Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Zl_CiOT3SC2W9_57mKGczhKG3yA.roa
File: Zl_CiOT3SC2W9_57mKGczhKG3yA.roa (raw, json)
Hash identifier: P/Na7bB+lgYY5jpPwQdGe5pZINnhDFsHkDhLqJroVg4=
Subject key identifier: 66:5F:C2:88:E4:F7:48:2D:96:F7:FE:7B:98:A1:9C:CE:12:86:DF:20
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5333
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Zl_CiOT3SC2W9_57mKGczhKG3yA.roa
Signing time: Thu 09 May 2024 12:24:25 +0000
ROA not before: Thu 09 May 2024 12:24:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21299 (0x5333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 12:24:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=665FC288E4F7482D96F7FE7B98A19CCE1286DF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:47:ff:e8:34:f5:c6:a0:dd:6a:84:c7:99:
59:62:4d:c1:43:a5:5a:4c:fc:99:0a:7b:d9:5c:73:
d5:b3:f2:fe:3a:64:f0:7c:8d:39:ca:97:d3:97:91:
f8:54:14:35:8f:cc:65:fa:30:d8:67:19:ed:72:c9:
9a:07:60:b8:e1:32:a2:cc:b6:0f:5a:7e:2f:c1:70:
0e:65:ce:2a:82:28:eb:40:7d:cd:7d:c5:8a:69:8e:
bb:dd:2a:b1:fc:8d:c9:a9:b3:62:4d:f3:67:e3:b0:
7b:e2:58:bc:0c:ce:78:d0:e6:c7:a9:af:ca:cd:d0:
af:3c:3c:d5:92:ee:c2:ea:ee:9e:51:e3:45:8d:df:
de:3f:ec:2d:cb:ef:96:50:04:aa:d0:03:f3:99:43:
93:10:e6:f9:09:11:27:a1:09:69:8f:09:0d:dc:df:
72:32:51:df:53:4f:1e:61:ab:e6:11:68:58:15:19:
79:27:3a:2e:50:3b:e8:3c:05:c2:f7:ab:62:b5:6f:
22:70:e1:76:c4:b3:93:dd:63:2c:76:dd:8f:5a:4b:
88:59:eb:3e:4a:30:46:5c:b6:93:a3:83:e1:35:7f:
fa:29:cc:b6:94:18:53:cf:f1:43:29:61:49:b7:25:
4b:dc:7f:b6:43:15:67:bf:4e:cf:c9:5d:22:49:1b:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5F:C2:88:E4:F7:48:2D:96:F7:FE:7B:98:A1:9C:CE:12:86:DF:20
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Zl_CiOT3SC2W9_57mKGczhKG3yA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:f8:92:69:5f:aa:5a:d2:a0:86:e6:af:b6:44:63:2c:ae:f3:
a2:30:8e:4d:4a:9e:7a:db:cc:80:81:93:f3:1d:19:45:35:36:
3d:7c:60:c7:ad:3e:f1:dc:e2:cc:e4:a4:b9:b1:6a:7c:9e:46:
3c:eb:af:e0:85:c2:f4:cb:eb:a5:80:88:e9:b4:e1:5b:55:01:
4a:83:96:53:f8:db:17:82:d6:e5:89:92:d9:03:16:bb:48:f3:
aa:fb:02:59:dd:38:8e:53:c6:41:87:30:63:82:59:b6:16:9d:
94:c2:01:71:14:e7:2a:91:fc:fd:cd:f7:05:19:ba:59:f1:65:
ad:b5:15:33:36:f6:65:2b:af:a9:90:f0:b2:f2:4c:a1:32:44:
d4:76:6c:19:5b:1f:43:a3:76:19:1f:71:cb:37:01:f9:69:4b:
7b:1a:10:27:b1:d8:dc:f6:7e:6b:16:3b:39:92:d1:9e:63:e5:
43:15:f6:5a:33:5c:5e:f3:ec:0c:16:3d:97:41:69:c6:4a:67:
5d:5b:29:9a:c2:d8:ea:21:be:b3:12:1d:58:bb:bc:49:c4:ee:
da:52:09:52:50:d2:5e:66:52:1d:31:b9:2a:d4:ca:20:7d:31:
4e:6f:49:e8:22:42:85:3f:8d:64:28:88:2d:a5:40:dd:ba:1d:
fc:82:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:32 2024 by rpki-client on console-fra.rpki-client.org