Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZkYi0RpP4f_m9rxvJbf2-tFCJRA.roa
File: ZkYi0RpP4f_m9rxvJbf2-tFCJRA.roa (raw, json)
Hash identifier: 5ahWAHUGe02xHP2+X8cA5Usi3dhibM1QH9PXzDCcNeA=
Subject key identifier: 66:46:22:D1:1A:4F:E1:FF:E6:F6:BC:6F:25:B7:F6:FA:D1:42:25:10
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 337B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZkYi0RpP4f_m9rxvJbf2-tFCJRA.roa
Signing time: Thu 28 Mar 2024 05:22:02 +0000
ROA not before: Thu 28 Mar 2024 05:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13179 (0x337b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 05:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=664622D11A4FE1FFE6F6BC6F25B7F6FAD1422510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:a8:c3:9c:91:b1:73:47:30:ee:42:f0:50:
3a:7a:7c:cf:04:77:01:c8:2c:64:5f:10:c6:c6:fc:
ea:ec:ed:4a:eb:83:4c:4a:3d:d9:bb:02:9d:d3:1e:
1c:f9:b0:f4:db:5b:ba:95:d3:4c:f7:76:7a:5a:a1:
40:bd:c0:2f:78:ad:90:85:af:f6:a9:db:ce:77:99:
f3:39:92:b7:19:58:ac:09:bb:8c:12:d4:2b:99:7d:
08:51:3d:d8:0b:fc:33:bf:b2:55:3e:d2:f4:bf:c4:
fa:c1:44:fa:97:fa:64:7d:75:f0:b1:a9:27:a2:be:
b1:15:2e:c6:8f:e2:0a:f6:2e:e4:cf:e3:aa:bb:ad:
a5:73:50:0e:62:6b:cc:ba:4f:5e:0d:95:8c:5d:f2:
ba:f4:be:9c:5e:54:b0:84:2b:35:ed:10:65:24:73:
08:0d:39:c7:19:a9:92:00:f9:8e:f4:2b:56:05:34:
35:44:7a:d1:80:31:7b:9f:4e:b9:fa:43:1c:b4:5c:
50:3a:c9:05:c5:57:67:b2:74:0f:ce:cb:4d:0a:ee:
1c:4a:58:ed:93:ce:40:5d:1f:50:dc:7e:33:cb:80:
fd:08:71:d6:dd:1c:9e:de:24:7a:f6:62:88:e9:b4:
4d:ff:5e:fd:1b:d7:f7:ff:be:70:5e:fc:96:83:94:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:22:D1:1A:4F:E1:FF:E6:F6:BC:6F:25:B7:F6:FA:D1:42:25:10
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZkYi0RpP4f_m9rxvJbf2-tFCJRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:98:d3:25:93:3f:6e:18:2c:9c:1d:25:84:00:22:2e:f6:16:
a5:4d:1d:03:27:8b:53:2a:71:69:32:88:97:d5:df:2a:cb:8b:
25:1f:cf:f4:b5:28:75:79:5c:12:35:bb:7e:3f:9d:c4:5d:8a:
78:90:b4:6c:c6:56:70:f3:90:17:69:22:28:6d:74:d2:93:34:
c2:00:2b:6b:84:c2:f6:27:2e:0d:23:bc:2d:61:6c:2d:9e:f1:
dc:cb:ff:74:4d:01:ea:e6:7c:81:99:16:64:fe:90:51:ae:0e:
19:e9:d0:b1:5b:91:8e:b8:f3:8f:4c:14:72:a1:f6:b3:74:6c:
27:ba:7a:35:55:de:d3:c4:92:74:52:af:56:b2:50:d1:99:c3:
9e:c8:0a:16:22:5a:3b:a4:c9:96:08:b3:3d:e3:d9:a3:ea:7f:
dd:0e:86:a9:d2:28:e3:90:2e:c1:18:02:a1:2f:e2:5e:6a:77:
97:f1:57:ab:88:3a:f7:f9:06:67:42:1e:5f:8e:ea:dd:8b:1e:
14:3e:08:53:7b:9d:ce:c7:e2:11:87:8b:ea:2e:a3:6b:cd:a5:
e5:c3:d1:24:59:85:1d:91:9b:c1:29:89:67:73:9b:56:26:9a:
8f:03:e9:40:53:17:7a:55:29:76:02:ef:0b:e5:eb:48:c5:4b:
ae:20:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org