Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lwCXKKz0dGTrgTjQFWcmCk7Ud1E.roa
File: lwCXKKz0dGTrgTjQFWcmCk7Ud1E.roa (raw, json)
Hash identifier: 5349m9ZVM//PVMJRUYykQTNF2DJQonHqHIcN14Hk/Xg=
Subject key identifier: 97:00:97:28:AC:F4:74:64:EB:81:38:D0:15:67:26:0A:4E:D4:77:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lwCXKKz0dGTrgTjQFWcmCk7Ud1E.roa
Signing time: Tue 14 May 2024 03:24:28 +0000
ROA not before: Tue 14 May 2024 03:24:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22187 (0x56ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 03:24:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97009728ACF47464EB8138D01567260A4ED47751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:98:70:ab:7d:02:b2:44:db:5e:71:46:c3:
30:e7:75:52:b2:50:79:6c:d9:b3:7d:26:30:8c:a7:
d8:28:95:00:f1:39:37:ac:c7:b4:a8:e6:10:37:0a:
e5:ed:b8:3f:7c:06:69:a3:b4:71:45:99:15:26:5c:
93:7d:bd:65:5b:74:dd:fd:64:92:b0:23:54:d7:44:
6c:92:02:65:24:4b:1d:c2:28:8e:f3:d7:82:4b:54:
d6:72:dc:ec:55:76:9c:92:5c:e3:de:b2:f1:2e:a0:
b8:ae:bd:3c:c1:c3:d7:cd:1d:3a:4e:55:45:d4:c9:
2e:d0:38:53:81:fe:25:99:f9:11:12:ce:e6:62:82:
83:d7:3e:65:e3:c3:e2:f0:b8:90:18:3f:1b:3f:c7:
85:8a:d3:46:37:ce:bc:92:57:ba:1c:56:c0:52:e0:
65:e4:26:ee:74:9d:9e:dd:be:71:dc:85:85:c9:54:
9c:21:3f:af:63:54:6f:bc:ce:dd:8a:a8:62:4e:42:
4c:f9:6d:2f:a1:67:35:56:f7:5a:26:06:42:1d:57:
94:ad:e7:23:cc:a6:b7:b5:74:79:75:ed:f2:35:68:
9d:5e:38:67:d4:1e:ec:87:70:3a:f6:49:23:00:dc:
93:9b:ed:7a:d8:00:2b:8c:11:1d:bd:c9:53:bf:88:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:97:28:AC:F4:74:64:EB:81:38:D0:15:67:26:0A:4E:D4:77:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lwCXKKz0dGTrgTjQFWcmCk7Ud1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:92:fd:77:1c:5f:af:10:84:e2:71:19:e7:fe:4b:23:8a:d1:
b1:2b:5a:7d:7b:41:bc:0c:d7:a1:5a:c0:4f:06:d3:a4:38:47:
d3:3a:c6:9b:63:e9:0a:17:41:5e:3f:5e:07:5f:33:67:9a:9c:
26:57:c1:59:5c:93:16:7b:dc:f9:70:26:5f:35:62:3a:d7:9b:
4e:d1:af:42:a6:04:f7:ac:4b:77:ed:64:4f:9e:0a:19:67:c4:
ca:74:2a:db:41:42:14:3f:53:e0:50:94:4d:b7:0b:bc:6e:7f:
a1:71:97:65:42:3c:8c:1a:d2:a5:d7:ad:68:e4:5c:e7:3c:b5:
4d:44:96:88:1a:18:f5:a4:01:59:6a:f0:9d:d4:f5:54:0f:30:
48:72:12:10:33:fb:b8:52:fc:be:f3:b3:a9:ee:1d:f2:fa:14:
2e:54:90:ab:9d:2f:8d:7f:dc:a2:59:6c:0a:e8:e4:9e:94:d4:
8f:32:99:78:68:0d:26:08:57:55:65:4f:77:af:60:4d:e6:eb:
50:e8:80:ad:d3:ec:b1:37:93:20:3c:32:82:5b:5e:8e:31:d2:
fb:cf:c5:12:b3:74:c1:49:40:0f:db:0f:f5:c3:43:5f:db:57:
c6:10:e6:c8:1c:11:ba:0b:e6:c8:da:21:b1:e5:e6:ac:e2:c9:
af:a7:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org