Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GwW9_ffRuLWozbmdM5F6_i7D6-U.roa
File: GwW9_ffRuLWozbmdM5F6_i7D6-U.roa (raw, json)
Hash identifier: Le19m5NcsKbMoHb9zqdqThB9NKwKxTjakk5XR1eV5g4=
Subject key identifier: 1B:05:BD:FD:F7:D1:B8:B5:A8:CD:B9:9D:33:91:7A:FE:2E:C3:EB:E5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5673
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GwW9_ffRuLWozbmdM5F6_i7D6-U.roa
Signing time: Mon 13 May 2024 20:24:09 +0000
ROA not before: Mon 13 May 2024 20:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22131 (0x5673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 20:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1B05BDFDF7D1B8B5A8CDB99D33917AFE2EC3EBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e6:a6:e3:46:e4:40:c2:2a:50:98:8f:30:e1:
b6:c8:b0:36:fc:88:a3:c0:59:a6:2f:a4:dc:68:1d:
f5:0a:ab:8c:77:c4:c6:4d:88:a7:eb:24:cb:51:3d:
a2:59:0a:41:6e:8d:f4:96:9f:41:11:09:33:ba:cb:
04:a8:04:f9:3b:84:56:34:e5:b8:e9:de:85:e1:39:
47:58:67:33:9a:db:74:15:4a:e6:7d:8b:c0:7e:a2:
a4:ea:6e:28:e8:b5:5d:5e:b2:31:39:3c:9f:29:83:
d8:5c:1e:54:60:a2:1e:12:3f:fa:99:42:7b:6b:4b:
8f:74:d6:23:ce:37:88:f2:75:02:4f:6a:44:ac:68:
3b:8d:3b:6e:d1:2b:d2:60:3b:dd:66:0f:ef:36:96:
d8:12:4a:56:f4:2c:70:fc:4b:0a:b4:e2:d1:25:1c:
b7:7b:8e:31:7b:e9:dd:92:03:d8:d0:ba:8a:d2:40:
42:cb:2b:b4:e1:b4:80:11:59:9f:72:2e:33:e8:5e:
ea:43:48:a8:cc:e8:3d:08:ea:fd:27:26:29:b7:7e:
3b:02:d1:a7:39:fd:2a:86:0b:ed:e3:6d:5e:dc:bd:
98:1c:eb:e0:8f:c3:6c:b7:20:e2:f0:2f:5f:d8:3c:
59:d1:6b:b3:1b:3e:6a:48:8a:ca:e9:da:aa:53:f7:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:05:BD:FD:F7:D1:B8:B5:A8:CD:B9:9D:33:91:7A:FE:2E:C3:EB:E5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GwW9_ffRuLWozbmdM5F6_i7D6-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
69:ff:4e:ae:de:b5:1f:17:e7:e4:e0:60:7e:5a:79:c0:41:ce:
9e:8c:65:76:0d:86:92:c0:48:61:27:de:30:68:1f:b1:87:27:
cf:49:44:7a:d3:68:bd:ef:b4:46:ad:7b:43:79:99:8b:a1:1b:
4a:97:ea:b4:93:d6:f8:32:74:48:3d:fa:6e:21:93:4f:49:63:
e0:21:62:24:c2:9d:4d:57:7e:7d:c6:ea:11:76:24:b1:df:d0:
32:55:97:5b:e1:05:c5:be:ce:7a:bc:d0:75:05:4c:8a:59:e9:
8a:8b:d5:ac:78:11:b6:96:58:c7:fa:5f:07:1d:11:33:0c:fb:
a5:1a:be:47:e0:2b:24:28:42:68:5a:f0:db:b8:c9:53:cf:55:
ee:4b:b3:21:be:03:00:59:97:ec:5e:89:0e:48:25:e5:2f:c0:
a6:c0:2b:6f:af:ae:c0:97:0d:c0:ff:88:ac:84:83:af:70:4f:
64:4b:92:89:15:b0:2a:01:1c:4a:aa:d6:41:77:d5:96:2f:bf:
c6:90:13:8e:97:07:bd:8d:f6:2b:24:2b:36:7a:cc:aa:35:45:
18:d5:7d:98:3e:73:eb:ba:d1:67:6a:10:ac:90:eb:ce:f1:1e:
1f:61:47:d4:b7:6a:4c:ca:93:dd:b1:8a:9b:8f:be:92:e1:58:
5e:08:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org