Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_ZctkBpKHRXKYDpyh9wenJWbLz0.roa
File: _ZctkBpKHRXKYDpyh9wenJWbLz0.roa (raw, json)
Hash identifier: ZcSfGPa0iu1qlD+bd/CIUTbwNlPnPV1H3OS+XvWpRkw=
Subject key identifier: FD:97:2D:90:1A:4A:1D:15:CA:60:3A:72:87:DC:1E:9C:95:9B:2F:3D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5647
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_ZctkBpKHRXKYDpyh9wenJWbLz0.roa
Signing time: Mon 13 May 2024 14:54:07 +0000
ROA not before: Mon 13 May 2024 14:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22087 (0x5647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 14:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD972D901A4A1D15CA603A7287DC1E9C959B2F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:d6:b7:9a:a7:ee:b0:04:29:2d:0c:48:38:
5e:25:f8:28:1d:84:57:ad:cd:24:94:0e:38:0d:c3:
2f:89:3f:e4:87:b9:4c:81:0d:fc:a7:18:f5:86:88:
c5:3a:71:0d:a6:c1:1c:93:05:f7:db:c7:32:c7:92:
eb:05:40:c4:6b:5b:63:41:01:1d:48:f2:9f:b7:6c:
2c:17:f9:ec:4e:2d:c3:ae:d6:af:83:aa:14:77:3a:
db:15:16:7a:c2:d1:d4:3c:e9:26:bc:c3:d6:b2:0c:
1d:c7:c7:c0:63:75:db:9a:48:a6:a4:52:a2:5f:35:
c6:26:0a:78:c3:3c:3a:d8:7a:01:cd:29:ea:93:ec:
94:d5:45:58:c3:f8:75:c2:0e:6b:4d:cd:12:04:da:
79:55:f5:41:0d:21:91:3c:d2:67:64:10:7b:54:35:
5b:1e:7a:e2:f0:0a:88:58:eb:c4:29:d9:5e:24:8b:
31:d5:93:0d:93:59:cb:15:ea:18:0d:89:17:4c:3c:
61:00:a1:c4:a6:5f:df:62:cb:1a:38:3a:15:2b:f5:
99:09:31:c8:eb:2f:f3:86:75:b9:9b:22:32:7c:9a:
f8:ec:aa:7d:c3:d7:9e:5f:33:b5:96:1b:d7:4f:4a:
81:34:12:4d:39:94:88:b9:ef:81:b5:d5:3c:52:e7:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:2D:90:1A:4A:1D:15:CA:60:3A:72:87:DC:1E:9C:95:9B:2F:3D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_ZctkBpKHRXKYDpyh9wenJWbLz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:db:62:2d:43:06:6e:ea:9e:d7:3f:ab:9d:30:33:46:fc:39:
f5:ce:2a:89:88:cb:05:b9:e2:69:c5:21:3d:bd:c7:e5:cc:87:
93:49:0d:d5:f5:34:ea:f5:15:2a:ca:89:cb:9f:e8:98:40:0c:
89:9d:3f:9a:60:58:73:6f:86:57:41:2b:62:e1:d4:84:21:88:
ec:ca:f2:3c:8b:45:28:71:88:61:40:32:3b:47:53:36:29:21:
4e:41:ea:30:d4:6b:66:5b:81:71:ff:1f:35:fb:91:c4:a1:88:
05:b6:9b:93:73:6b:aa:b7:46:d4:ed:4c:8d:cb:e8:b4:77:8a:
11:7d:9e:76:e2:5d:1d:dc:2b:df:b2:df:63:e2:a3:d3:87:0c:
2d:e8:d9:af:91:c7:14:26:b2:f6:f2:a3:72:fa:13:9f:bd:a0:
64:1d:60:06:ea:69:4b:e7:a4:83:4f:bf:9c:fe:5b:00:ea:24:
d0:7d:67:6b:cc:e4:0c:7a:68:21:df:ca:6c:b7:dd:81:c5:f1:
ed:52:5c:8d:86:1a:da:59:5b:5a:ef:00:db:b7:11:83:54:96:
2f:18:1a:0b:e0:6b:3d:11:b9:cc:d5:ff:2e:94:87:40:e0:d8:
e3:6b:27:36:7e:4a:fd:01:74:64:1f:84:36:24:4a:76:ef:c0:
43:32:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org