Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Pn_HIe2X_zdCkHQnm0uQmrD2GTw.roa
File: Pn_HIe2X_zdCkHQnm0uQmrD2GTw.roa (raw, json)
Hash identifier: YAp5l24xm3YPVX5IVP0MKaIByfgSMnjgNHNJJ/aObmQ=
Subject key identifier: 3E:7F:C7:21:ED:97:FF:37:42:90:74:27:9B:4B:90:9A:B0:F6:19:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5743
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pn_HIe2X_zdCkHQnm0uQmrD2GTw.roa
Signing time: Tue 14 May 2024 22:24:34 +0000
ROA not before: Tue 14 May 2024 22:24:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22339 (0x5743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 22:24:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3E7FC721ED97FF37429074279B4B909AB0F6193C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:7e:fc:c8:87:05:ef:91:fe:e2:8b:6f:9d:
04:0b:65:87:7d:48:e5:68:7e:f1:32:0e:8b:3a:f3:
b7:08:26:72:3e:0d:69:de:67:94:a2:1e:d5:04:ec:
6e:c5:5e:89:5c:6b:25:6c:c0:71:e0:cf:93:9f:41:
71:ca:02:07:05:d4:2a:24:2c:60:91:4b:5a:0b:df:
b7:4c:c0:8b:c1:54:00:7d:76:be:85:bf:99:7b:40:
45:b0:c3:04:bd:f7:23:24:a3:4b:b3:03:fc:24:e3:
1f:d3:88:04:80:01:7b:3b:84:f9:3f:78:ee:39:bf:
c2:bf:2c:e5:50:e4:a6:eb:ba:91:37:e9:17:44:d2:
7c:9f:dc:81:9b:ac:37:7c:9b:09:2a:eb:3e:41:cb:
e6:29:c1:f9:4f:b5:bc:a7:e0:af:f6:c0:57:8c:bb:
40:8e:8d:16:3e:b7:8d:41:dc:8a:70:14:25:d0:65:
c7:dd:2d:40:be:82:af:3f:67:ff:a7:31:fb:b0:0a:
6e:8b:43:e5:c7:f8:12:3f:2e:4d:45:28:b8:84:5e:
79:0c:15:0c:e6:50:56:21:d6:c1:c2:46:2a:54:f5:
04:65:32:b3:84:29:48:76:c1:96:18:0c:bf:54:21:
a4:e4:df:ee:b8:a2:9b:8a:5f:9c:6e:57:fd:74:65:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:C7:21:ED:97:FF:37:42:90:74:27:9B:4B:90:9A:B0:F6:19:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pn_HIe2X_zdCkHQnm0uQmrD2GTw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:14:2a:41:65:cf:a7:f9:93:96:e1:a1:0e:72:f5:aa:fb:37:
e1:89:2c:eb:f5:34:93:7b:11:a9:27:e8:a3:6d:be:77:32:02:
2f:49:08:16:d5:44:f2:82:8d:7d:69:21:ba:fc:d7:5b:f1:08:
25:b2:d2:9a:59:2a:a3:6f:38:27:58:d0:cf:41:96:b6:ea:0c:
44:80:11:5b:82:6e:c3:81:c1:8a:08:c3:67:3c:91:5a:dc:1b:
dc:c7:9b:3e:24:df:b9:5f:ec:ed:e9:36:a6:b1:ae:6f:68:fa:
e4:bf:1b:a8:70:51:52:bd:e6:ee:d3:a7:74:b5:bc:ba:6b:c0:
02:5e:f6:f6:6f:27:1f:2e:bc:04:b0:b3:79:66:c9:05:c1:c8:
79:52:91:e9:02:07:08:05:75:f1:e8:2d:31:e5:32:c8:54:30:
fa:c1:ad:df:f6:53:e7:50:ae:20:66:59:5f:1e:8b:04:84:e7:
49:a0:9f:3a:4f:38:f9:e0:be:c5:48:09:9d:79:05:b1:ea:ec:
bd:b3:9c:90:08:c7:c0:1b:95:b0:39:32:0f:94:e1:17:ec:99:
41:3c:8a:58:20:73:1a:b4:15:e9:42:d9:39:56:05:6a:21:eb:
f9:60:b4:82:dd:f7:6d:65:2d:5a:84:2f:9d:ea:88:0e:34:98:
b8:29:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org