Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Uw2X515xoamxIkuoSQjENxp26X8.roa
File: Uw2X515xoamxIkuoSQjENxp26X8.roa (raw, json)
Hash identifier: 1OVwKiLE2z5oI/lsNc88XqXe6+KIiG+Tjt7pCPPGZ2s=
Subject key identifier: 53:0D:97:E7:5E:71:A1:A9:B1:22:4B:A8:49:08:C4:37:1A:76:E9:7F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 526F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uw2X515xoamxIkuoSQjENxp26X8.roa
Signing time: Wed 08 May 2024 11:53:57 +0000
ROA not before: Wed 08 May 2024 11:53:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21103 (0x526f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 11:53:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=530D97E75E71A1A9B1224BA84908C4371A76E97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:ea:d8:57:8f:28:af:39:a4:ba:35:3c:cf:
9b:97:bb:4b:58:02:b0:4d:5e:05:fb:e8:77:95:67:
2e:28:f8:2a:a7:24:07:83:9f:40:11:8f:7e:2a:b5:
0b:1a:91:7e:a6:ca:8c:ab:cb:1d:97:99:7c:0b:9a:
68:0e:73:44:b1:d4:17:51:46:6a:3b:fc:34:44:71:
ba:79:96:1e:02:7f:38:e4:22:cd:95:8d:c4:34:49:
c9:5e:12:9c:c4:bd:e2:3d:b0:d2:ba:e4:89:60:cd:
1a:44:55:e8:46:02:75:51:ba:c2:94:c4:30:df:3b:
10:eb:31:64:72:d4:1e:87:ad:ce:ce:e3:bb:f5:83:
37:50:fd:23:49:93:46:3d:bb:a2:10:40:32:b2:21:
5a:80:fe:02:0f:df:d3:ad:94:28:bf:ce:53:b0:05:
d9:5e:a3:89:5e:e4:6b:7c:90:75:4b:46:f8:c2:b8:
8a:1b:94:79:a2:d8:4e:31:6b:d8:45:de:e1:f9:74:
e1:51:32:ec:3d:1a:68:a7:2f:bf:50:15:54:6e:66:
c5:f9:64:94:bd:30:f5:df:aa:bf:ed:97:15:90:c7:
2a:c2:0b:4c:11:94:a0:40:3b:ac:bc:26:3d:d8:b1:
fb:4f:c2:4d:27:f6:39:9c:fe:c0:7d:76:eb:8b:ed:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0D:97:E7:5E:71:A1:A9:B1:22:4B:A8:49:08:C4:37:1A:76:E9:7F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Uw2X515xoamxIkuoSQjENxp26X8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:95:2b:54:d3:34:03:b2:6d:c0:06:7b:d4:63:de:b3:9c:bd:
8b:6e:35:23:aa:c0:9f:72:4f:8a:33:ea:95:28:1c:cc:91:27:
f1:5c:01:f7:f6:7f:c6:39:c1:f1:1b:4a:06:ae:4f:db:85:80:
9c:4e:70:45:1c:b8:b1:bc:23:42:db:81:97:72:c1:b1:50:2b:
6e:ff:f3:df:68:de:91:f5:66:40:9b:8a:81:59:c7:ed:46:26:
dd:74:a5:f9:ab:7c:ad:5e:c2:43:d3:0a:82:50:73:c3:e5:d5:
7e:ac:1c:f3:97:ab:1e:5f:44:aa:b5:e1:fb:eb:0e:a2:e8:f0:
99:3a:ec:38:19:90:e1:95:28:1d:72:46:b2:9e:33:28:73:58:
2c:38:17:df:ef:d1:62:f2:64:9d:6c:bc:7d:4b:ca:28:eb:af:
01:31:5e:f1:76:42:3a:bd:d9:58:3d:31:81:48:63:bf:8c:79:
25:56:27:57:7f:10:58:d9:60:a9:04:74:05:3a:87:92:39:3c:
2d:ff:39:29:c4:fc:22:f2:19:35:e9:6c:6e:6e:a5:5f:d9:13:
2d:78:05:e8:36:7a:d8:6e:bc:6f:a6:1b:24:f9:96:ed:7b:e6:
e0:5e:29:d9:2d:36:fd:b4:5c:f5:ab:2e:3a:43:a0:34:f1:9f:
60:bc:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org