Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5rTmPIFG0zQHGyVbXzImjFV4QL8.roa
File: 5rTmPIFG0zQHGyVbXzImjFV4QL8.roa (raw, json)
Hash identifier: Mags5pOvlk1VRt6U3tvUAJAb0QDC1p2RKY3m/VXmrGA=
Subject key identifier: E6:B4:E6:3C:81:46:D3:34:07:1B:25:5B:5F:32:26:8C:55:78:40:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5527
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5rTmPIFG0zQHGyVbXzImjFV4QL8.roa
Signing time: Sun 12 May 2024 02:54:09 +0000
ROA not before: Sun 12 May 2024 02:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21799 (0x5527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 02:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E6B4E63C8146D334071B255B5F32268C557840BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:d1:9f:d0:a6:f1:fa:23:2f:96:e6:b2:f4:
b5:f7:39:9b:1f:18:be:39:03:21:b5:63:dd:30:a3:
2f:0a:55:1b:1d:71:f6:5d:83:2c:20:39:37:af:19:
86:20:83:be:7f:3e:fd:d7:47:97:6d:d3:0a:d3:87:
81:30:77:9b:33:a7:e9:d5:11:c4:4f:18:87:31:e4:
39:d7:18:a7:27:e4:fc:43:9b:bf:44:e0:e6:29:f2:
98:2e:da:50:3f:98:2c:fa:e8:1c:3d:14:23:c6:16:
03:29:3f:d6:f0:47:0b:e5:fa:2c:c0:26:40:89:ce:
d9:4d:e1:6c:73:a4:b5:77:f0:7e:0d:c3:02:c6:c3:
db:e2:2d:57:94:f8:87:a7:2b:57:93:d0:76:be:f5:
f8:e7:90:1a:c3:b8:f9:32:dc:0b:19:93:18:2f:28:
f8:89:9c:8b:29:1f:cb:e9:19:e2:fe:bf:06:95:c8:
73:55:08:62:47:d0:ad:99:0d:41:e5:2d:78:d1:c3:
28:43:dd:e9:dd:e7:66:80:7d:d6:63:a3:d7:c5:fb:
1c:d3:d5:65:3b:01:ed:3b:75:88:8c:9e:c2:10:2e:
51:71:19:3e:76:8b:77:7e:ac:66:25:1c:dd:fa:c0:
d8:48:c8:38:a9:38:04:6c:f4:f9:fd:79:40:8b:91:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:E6:3C:81:46:D3:34:07:1B:25:5B:5F:32:26:8C:55:78:40:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5rTmPIFG0zQHGyVbXzImjFV4QL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
97:e3:d8:72:5c:2d:fc:67:33:fc:d0:a1:ee:16:41:e5:0f:7b:
a0:04:b1:e3:f9:20:d2:b7:8d:14:af:68:d4:7a:44:47:57:7d:
92:46:7b:b7:ce:81:6a:9b:15:4b:0c:53:5e:15:3f:24:01:46:
f7:61:fe:22:8b:29:89:5f:73:47:fa:56:2c:41:a9:60:99:88:
d0:84:1c:40:32:87:56:37:b7:23:cc:fe:52:a4:fb:7c:cb:06:
b5:26:73:4b:c8:8b:8d:c4:67:e6:f4:5c:91:11:bc:19:f0:02:
5a:f5:d0:a6:a7:fe:5a:60:b5:27:aa:77:79:00:7b:bc:54:59:
a5:ce:4c:96:87:d5:f4:91:1e:3f:4d:a7:c9:82:70:4a:48:a4:
e5:a1:13:5a:45:41:4c:b1:25:19:7f:de:d2:2d:1d:13:5d:11:
dc:fe:e9:9b:85:3a:25:45:1c:d7:62:59:3c:b5:b9:05:f8:ff:
f1:bf:30:fb:90:8d:45:30:b2:95:35:dd:34:03:7a:ae:82:ba:
71:72:91:ac:40:7a:7f:bf:e3:66:34:23:e4:32:e5:a2:5e:7f:
97:93:e7:47:14:da:ca:d3:67:c4:74:fe:6f:0c:f3:dc:11:d7:
fd:21:0f:e5:31:89:3d:05:7b:33:51:4e:7b:94:fc:6e:de:6b:
fe:cc:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org