Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W5ZTCKTVnBQ7wAm44JJlW2uP8to.roa
File: W5ZTCKTVnBQ7wAm44JJlW2uP8to.roa (raw, json)
Hash identifier: 7ifmXKYPFORM46MJIvTT4ca+6s1bJqUOqj7ppDU0y2E=
Subject key identifier: 5B:96:53:08:A4:D5:9C:14:3B:C0:09:B8:E0:92:65:5B:6B:8F:F2:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35BB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W5ZTCKTVnBQ7wAm44JJlW2uP8to.roa
Signing time: Sun 31 Mar 2024 05:22:11 +0000
ROA not before: Sun 31 Mar 2024 05:22:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13755 (0x35bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 05:22:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5B965308A4D59C143BC009B8E092655B6B8FF2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:5d:ad:b7:b0:f8:06:51:b5:83:11:69:9f:
11:a3:5f:2d:8f:fe:bc:ee:5a:c7:86:1e:de:fd:36:
8d:c2:f6:85:3d:1a:a6:a2:c3:6a:d4:06:dc:c6:2c:
81:38:43:3d:01:87:68:21:27:36:1a:b9:aa:8f:67:
2f:d5:37:06:4e:e5:e4:57:5f:fd:a0:b9:5a:13:72:
f0:b3:ec:2b:77:9b:a1:6c:5b:99:8a:8a:60:d1:60:
5c:02:c9:58:bc:e7:d1:57:1b:64:43:c9:0f:8d:1b:
fd:67:d7:53:2b:c1:59:0c:99:5b:52:cb:8e:86:f3:
0c:d8:18:54:6e:8a:7c:4d:7a:ce:f7:dd:25:ec:2c:
27:ee:6b:da:8d:a8:55:6e:14:2e:ec:7c:dd:38:1b:
52:b9:60:dd:73:72:25:87:eb:f5:5f:44:02:3d:ee:
08:54:da:93:52:dd:56:3a:78:55:10:d1:13:b7:e6:
70:fb:e9:e6:5f:40:74:bf:c3:07:1b:4f:d8:af:5b:
b4:f4:b7:6d:12:dc:76:8b:af:f6:ee:aa:2a:ff:b0:
ba:bf:3c:e4:7d:fd:01:8d:15:d4:6e:44:e5:aa:b3:
16:c5:42:a1:ef:2e:e0:06:53:2e:6c:b6:6a:41:59:
56:14:93:5f:5f:94:2b:c4:96:01:e0:35:eb:c2:4a:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:53:08:A4:D5:9C:14:3B:C0:09:B8:E0:92:65:5B:6B:8F:F2:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W5ZTCKTVnBQ7wAm44JJlW2uP8to.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:c3:38:bb:37:11:79:ae:4c:a5:00:20:a5:e8:db:f7:1b:70:
bd:ba:85:b6:12:cd:f9:d4:e9:ca:a4:8e:96:65:f5:f9:53:96:
be:e9:a2:34:33:13:2b:cc:56:47:ed:0c:6f:56:ea:73:09:8f:
c5:b1:b8:39:6c:c7:53:cb:f4:ca:39:8e:4d:c5:9a:93:01:28:
ce:9c:b2:8f:a3:6a:31:b7:3b:a5:a1:bd:f7:0e:e8:bf:e3:c0:
c9:82:99:68:62:c1:a0:ea:1e:0e:ec:01:42:e7:a5:ef:c2:e5:
85:32:bc:55:aa:23:6d:69:cd:4c:19:ce:08:74:2e:cf:d8:e0:
53:79:e1:dd:c7:d7:4a:fe:8b:76:a5:43:ee:4d:f7:62:a9:a4:
b0:8f:ff:c5:e2:1b:93:46:36:e3:52:68:a9:fa:ee:f4:09:55:
07:6b:c9:36:c4:96:ee:9a:e0:cd:c8:3e:ca:e4:fb:e9:9d:04:
c8:3f:89:ee:f7:01:65:39:22:50:16:83:59:d3:3d:f8:f3:d5:
6f:63:b8:c4:4b:58:ae:ec:d4:47:81:fb:e4:88:9c:e0:bf:e2:
fb:8f:b4:25:a2:1c:c0:27:fb:50:8c:24:88:3f:69:32:5a:65:
14:3c:e7:63:35:3d:21:3b:c0:f2:90:7d:d3:e3:26:2e:db:55:
cc:57:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:29 2024 by rpki-client on console-fra.rpki-client.org