Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5oLGDV4xKaDS3T2Kt09qRedXqWw.roa
File: 5oLGDV4xKaDS3T2Kt09qRedXqWw.roa (raw, json)
Hash identifier: CsKRMnOy5gSk56EUu14SzwtABEIgsOEYj7WmuKhxHmY=
Subject key identifier: E6:82:C6:0D:5E:31:29:A0:D2:DD:3D:8A:B7:4F:6A:45:E7:57:A9:6C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 555F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5oLGDV4xKaDS3T2Kt09qRedXqWw.roa
Signing time: Sun 12 May 2024 09:54:12 +0000
ROA not before: Sun 12 May 2024 09:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21855 (0x555f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 09:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E682C60D5E3129A0D2DD3D8AB74F6A45E757A96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:19:64:66:2e:df:89:51:b3:98:d3:ad:90:
a1:76:1c:5b:ba:84:8b:c8:f9:cc:b8:5a:2a:40:db:
4e:30:20:68:50:92:ff:5e:98:d9:ac:c7:32:67:ae:
08:a6:f4:46:6c:f5:eb:e1:7c:3a:b4:bc:54:56:69:
10:31:14:89:d8:6a:9e:96:6e:e0:e1:bd:31:16:3b:
1e:3e:26:b3:e1:36:4a:12:df:0b:bf:43:4d:a3:48:
be:61:47:3f:6c:d7:c3:93:44:8b:0f:52:bb:c8:a1:
83:f7:3b:48:1f:06:46:a2:af:3a:20:8e:e7:dc:e4:
c2:dc:44:ed:1d:26:59:21:81:7e:11:06:d9:17:a6:
fc:20:19:3e:f3:94:5b:7b:c0:ec:7c:39:98:5b:4d:
7e:c2:cd:8d:22:1b:c9:2d:04:6a:87:bc:47:79:68:
1e:36:23:d4:01:46:d8:e8:7d:be:ee:95:ee:94:00:
ef:4a:69:69:d8:7e:1f:f1:dd:3e:9c:b4:2c:9e:ea:
d6:b0:75:48:7f:55:9e:68:73:6f:1f:9a:2c:ce:52:
2c:47:75:c0:3d:71:be:aa:b2:ca:e0:35:05:d4:ea:
68:c4:5c:be:5d:90:f7:1a:84:c3:14:a0:bd:80:c9:
02:d5:5b:ad:ff:5d:05:3b:c5:36:df:7d:67:a8:7a:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:C6:0D:5E:31:29:A0:D2:DD:3D:8A:B7:4F:6A:45:E7:57:A9:6C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5oLGDV4xKaDS3T2Kt09qRedXqWw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:65:ad:05:41:b4:cb:f6:48:e4:54:83:a8:13:22:38:8e:bf:
1b:d6:54:ef:04:fe:c8:81:16:4b:51:fa:35:35:80:93:61:88:
a8:7e:49:e4:1c:54:cd:71:bc:5a:32:70:9c:b6:c7:0c:14:7f:
4d:98:02:4c:4e:f7:43:0d:04:da:06:41:c1:16:df:20:15:2e:
71:29:c5:d6:00:63:a0:21:d6:dd:72:10:73:09:16:44:53:73:
63:6d:c3:15:4d:44:5f:ed:2d:bd:38:af:30:29:ab:ef:48:84:
30:d9:72:67:18:1f:17:f6:c1:10:78:6b:fa:b5:7a:7c:23:d2:
41:50:12:7a:55:bc:98:ca:d2:20:a3:ef:b7:0c:54:34:d3:c3:
ec:f1:17:c8:4a:ec:70:06:d7:43:f0:6b:94:06:fd:d4:e7:df:
66:c1:d5:7d:9f:a7:b5:38:c5:d3:38:11:8d:43:00:02:09:11:
9e:de:3d:8b:b7:74:73:2f:11:80:0c:91:40:b8:f6:6b:6b:8d:
32:05:1d:c1:8e:1e:25:1c:df:7c:f7:1f:8a:10:8d:a6:c8:8b:
3d:88:cf:8c:43:24:c9:8a:72:ab:ec:64:7a:eb:64:c6:c2:fd:
a3:e5:db:f2:c4:ee:3d:dc:5e:e4:bb:9f:12:a3:49:29:98:03:
48:ad:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:15 2024 by rpki-client on console-ams.rpki-client.org