9c:39:2b:b0:62:a7:b1:28:a3:7f:
59:ff:78:20:73:a1:92:46:13:59:c7:b3:14:c4:27:2d:99:5e:
7b:6e:1e:19:77:54:46:d1:3e:07:94:1a:57:3b:a9:e7:12:62:
f0:af:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 06:02:48 2024 by rpki-client on console.sobornost.net