Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XWB-HY-e6Pyj5JchfSmHuVLYVQo.roa
File: XWB-HY-e6Pyj5JchfSmHuVLYVQo.roa (raw, json)
Hash identifier: 5ZsXhEK160c/XfsgFHJ7MdBuW9K1AzW1W7MZH/pyMiw=
Subject key identifier: 5D:60:7E:1D:8F:9E:E8:FC:A3:E4:97:21:7D:29:87:B9:52:D8:55:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XWB-HY-e6Pyj5JchfSmHuVLYVQo.roa
Signing time: Wed 15 May 2024 19:54:13 +0000
ROA not before: Wed 15 May 2024 19:54:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22511 (0x57ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 19:54:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5D607E1D8F9EE8FCA3E497217D2987B952D8550A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:2f:a6:ab:e5:ab:fc:4a:5f:4b:bc:3d:94:
94:80:42:ac:ac:f0:03:4f:db:a7:04:f4:3e:87:dc:
94:2b:cc:d7:3c:66:fd:27:4c:af:71:0c:20:ce:ef:
70:ce:dd:a2:a3:54:76:35:a2:59:c3:35:74:c4:2e:
6a:cb:03:59:ad:16:cf:e3:63:f0:c8:1c:7b:86:17:
7a:43:d1:9e:c7:6c:ff:1e:7f:11:04:ce:73:18:2c:
a3:79:56:18:49:79:09:d4:6d:85:5e:13:9b:9a:0d:
65:a5:5e:93:02:a4:7c:ff:31:f0:88:8b:81:3a:27:
1f:57:ad:57:62:27:75:6c:a8:e3:be:37:ad:25:35:
99:3f:ab:1e:dc:f6:eb:f7:7a:94:10:8a:a9:08:ac:
09:4b:62:b9:1f:18:b8:7e:d2:fc:8b:5d:c8:ac:6f:
b6:a5:b9:88:cf:83:f4:b4:64:e9:28:f5:80:59:c1:
42:b3:28:e7:64:5e:56:06:7d:9c:3e:8e:a3:b4:6b:
ce:7c:55:dc:db:b9:16:69:80:4c:9c:c8:f2:bd:b3:
fc:30:f6:cf:4b:11:e7:a0:f7:43:4b:8d:bd:1c:17:
53:32:17:18:af:a8:eb:08:b8:aa:c0:31:ac:4e:07:
c3:8d:0d:d9:b3:df:51:9f:1d:a5:4e:35:47:9a:36:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:7E:1D:8F:9E:E8:FC:A3:E4:97:21:7D:29:87:B9:52:D8:55:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XWB-HY-e6Pyj5JchfSmHuVLYVQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
69:df:be:7b:4d:d4:0d:87:c5:e8:30:28:b7:55:9b:82:10:26:
2c:cc:bd:37:d9:ff:10:4e:f5:db:c5:7e:ae:b3:60:59:8f:0b:
6a:aa:2d:14:56:02:61:dc:50:05:91:4e:fe:15:5b:f8:0e:75:
4a:14:88:5a:dc:aa:b6:29:ab:f4:6e:82:22:e4:5e:66:6a:e2:
cb:f7:37:98:bb:ca:0c:21:a8:3e:5e:ab:23:9d:eb:ff:2a:41:
65:64:0e:61:38:4d:ab:d7:da:0f:fc:67:f3:cb:df:ca:f1:01:
0b:f5:f9:61:7f:6b:7a:83:cd:c7:94:fa:6a:f0:ab:33:83:db:
2b:0d:33:bb:6b:fc:e5:e3:07:f8:d9:c3:07:bf:25:e9:cf:26:
63:a6:c4:48:6c:45:87:3b:93:21:55:c0:79:ed:f4:48:bc:25:
d1:4c:71:a1:76:72:f5:b1:5e:5f:a3:d7:b0:c3:49:53:29:0f:
74:ae:95:2c:66:86:3f:3b:19:5a:f5:97:1c:6a:af:02:1e:7c:
52:8f:e6:a0:57:61:8a:c3:9a:c7:b6:44:e5:f1:23:cc:c7:46:
75:ac:6a:98:0e:ae:5c:f6:10:d8:02:89:ae:11:ba:28:69:7f:
34:c8:f6:c0:60:62:dc:98:89:a5:b7:7d:10:de:26:5a:df:e8:
33:0f:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:30 2024 by rpki-client on console-fra.rpki-client.org