Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Wbw_6JRiuqLLJz_NftAW6X1uY0w.roa
File: Wbw_6JRiuqLLJz_NftAW6X1uY0w.roa (raw, json)
Hash identifier: ddQxkoL303uhKYZ5+tn/75rlTjRKXKMJVXyMOhe245o=
Subject key identifier: 59:BC:3F:E8:94:62:BA:A2:CB:27:3F:CD:7E:D0:16:E9:7D:6E:63:4C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57DB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wbw_6JRiuqLLJz_NftAW6X1uY0w.roa
Signing time: Wed 15 May 2024 17:24:13 +0000
ROA not before: Wed 15 May 2024 17:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22491 (0x57db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 17:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=59BC3FE89462BAA2CB273FCD7ED016E97D6E634C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:3d:a0:f0:6f:0d:72:dc:95:4a:66:67:3b:
42:ab:12:21:3d:e6:2e:ca:90:b6:19:83:68:ca:09:
f5:b3:62:f7:f0:b5:85:bc:c7:63:28:92:b1:a0:5c:
86:da:e0:fb:9e:cd:d2:54:10:62:6f:79:33:77:32:
80:f1:4f:12:7b:5e:9d:94:92:37:c2:9c:19:bd:90:
93:0a:f4:53:b5:76:27:12:51:b9:7c:bd:1f:91:d3:
2b:75:7e:be:d5:83:fd:ee:28:92:56:e9:c2:fd:30:
08:84:00:4e:7a:8b:c8:27:fb:1b:70:74:58:e6:a6:
3a:ca:52:ee:f0:47:82:b2:3a:53:a0:66:58:91:ad:
cc:ce:ff:8d:15:2c:1c:9e:73:bb:38:ef:cb:90:74:
48:40:24:83:e3:b1:33:bc:ea:43:35:ca:77:0a:d8:
6a:33:36:a4:dc:5b:47:ad:d1:cf:44:80:66:ed:c5:
dd:44:fd:0a:dc:5f:80:bc:21:03:3c:0e:87:0e:f7:
39:55:57:59:e6:09:4f:2a:53:19:67:ae:a9:06:36:
34:9a:92:f0:27:bf:f7:db:40:c1:cf:26:8f:bc:e1:
99:f9:60:cf:38:21:d2:1a:a9:94:85:70:8c:85:7e:
5d:be:63:49:ea:4f:5c:66:e8:76:3a:2d:04:68:21:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:3F:E8:94:62:BA:A2:CB:27:3F:CD:7E:D0:16:E9:7D:6E:63:4C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Wbw_6JRiuqLLJz_NftAW6X1uY0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:f5:12:fc:d4:e5:f1:fb:e7:47:6d:3a:e3:70:a6:27:83:a4:
9c:0d:4e:82:39:66:53:01:39:e5:e5:2a:90:a2:c9:9d:8c:3e:
e2:23:c8:ad:d5:61:bb:24:1e:0d:d4:1c:5c:8f:2a:fa:ff:fc:
9b:40:eb:b6:a6:20:49:5d:43:1e:21:09:3f:bf:4c:4f:f3:33:
88:bc:be:db:81:67:84:8a:ce:5a:81:42:58:bd:12:e0:a8:9f:
95:b8:29:89:60:cf:45:91:16:8d:00:0a:e6:b8:3c:85:c4:d0:
85:49:d4:b0:50:1f:18:5c:16:33:6d:23:a7:24:de:58:e3:43:
68:8c:71:7c:24:f9:d7:b0:ca:6a:82:7a:9a:fd:7f:4f:8d:40:
ac:63:c3:a4:74:54:cd:4a:fb:a8:9c:4b:e7:ab:0f:a6:7a:4d:
8a:ab:39:a2:03:25:79:60:b3:4e:e4:11:7b:f7:db:51:74:48:
4f:91:fa:24:32:ff:36:bc:7d:7d:fb:eb:72:7e:66:2e:19:b9:
89:3c:91:e2:ee:23:b4:17:27:17:6b:b4:4d:5e:c6:08:dc:22:
04:27:88:29:cd:20:d9:28:62:48:f2:25:d9:11:1e:40:c4:df:
b7:7c:14:fe:b2:d3:11:27:e8:82:a2:93:f0:0b:26:41:bc:b1:
19:01:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:48 2024 by rpki-client on console-ams.rpki-client.org