Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/owzLF1ZQmSW0Ps8NyylxhZNQ5vM.roa
File: owzLF1ZQmSW0Ps8NyylxhZNQ5vM.roa (raw, json)
Hash identifier: leb+TsgHIxK/aiSA0dqSjMIBPgNfBIPs8h4W4GfgGZc=
Subject key identifier: A3:0C:CB:17:56:50:99:25:B4:3E:CF:0D:CB:29:71:85:93:50:E6:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F4F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/owzLF1ZQmSW0Ps8NyylxhZNQ5vM.roa
Signing time: Sat 04 May 2024 07:53:51 +0000
ROA not before: Sat 04 May 2024 07:53:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20303 (0x4f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 07:53:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A30CCB1756509925B43ECF0DCB2971859350E6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:e6:50:ef:9e:61:b6:fd:cd:29:0f:fe:70:
78:27:48:31:3d:86:c0:c5:09:3b:ad:db:5d:d1:0b:
c5:67:ae:44:ef:d1:f1:a7:45:da:f4:ce:f1:fd:a1:
88:5e:f1:c3:30:36:d8:cf:76:4a:2e:8a:95:3e:0a:
00:af:ff:05:c8:f2:62:99:5d:52:c9:bc:eb:d8:07:
58:27:f3:8f:7f:23:75:52:62:e7:19:63:80:f2:5c:
49:ef:81:6d:eb:2f:a9:b6:25:76:ca:df:af:2d:bb:
22:17:4e:6c:8e:e2:cb:fd:56:6b:ea:b3:62:09:c4:
b9:ec:11:c6:c4:9b:7d:9a:27:fc:64:92:3e:2a:a4:
7c:69:9e:f0:17:03:84:96:e0:15:0f:c1:d7:b1:7e:
c9:7a:5e:fb:60:69:5d:48:20:1c:c5:a6:65:8e:89:
2c:ca:ce:1b:b4:00:f0:d5:f6:27:86:9e:e0:1e:1b:
0f:9a:40:89:d9:20:07:d9:c4:f7:44:5c:43:60:62:
29:a7:3e:76:6c:9c:72:e7:78:b8:6e:6d:27:85:1d:
80:1f:48:2b:2f:4f:62:81:95:5f:19:ab:77:c2:d4:
90:41:37:d0:38:51:43:75:43:e5:49:ca:14:6a:ed:
93:85:ba:00:cd:8e:84:98:cc:56:4b:78:37:30:ed:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0C:CB:17:56:50:99:25:B4:3E:CF:0D:CB:29:71:85:93:50:E6:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/owzLF1ZQmSW0Ps8NyylxhZNQ5vM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:36:70:13:a9:a9:02:b7:f5:f4:d6:64:ee:a9:e5:85:2d:78:
a1:21:15:89:7d:4b:d9:f2:49:f5:17:de:df:df:f2:62:a6:9b:
51:d7:20:0f:11:71:ce:ee:05:35:29:c2:8a:31:c0:d4:7f:bd:
00:94:92:45:8c:22:a6:e5:b4:06:1b:54:79:88:83:6f:25:7d:
99:37:4a:1e:f9:1a:8f:1f:4f:56:a6:98:e3:39:17:81:6a:5c:
03:55:02:a9:4e:db:25:43:98:e6:61:b0:b9:f4:ac:0f:33:93:
03:d5:4d:a2:6a:6e:ba:48:fa:48:f8:30:e6:78:5b:41:bd:b2:
e9:0c:51:db:2c:f7:24:b6:ea:9a:77:bd:a0:79:6d:8d:d6:6e:
73:71:c0:35:b4:d2:01:21:c4:4e:a2:5e:15:2c:6b:03:5a:1d:
3c:08:04:75:a2:6c:5a:1d:da:93:5a:48:40:e6:ae:b3:91:ad:
45:64:d4:dc:ba:d4:bf:af:91:7d:bc:f0:b1:d6:76:af:e1:9a:
62:b4:63:77:d1:37:be:74:fd:80:64:bc:7a:b1:c2:ac:37:49:
29:a8:71:cf:a2:a9:d0:7f:71:18:fd:b7:1b:7a:5a:67:df:b1:
e8:35:d2:66:2a:ae:4e:9e:ec:f0:ab:91:be:b2:8c:f0:80:5b:
7c:d0:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org