Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cnIvTJwtJk7mDtJxvi99BRwiBfU.roa
File: cnIvTJwtJk7mDtJxvi99BRwiBfU.roa (raw, json)
Hash identifier: jqhjKBglh1Nil4vZamng2qaeyzPFwxMKJEsSBCi1cCc=
Subject key identifier: 72:72:2F:4C:9C:2D:26:4E:E6:0E:D2:71:BE:2F:7D:05:1C:22:05:F5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5783
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cnIvTJwtJk7mDtJxvi99BRwiBfU.roa
Signing time: Wed 15 May 2024 06:24:17 +0000
ROA not before: Wed 15 May 2024 06:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22403 (0x5783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 06:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=72722F4C9C2D264EE60ED271BE2F7D051C2205F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:22:d3:ce:66:ca:19:1b:9f:2d:74:23:03:
6f:92:e2:85:c9:8f:b5:91:bd:c0:17:c2:a6:4f:fc:
9f:37:70:2b:ad:39:76:2b:8c:e8:7c:53:9e:11:f6:
8c:e7:5f:9a:5e:9c:11:c0:75:62:76:0b:54:b6:42:
4b:50:61:62:53:0c:3f:b4:f8:58:e8:cc:91:ef:d4:
ce:f0:67:5f:ab:ce:de:4a:b9:e9:1d:1e:ba:4b:8c:
c6:89:58:56:1c:61:8b:d6:bc:80:18:75:1a:98:78:
59:fb:43:48:e0:79:a3:15:6f:1d:50:29:cd:85:f5:
63:0b:90:d3:be:75:3c:da:f3:5c:54:1b:96:08:4d:
0e:9e:e2:b3:47:68:97:b8:ce:20:ad:e8:13:0a:2b:
c7:b4:a6:11:a4:91:67:41:5e:5b:01:1b:e7:29:ea:
f7:40:a3:37:6c:e5:0c:72:b6:97:3c:8f:b6:cc:50:
08:c1:f1:d3:7f:ae:8c:ae:fc:5b:4d:46:03:77:ad:
44:e9:ce:43:c4:d5:b6:72:7f:f4:62:76:77:85:31:
76:b6:db:72:33:42:38:aa:e1:6c:ca:45:fe:85:e6:
00:1a:ef:89:1f:8d:c8:34:1e:b0:db:0a:ef:6f:f2:
a8:b3:b8:d5:ab:9b:df:49:59:08:6b:0f:18:7a:a9:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:2F:4C:9C:2D:26:4E:E6:0E:D2:71:BE:2F:7D:05:1C:22:05:F5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cnIvTJwtJk7mDtJxvi99BRwiBfU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:31:a5:4e:0d:1a:87:d7:29:56:35:85:5b:7a:fc:47:e0:7e:
43:98:7e:c0:c2:c7:15:80:96:5c:81:04:26:97:05:e1:ff:17:
70:f4:9a:58:41:b2:a2:ee:2b:37:68:5d:cc:c3:04:ed:cb:06:
86:3a:1a:ca:4f:0b:ba:51:ad:e1:be:7c:ba:7d:d2:80:7f:be:
e4:26:6b:7f:8d:9d:a2:de:9e:b2:1b:18:e5:90:38:a8:26:e6:
0e:23:76:d0:b8:c2:50:66:c6:f0:07:1f:cf:a8:49:c0:33:34:
04:54:2b:f8:a2:2e:27:b9:f3:9c:a2:7e:28:af:ef:df:91:89:
b3:95:b0:34:be:68:34:12:fe:14:d6:30:7f:1d:73:fe:10:da:
88:d4:5e:b8:45:76:40:b0:1f:71:f0:fd:76:eb:0a:c6:ac:cf:
03:39:6e:0a:fd:ed:18:fb:75:c3:73:60:ea:69:f8:83:56:ae:
4c:b8:3d:7b:ed:43:51:4d:21:af:55:0f:a6:40:e0:b9:b6:11:
44:8a:8e:be:7a:48:68:7b:3f:16:69:c9:6f:66:07:35:f1:36:
fd:a1:d9:da:87:a7:7c:b1:97:bc:36:92:dc:72:72:2b:7c:89:
33:a9:33:18:b4:d8:ed:4b:dd:ad:10:4a:95:bc:3c:28:e8:d0:
39:a8:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:36 2024 by rpki-client on console-fra.rpki-client.org