Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5hhibDoTjKl7cPWnRW8j9EeJnro.roa
File: 5hhibDoTjKl7cPWnRW8j9EeJnro.roa (raw, json)
Hash identifier: 6dv2/FTS/5MWcsyspUpXELYmqVweSTfjhhlkjRbzg3U=
Subject key identifier: E6:18:62:6C:3A:13:8C:A9:7B:70:F5:A7:45:6F:23:F4:47:89:9E:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35DF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5hhibDoTjKl7cPWnRW8j9EeJnro.roa
Signing time: Sun 31 Mar 2024 09:52:10 +0000
ROA not before: Sun 31 Mar 2024 09:52:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13791 (0x35df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 09:52:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E618626C3A138CA97B70F5A7456F23F447899EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:c6:fb:d1:e2:13:9b:4c:68:50:d3:0d:60:
e6:bd:1f:10:71:c8:75:fc:93:f8:d9:bf:01:fc:e2:
ab:bd:09:86:90:d3:70:44:ba:0f:48:f9:db:e2:3a:
2c:88:0a:e0:b2:7c:08:c0:38:f2:b7:71:4c:73:87:
17:c6:f0:4e:43:46:ce:52:b9:13:a1:1e:5d:75:ce:
0e:80:85:6e:e5:cc:cb:e6:20:c7:86:12:ce:3e:c2:
24:04:1d:d6:aa:ad:43:81:91:e0:ad:60:21:aa:d6:
f7:f0:99:ba:82:ac:9f:49:ce:ad:0b:57:ad:23:12:
5c:bf:61:c1:6b:e6:03:be:ea:fe:0e:6c:26:d3:7a:
ba:a5:ac:a9:3c:e7:fe:f2:7a:2e:b2:f3:38:4b:fe:
33:2c:82:ef:1a:15:93:44:03:88:c1:6f:c0:2f:68:
8b:42:4e:f6:b6:31:b6:43:64:e5:df:70:2f:bd:c6:
11:04:17:89:36:d5:7b:6b:20:13:ed:b6:62:54:19:
c8:a3:5f:72:5f:61:2b:8c:63:b2:e3:52:d8:c8:5c:
5f:39:eb:f5:9f:86:c3:88:30:da:95:42:47:9d:1d:
e3:66:bd:d0:32:55:ab:4d:ce:0c:c0:da:e7:b0:83:
9c:89:c8:54:d0:7b:30:02:44:78:f5:51:07:97:bc:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:62:6C:3A:13:8C:A9:7B:70:F5:A7:45:6F:23:F4:47:89:9E:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5hhibDoTjKl7cPWnRW8j9EeJnro.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:ad:25:71:4e:97:94:f3:fb:f4:0e:32:ee:19:c7:15:e3:29:
90:d9:39:fc:6c:6d:ba:0a:89:e2:6a:8d:f4:71:21:31:77:1d:
c7:78:a5:46:38:9e:98:09:0b:93:aa:2f:24:d6:3c:73:99:2d:
2d:37:22:20:51:ac:b5:47:0a:ed:4e:2b:7f:9f:ac:cf:f5:81:
bb:3c:97:e1:40:f9:eb:18:82:52:7a:64:0b:0c:8d:40:dc:d2:
f0:b5:43:66:d3:cb:c7:fc:44:5b:de:d1:cb:f8:1b:7b:1a:72:
e8:6f:0a:df:bb:4d:82:f0:8d:79:92:2e:45:af:a5:6c:ec:c0:
e4:62:1e:c1:cc:1e:92:9d:77:22:bf:65:b2:9d:29:02:8f:a6:
3a:7f:9e:3f:d1:da:9a:6f:eb:10:d6:af:73:28:30:5d:d5:08:
29:89:7f:53:19:e8:f3:51:fc:5a:c4:f5:50:33:5b:45:b3:04:
de:d6:48:4e:63:ce:40:e5:4b:cd:9e:80:98:37:16:af:9a:91:
c8:20:1b:cf:f0:b8:19:bf:77:be:79:4e:08:70:d1:cf:1d:78:
91:c2:f4:07:b5:5d:4f:85:30:76:d5:25:47:d5:81:12:e8:d1:
4e:45:08:50:0e:aa:67:4d:84:11:25:5a:2a:cc:44:a2:2f:fe:
18:08:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org