Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ws9xuKIs4uQS9tkJQgODJUIdTxI.roa
File: Ws9xuKIs4uQS9tkJQgODJUIdTxI.roa (raw, json)
Hash identifier: 5CL5CAJ6yc4jMFC5+oPLWFre87mTJLHiVNqFUNpfdEg=
Subject key identifier: 5A:CF:71:B8:A2:2C:E2:E4:12:F6:D9:09:42:03:83:25:42:1D:4F:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 525B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ws9xuKIs4uQS9tkJQgODJUIdTxI.roa
Signing time: Wed 08 May 2024 09:23:57 +0000
ROA not before: Wed 08 May 2024 09:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21083 (0x525b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 09:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5ACF71B8A22CE2E412F6D90942038325421D4F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:5b:61:8a:e6:26:20:7b:6a:75:6f:9c:e8:
35:62:0b:98:10:c3:56:30:f1:d7:f8:4c:6b:4e:e5:
b3:24:f3:41:db:6a:33:a3:c2:62:87:1c:f2:ed:65:
66:1b:2a:43:af:69:89:51:e5:b7:67:af:41:55:17:
2d:d8:8c:8c:06:fb:06:81:d4:00:e8:b0:48:4a:88:
d9:d4:b6:af:37:46:2b:c1:fc:35:98:dc:06:cc:66:
e0:a5:6a:04:0b:6e:7c:06:9a:ed:fc:e3:d4:65:56:
bc:8a:08:74:c9:28:2b:67:e3:56:e8:6f:6d:79:58:
65:53:32:45:53:66:fc:0d:9e:0a:92:0f:25:89:f2:
27:6a:bd:a1:cc:33:ed:13:04:b2:d6:87:89:ef:76:
e0:85:75:f7:3a:76:dc:e8:eb:2f:2f:1d:3c:60:5e:
ba:a3:d7:8b:b3:74:a7:27:ce:7d:a9:92:69:7a:21:
b5:87:cf:88:e2:ce:e7:69:e9:d4:10:32:2e:48:80:
29:84:92:c9:2f:a4:10:73:3b:4c:98:ea:93:f6:6b:
40:64:90:1d:89:cc:68:f4:ab:6e:8d:53:8b:32:de:
3c:04:43:55:a3:94:a8:f2:73:6c:df:71:ea:7c:53:
95:17:76:21:8b:60:b5:4d:7c:ea:7e:e5:ce:38:ed:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CF:71:B8:A2:2C:E2:E4:12:F6:D9:09:42:03:83:25:42:1D:4F:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ws9xuKIs4uQS9tkJQgODJUIdTxI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:cc:e1:1e:7c:28:a7:69:0c:fb:7a:cc:0a:52:30:43:b2:42:
57:da:94:b1:42:4b:1c:d0:85:7a:46:e3:88:64:58:91:ad:28:
b9:c0:9b:3b:b1:a9:bf:65:34:52:44:bb:a5:d9:df:80:19:83:
71:9d:02:3a:6e:ca:ff:be:dc:38:cd:d4:27:1a:bf:12:eb:96:
ea:42:f9:ed:bc:df:58:f8:76:c0:28:6c:81:0a:f5:8b:0f:78:
a2:77:d4:c5:5b:7c:55:86:d9:65:df:0b:56:9d:c9:52:e6:ba:
5e:68:ec:fd:59:4d:44:30:33:9c:da:91:9e:1d:db:28:bc:78:
44:d2:83:95:0d:8f:bc:75:62:0c:2b:e7:66:36:86:82:24:32:
44:3b:3e:40:a9:b2:4b:f7:2b:f8:47:e6:14:8f:34:9e:e9:02:
be:cb:4b:fd:b1:34:4f:2c:99:8b:fb:a5:52:cd:55:5b:f8:94:
16:a3:ce:ec:63:fc:2b:a1:2c:f3:e3:7f:5d:ad:de:ff:66:43:
af:72:fc:5f:f9:81:62:c4:89:a2:af:36:05:09:e6:2a:3f:eb:
cd:d5:ed:47:2c:84:f5:b8:f8:8b:d8:0e:03:83:9c:a9:ec:15:
a5:66:b5:73:c2:bd:33:df:8a:f3:f2:9c:48:87:39:a4:83:84:
ee:87:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:48 2024 by rpki-client on console-ams.rpki-client.org