Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T5bG3mO0xVvl_gAL17uZE5FdH14.roa
File: T5bG3mO0xVvl_gAL17uZE5FdH14.roa (raw, json)
Hash identifier: vrjFdlhayF1Sbov/86RrIOvTP3oEQ6Si/9ejWeDCNrA=
Subject key identifier: 4F:96:C6:DE:63:B4:C5:5B:E5:FE:00:0B:D7:BB:99:13:91:5D:1F:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F2B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T5bG3mO0xVvl_gAL17uZE5FdH14.roa
Signing time: Sat 04 May 2024 03:23:59 +0000
ROA not before: Sat 04 May 2024 03:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20267 (0x4f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 03:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F96C6DE63B4C55BE5FE000BD7BB9913915D1F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:08:b5:17:0c:5e:92:38:cd:c8:ef:6c:fc:
bb:31:dc:bf:5f:05:9a:b1:86:ce:ef:6c:ec:70:27:
83:e9:26:7e:b3:54:6c:c9:a5:ac:72:00:40:8c:bf:
08:4f:44:6f:b9:1b:ec:87:8a:48:cb:8f:fe:cb:7d:
f0:01:94:82:40:5a:c6:63:40:ee:4b:d2:c7:9f:e3:
eb:80:24:a2:cd:31:b4:eb:26:9f:08:82:84:34:1e:
3c:c7:ae:16:06:af:30:02:e0:a8:cb:89:aa:59:f0:
8e:3f:4f:84:45:90:34:e1:9a:89:46:8e:97:f7:20:
9a:47:79:2a:e3:f3:79:a7:a3:ac:2e:06:6c:69:80:
f4:20:0a:08:15:b1:26:90:f5:f0:ff:49:3b:74:1b:
10:56:b7:50:41:9b:d6:e7:86:26:61:f9:20:c9:f3:
7e:d0:fc:1a:5a:80:bf:ef:97:39:1f:af:6c:25:f4:
c9:1e:75:79:bd:f6:1b:73:38:7c:5c:7e:dc:ac:63:
2d:74:d6:7f:43:1f:75:12:61:6d:33:c2:9d:77:a2:
9f:5f:f8:0b:04:15:d1:15:23:17:07:61:87:8e:50:
22:85:f7:ac:10:7a:6b:5e:0b:71:39:9e:82:eb:17:
40:5b:7f:4c:34:ea:ca:cc:19:c7:7e:88:85:49:6d:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:C6:DE:63:B4:C5:5B:E5:FE:00:0B:D7:BB:99:13:91:5D:1F:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T5bG3mO0xVvl_gAL17uZE5FdH14.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:8f:bf:c5:d7:4d:ed:a1:1f:05:96:d9:92:e6:fb:5d:93:92:
10:40:b1:af:da:5c:96:c2:09:c0:49:70:cc:6d:df:df:3b:95:
a8:b3:cf:2f:a8:0c:a8:6b:35:76:ae:1d:bc:7a:2c:66:fd:7e:
00:58:f7:9c:2c:7e:b5:b7:98:23:ed:03:4b:cc:bf:8c:6e:b1:
b6:e5:6e:a5:a2:8d:26:ce:2e:3f:5a:89:7a:e0:19:ca:94:32:
3b:90:ea:b5:5e:58:85:02:9a:02:bc:c2:a4:04:63:e1:9b:81:
0f:3d:6d:98:da:d5:74:bb:b9:c8:e2:28:99:f4:da:08:e3:a4:
7e:a5:43:f9:5c:2c:f3:20:f7:42:69:45:80:00:cb:d9:82:26:
d3:ab:92:a5:5f:62:2b:38:3c:13:89:5b:df:73:0a:65:12:88:
e7:8f:13:1a:9b:c1:90:1c:6c:02:63:9f:97:64:15:dc:55:6e:
a4:7e:11:cd:ad:cb:0c:23:98:dd:e1:c5:7c:ea:4c:76:cd:7e:
a7:5d:35:29:38:29:c3:0e:82:b2:0c:5b:d0:41:66:39:23:98:
11:52:98:d1:18:f0:82:0b:f8:9e:50:d8:a0:cb:e7:40:49:72:
95:51:76:70:66:c0:dc:6d:8a:e0:51:26:a4:c8:92:d0:45:c6:
84:b4:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org