Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c5z_qS8AK6vHYjxCG0M8SSM04Tw.roa
File: c5z_qS8AK6vHYjxCG0M8SSM04Tw.roa (raw, json)
Hash identifier: XS3PV/FOfiWaoTADHTaMuIVtO2GVJICSw6W0H49pAsM=
Subject key identifier: 73:9C:FF:A9:2F:00:2B:AB:C7:62:3C:42:1B:43:3C:49:23:34:E1:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c5z_qS8AK6vHYjxCG0M8SSM04Tw.roa
Signing time: Sun 31 Mar 2024 12:52:11 +0000
ROA not before: Sun 31 Mar 2024 12:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13815 (0x35f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 12:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=739CFFA92F002BABC7623C421B433C492334E13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:f4:b0:62:ab:e1:79:f1:7b:e0:f3:6a:e1:
b8:66:a3:f9:4a:7f:e5:57:33:53:67:91:a7:e3:ba:
1d:b8:44:e6:27:37:91:ca:8b:15:db:df:eb:5e:9f:
c2:25:db:dc:95:90:12:09:28:be:73:46:ab:da:c9:
8b:d3:a4:5c:b4:9c:6a:20:80:a8:13:83:04:cf:ef:
ae:18:06:0f:28:30:54:10:1f:f1:d8:eb:46:dd:8f:
85:a9:63:63:78:6e:ae:35:20:83:65:a3:66:3b:52:
df:5b:5f:51:80:ac:95:f6:eb:1a:db:ea:89:b4:58:
af:36:cd:6d:16:95:5d:19:c0:b9:ed:bd:f4:af:20:
64:b5:30:5d:16:8c:f9:25:31:a3:6c:57:39:04:17:
28:ab:5f:5d:b6:d3:0e:bd:39:e5:74:e9:88:3c:16:
a4:db:00:56:52:34:c8:cc:07:c0:a0:32:bf:6d:31:
46:a0:74:fd:a7:34:bb:b9:ec:a5:34:6d:5e:f5:3c:
10:cb:51:43:de:e4:86:44:85:7a:1b:ca:68:82:50:
fc:c8:fe:78:2f:2f:ee:ca:66:86:4d:64:f6:8c:4b:
60:8a:99:1c:2f:34:a1:1c:e8:fe:2b:a8:d0:e8:31:
e2:88:a4:3b:9e:73:b4:7c:d0:62:76:21:ad:e7:b0:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9C:FF:A9:2F:00:2B:AB:C7:62:3C:42:1B:43:3C:49:23:34:E1:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c5z_qS8AK6vHYjxCG0M8SSM04Tw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:5c:cf:d9:1c:d0:1e:c2:f6:3a:de:d1:87:dd:24:0d:4a:d5:
ae:8a:6b:1f:cf:eb:6e:73:3b:28:61:17:a9:41:49:75:bc:32:
70:e5:8a:46:19:0a:0d:40:74:59:66:87:0e:51:ba:eb:f7:f8:
51:1b:97:ef:d2:39:5a:13:8c:f3:67:7b:4f:de:21:82:c8:a5:
8a:13:a2:67:3f:ec:12:8d:ae:f9:78:77:ff:ad:b4:e6:62:19:
cc:a4:34:5f:f9:8f:7f:b4:3c:51:df:e3:11:55:1d:16:f1:91:
26:83:2a:83:43:13:2b:31:42:ed:4c:c0:7a:6a:7b:5a:cd:5b:
1c:0d:6f:8a:7d:09:b7:da:24:1e:9d:7e:df:58:1b:e0:4d:fb:
99:40:53:e2:1d:a7:a6:e8:df:e7:08:a0:0d:4b:57:11:51:7d:
eb:43:71:9d:ae:31:85:69:d7:b7:e1:f7:f4:23:87:a4:82:64:
95:85:12:03:ca:50:9b:7a:81:b1:a1:e0:25:bd:2e:96:c4:46:
74:c7:a4:98:47:26:b7:5c:17:f3:d5:37:d7:c8:df:28:38:d0:
7e:79:ab:0d:f2:8d:af:ee:bb:18:16:76:7f:69:24:91:c7:c3:
26:9a:e9:84:05:f6:84:e0:7e:a8:fc:1a:73:2a:ba:73:33:3b:
5b:c6:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:55 2024 by rpki-client on console-ams.rpki-client.org