Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TQtKpSu-5V0MB79kd7NJi5Pu5L8.roa
File: TQtKpSu-5V0MB79kd7NJi5Pu5L8.roa (raw, json)
Hash identifier: bDAxcTM1mDHq1LR3GkcPilQo5NML/30jwwMeiXBgTmQ=
Subject key identifier: 4D:0B:4A:A5:2B:BE:E5:5D:0C:07:BF:64:77:B3:49:8B:93:EE:E4:BF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 580B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TQtKpSu-5V0MB79kd7NJi5Pu5L8.roa
Signing time: Wed 15 May 2024 23:24:14 +0000
ROA not before: Wed 15 May 2024 23:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22539 (0x580b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 23:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4D0B4AA52BBEE55D0C07BF6477B3498B93EEE4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:66:c9:7f:9d:61:f7:da:e5:14:d0:c6:ba:
9b:18:af:80:41:6c:89:e9:af:6e:5f:f0:77:f9:73:
9f:13:9a:f5:38:cd:1c:cc:77:f6:73:6c:e5:e2:b3:
03:2c:34:dd:34:1a:9b:7d:ac:aa:98:9c:ee:53:55:
f3:b0:8f:51:75:04:a4:50:85:bb:e2:5a:11:c5:30:
0c:fa:39:fc:e9:f5:31:8c:5c:2d:40:26:1b:b1:30:
0b:f1:7c:40:6f:54:68:12:ce:fb:0e:7b:c1:9b:54:
86:a9:55:40:81:d9:9b:99:2a:66:e1:6d:00:34:7d:
67:bc:7f:0b:0d:0b:05:c4:0a:85:d9:81:03:79:d6:
d5:7c:ad:28:02:3e:11:f0:08:54:80:e3:d5:37:92:
7c:64:52:8e:21:2d:75:c7:03:12:35:10:34:c8:23:
d8:62:94:a0:0f:96:19:d7:67:66:7b:6e:b1:c8:17:
66:d9:cb:9b:29:bb:66:20:51:85:89:3f:89:40:9c:
13:27:b5:d0:de:02:1a:0c:ea:2f:76:26:0b:f5:ce:
23:e9:bb:1c:b1:fa:8f:1d:f7:de:f4:4c:ae:6e:d0:
e4:b1:53:83:1a:72:37:89:6f:a2:5c:cf:d7:f6:e3:
b4:ea:02:a7:27:b5:4e:43:02:c6:0e:12:94:c8:20:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0B:4A:A5:2B:BE:E5:5D:0C:07:BF:64:77:B3:49:8B:93:EE:E4:BF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TQtKpSu-5V0MB79kd7NJi5Pu5L8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
04:33:54:10:27:f1:b6:b1:41:dd:92:15:c1:3b:20:82:a5:25:
2c:93:a8:3c:5c:7e:de:cf:e0:9a:5d:c8:b8:8d:7e:fe:6b:c3:
e2:4b:65:8d:76:c3:4f:30:3a:0e:ab:89:88:89:65:b1:70:e2:
51:81:2e:2b:53:22:46:10:db:8f:bf:36:a3:0d:32:c5:01:15:
bc:50:22:6c:4d:17:2a:f1:35:b5:07:2a:72:69:12:a4:19:29:
07:3f:27:96:82:b3:62:1d:1a:39:8b:ae:ec:71:57:ee:c0:23:
c3:24:dd:b9:1e:4e:37:ad:70:8e:54:05:1a:1a:06:ac:22:bf:
88:05:df:7b:d0:bd:6c:2d:a7:c2:3a:94:37:db:b4:f1:69:eb:
35:1d:21:5d:73:19:5c:3d:20:84:45:a7:74:39:0b:50:82:43:
c4:25:7b:2a:b0:b0:be:91:b3:09:14:e8:64:fe:68:ca:fc:d9:
d4:ca:a5:63:c5:ef:e7:c4:69:83:0f:ae:7d:3f:e2:1b:64:fb:
22:11:5e:92:53:b6:5c:80:7e:91:b2:b8:ae:13:2a:51:0d:18:
3f:65:e9:81:16:c3:61:f8:01:46:20:35:33:d1:de:d0:64:be:
2f:28:a6:12:18:9a:5b:d5:38:14:f6:34:58:9e:40:cc:3f:8c:
5b:ac:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:27 2024 by rpki-client on console-fra.rpki-client.org