Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ltTtilgVyXwAqSTuCNNF5XmlDNw.roa
File: ltTtilgVyXwAqSTuCNNF5XmlDNw.roa (raw, json)
Hash identifier: 0KobLHKTyvGPxnhvni79Z2wWxUBi0oybmWERF2rUKrA=
Subject key identifier: 96:D4:ED:8A:58:15:C9:7C:00:A9:24:EE:08:D3:45:E5:79:A5:0C:DC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52D7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ltTtilgVyXwAqSTuCNNF5XmlDNw.roa
Signing time: Thu 09 May 2024 00:54:08 +0000
ROA not before: Thu 09 May 2024 00:54:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21207 (0x52d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 00:54:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=96D4ED8A5815C97C00A924EE08D345E579A50CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:25:ce:44:8e:13:42:68:fc:e4:19:cd:be:
d4:7e:05:9b:18:ff:cc:ab:e3:4e:71:ab:cd:18:49:
5f:d4:7d:6c:59:7e:ad:41:46:25:24:e7:f4:7f:ef:
fb:8a:95:40:f6:1f:dd:e7:d6:e5:34:bc:a7:20:80:
70:bd:79:0b:7b:40:8a:7c:8b:a3:1f:10:ba:a9:1c:
d4:59:b4:be:27:09:9f:13:a2:1e:64:da:80:51:51:
bd:48:3e:ba:7f:0a:94:c9:b9:30:d1:e7:73:95:4b:
e8:98:a4:32:b5:96:68:bb:0f:a4:a2:bc:49:58:9d:
07:98:e8:06:c2:31:18:0d:01:bd:76:e2:2c:fd:60:
f4:fb:61:72:12:a7:3f:ef:d8:7a:61:d0:0e:58:ad:
ec:62:31:fc:2c:d5:b4:a2:32:19:c5:d4:15:26:65:
9e:d9:d5:45:a4:21:f8:6b:ce:e7:58:f4:24:a4:11:
37:4c:b0:24:ee:21:9b:1b:1d:e1:04:8e:9d:ed:28:
66:68:3f:77:1a:09:4b:6f:aa:d9:21:c3:83:3f:e8:
37:d4:31:6f:5c:b0:b2:67:be:42:dd:83:63:5b:8c:
4e:bd:bb:4b:20:14:30:d3:d3:8a:db:a8:69:04:50:
3d:49:dd:05:29:8e:fa:ab:cb:fe:80:75:42:b9:3a:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:ED:8A:58:15:C9:7C:00:A9:24:EE:08:D3:45:E5:79:A5:0C:DC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ltTtilgVyXwAqSTuCNNF5XmlDNw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6f:7b:62:95:31:15:22:3d:41:98:69:cb:bc:e2:d4:79:f5:07:
ec:02:f0:5c:27:39:36:36:5a:01:a2:ff:73:a6:62:7d:95:0d:
d7:3c:10:10:ad:bb:f8:b4:89:a6:a7:2c:3c:2c:8b:01:6b:72:
fe:f7:9c:21:02:48:d5:5d:32:11:fc:94:52:36:60:9f:a5:5f:
6c:09:28:ac:be:ad:6f:b1:ec:b3:a4:75:4d:42:78:99:1f:5c:
e3:3f:a9:9e:88:a3:bd:34:3c:ab:53:fd:cc:ee:44:0a:76:97:
e5:93:ab:25:24:08:25:ae:30:3f:ab:57:b2:92:a4:a2:0d:0f:
bd:36:60:75:a8:c7:1b:34:a7:20:a9:ba:b1:63:86:f9:c3:53:
c7:e7:37:11:43:1b:3c:98:ed:9a:9d:cb:4d:53:60:2f:62:99:
a4:e5:54:79:b8:fb:79:80:b9:12:4c:c7:c1:28:50:83:aa:31:
ac:de:3b:2c:8b:af:50:21:b1:d9:24:49:fa:92:d6:67:22:0d:
26:a1:78:0b:6a:62:cf:92:fd:63:34:dd:89:b8:3a:70:e4:b3:
22:30:1a:43:ca:f8:ff:5e:c0:c4:b6:3e:ce:92:27:1a:f2:11:
3b:c4:ab:92:a6:43:28:59:ae:7b:dd:98:49:c4:cd:6d:bf:f8:
8a:aa:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:44 2024 by rpki-client on console-fra.rpki-client.org