Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Kb5SCcWqucihtr-94VHHF0Ttqsw.roa
File: Kb5SCcWqucihtr-94VHHF0Ttqsw.roa (raw, json)
Hash identifier: CUh7FbMMg+ShsmmoT38Aty5pmpBL/zlfhGz0c3fngu4=
Subject key identifier: 29:BE:52:09:C5:AA:B9:C8:A1:B6:BF:BD:E1:51:C7:17:44:ED:AA:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Kb5SCcWqucihtr-94VHHF0Ttqsw.roa
Signing time: Thu 18 Apr 2024 19:23:01 +0000
ROA not before: Thu 18 Apr 2024 19:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17323 (0x43ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 19:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=29BE5209C5AAB9C8A1B6BFBDE151C71744EDAACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:34:9b:ca:30:60:14:3e:8a:c3:17:9d:f7:
d3:e2:a7:a2:35:c8:64:98:74:95:3f:61:36:0d:87:
ca:62:63:3f:11:02:e6:7e:c0:7e:75:99:9b:5b:72:
2c:17:6c:80:9d:d2:8a:5b:62:84:10:9a:c1:fd:73:
33:4b:62:6a:fd:91:b1:78:0e:66:ff:35:11:b8:17:
37:ab:0d:8d:5c:8f:bd:7e:f5:db:e0:c3:93:99:dc:
ff:d1:bf:0b:d8:f2:7e:c2:4a:08:cc:76:8b:67:28:
88:3a:47:4c:5e:6c:bb:63:20:71:8a:71:33:bc:6e:
bf:0b:e0:87:bb:86:df:16:5e:74:de:ce:4d:06:95:
72:fb:91:be:5e:f8:2d:ae:07:f8:4e:39:23:63:02:
32:c1:25:48:59:c7:44:e2:3f:7b:5a:9a:c8:c8:2e:
2d:0e:fd:43:ac:08:fa:40:ce:3e:1a:8b:a2:c0:cd:
36:f5:3c:66:46:34:78:d2:a1:80:86:df:68:21:43:
71:99:4d:5b:3f:8d:bd:3d:9a:00:13:21:72:13:bd:
b4:63:7e:d8:f4:2f:51:b1:4a:47:95:b6:0e:5d:59:
ea:33:49:3c:0d:8f:92:68:aa:a8:6b:91:8e:04:30:
b5:0d:83:8f:56:8a:56:02:6b:17:4a:40:d2:75:3d:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:52:09:C5:AA:B9:C8:A1:B6:BF:BD:E1:51:C7:17:44:ED:AA:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Kb5SCcWqucihtr-94VHHF0Ttqsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
39:91:cb:24:d1:2a:48:13:99:cd:3a:56:70:e1:c7:dc:9e:59:
c0:91:b1:70:a7:09:97:9f:ba:b5:cd:1e:c5:b2:73:35:c2:38:
6c:41:47:98:8c:c9:ed:fb:7d:ae:16:5b:43:13:4d:38:bc:08:
eb:21:46:9d:19:ad:a6:3d:c1:86:cb:a2:e2:16:45:40:6f:86:
81:8a:fb:0b:2e:2f:86:f2:20:e0:55:15:b7:a4:80:46:aa:6b:
4c:e4:55:50:35:cc:cb:e6:1c:2d:09:9b:b3:1f:5d:79:09:33:
a5:ce:e3:f8:95:26:89:bd:65:69:14:ac:67:3d:26:76:eb:c9:
b4:f7:ba:5a:5f:ab:5b:7a:59:9d:49:44:a7:0d:81:26:78:f4:
95:35:66:66:28:ca:83:5f:aa:51:9f:8a:7d:0d:f6:f7:e8:dc:
87:2e:69:14:05:24:9d:f7:b9:99:a3:1b:f6:db:8a:69:1e:c9:
71:c6:5d:c5:61:e3:d6:a9:90:0a:de:c2:15:9c:b1:51:68:28:
4a:ee:79:b0:33:24:a2:f8:b9:77:5e:23:5e:9a:13:9d:21:9b:
20:89:ff:6d:da:16:b5:8a:f3:f7:ea:31:04:59:d4:30:2f:aa:
dc:ea:cf:ee:27:64:e5:4b:6f:a4:e2:7a:dd:82:43:43:48:ba:
ed:54:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org