Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WrGHhGtaXZMT8DROVI4C0dO2V4E.roa
File: WrGHhGtaXZMT8DROVI4C0dO2V4E.roa (raw, json)
Hash identifier: Sg0r6LXr1rN55TBBzWv9E3STIc7kT64GKeH0//JPcyM=
Subject key identifier: 5A:B1:87:84:6B:5A:5D:93:13:F0:34:4E:54:8E:02:D1:D3:B6:57:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 430B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WrGHhGtaXZMT8DROVI4C0dO2V4E.roa
Signing time: Wed 17 Apr 2024 23:23:00 +0000
ROA not before: Wed 17 Apr 2024 23:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17163 (0x430b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 23:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5AB187846B5A5D9313F0344E548E02D1D3B65781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:be:9a:0e:fb:42:68:eb:46:da:3b:9e:fa:
fc:99:29:78:a6:66:d5:b3:5b:5f:94:c7:44:1b:ab:
8b:1f:99:dc:94:09:7b:ae:8c:ad:7c:e1:aa:61:2a:
e8:ec:7f:63:9f:a2:64:8b:6d:41:4f:6f:68:d5:ce:
06:15:f4:7c:1c:4e:5e:4e:b5:5c:dd:04:37:35:18:
3b:4b:e8:ca:89:f4:d7:07:06:5e:b3:ae:15:0f:b7:
7f:17:b8:56:40:03:80:2d:7b:44:46:d1:9c:03:6e:
72:5d:0a:3f:47:8e:6c:bd:ae:2a:50:d9:5e:89:16:
56:7c:b3:20:c3:8c:ff:b3:aa:80:c2:9c:91:4a:79:
87:9e:73:68:8c:11:d3:55:9a:f0:77:d2:60:fd:0b:
08:45:2f:82:e9:13:12:93:a2:8b:f9:34:b7:26:f0:
3f:05:78:0f:ba:5e:69:8a:1e:33:19:10:f1:0f:e9:
65:36:70:a9:7b:1f:41:37:e8:b6:2a:88:61:81:1f:
01:e5:1e:ca:ee:52:62:f7:04:07:dc:65:13:01:73:
11:c0:0a:3a:c5:98:42:9f:fd:91:8e:a6:f6:6c:4d:
e8:e3:3e:8f:9d:26:3d:29:0b:55:a2:5e:59:b8:af:
a4:fa:e9:7b:30:b6:ce:63:be:b8:92:75:9a:20:e8:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:87:84:6B:5A:5D:93:13:F0:34:4E:54:8E:02:D1:D3:B6:57:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WrGHhGtaXZMT8DROVI4C0dO2V4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:5c:68:22:9f:29:0a:70:f9:93:2f:3f:6e:13:2b:38:a9:10:
3f:44:b8:b3:65:aa:50:32:e7:1e:e1:e5:31:0a:51:93:b4:33:
0f:07:0a:42:79:a1:18:6c:03:dd:c0:cd:25:64:0b:44:12:f2:
00:65:5a:01:b2:c1:e5:a6:b3:af:59:d8:4c:f4:ab:ac:a1:76:
ae:11:08:f3:b8:2a:e8:9b:56:4a:6c:cb:5c:01:7c:e8:5f:63:
97:de:a3:d2:08:24:5f:6a:6c:3f:39:7f:ad:8f:59:42:70:7a:
77:4e:36:7f:45:aa:e9:d6:9d:d7:83:47:2d:17:fc:94:bb:f7:
12:1a:3a:10:b3:c0:ab:38:e2:60:22:04:8e:87:33:dd:d5:5a:
1d:55:04:66:80:ac:19:22:72:dc:7e:55:c6:a2:51:2f:c3:1e:
75:21:84:5d:f0:f0:3e:10:7a:56:a2:ec:85:24:db:dc:04:a4:
c8:cd:5b:58:ed:00:79:e0:f7:a2:50:ee:c3:25:2d:d4:34:70:
49:65:fa:a3:89:93:98:eb:25:57:47:ad:97:59:b9:1e:d8:c1:
b7:f7:72:65:8c:e0:01:d4:cc:bc:f1:db:1b:76:69:3f:88:7a:
24:93:02:5e:3c:50:33:08:5d:83:f7:8f:20:9e:c7:7e:7c:c3:
1c:0c:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org