Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w52oEykz5Zoek0JioCRYyMuR3rM.roa
File: w52oEykz5Zoek0JioCRYyMuR3rM.roa (raw, json)
Hash identifier: gvz/mZ5wWTQOpLxvwCdkXxeIR3bqTVR7TG+qLdPCpOo=
Subject key identifier: C3:9D:A8:13:29:33:E5:9A:1E:93:42:62:A0:24:58:C8:CB:91:DE:B3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w52oEykz5Zoek0JioCRYyMuR3rM.roa
Signing time: Wed 03 Apr 2024 05:52:19 +0000
ROA not before: Wed 03 Apr 2024 05:52:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14335 (0x37ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 05:52:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C39DA8132933E59A1E934262A02458C8CB91DEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:11:6e:5e:bd:4c:e3:35:1f:6d:fd:a0:93:
31:5a:09:8d:2c:a6:e1:da:0f:46:80:d1:42:71:f1:
cc:b0:3f:79:4b:d5:11:67:7d:bf:f0:1c:64:bf:1d:
5f:50:46:c1:f1:19:39:4a:22:ff:80:b5:9a:c4:3c:
88:1c:a7:c1:6c:d7:7d:1d:bc:a9:04:b1:35:bb:0d:
05:85:e0:c6:f0:8f:02:3e:04:0b:b0:50:7c:31:69:
32:a0:e9:b5:f7:0b:b1:ba:ba:ef:8f:dc:b7:9d:75:
60:71:70:05:0f:30:66:5e:0f:5b:47:81:71:07:0a:
be:59:da:6f:7b:23:39:b6:a8:f2:2a:ef:53:ac:ae:
ec:24:7f:be:f4:01:37:ab:89:ca:16:82:cc:a6:99:
51:46:74:45:54:8c:74:9c:d6:e5:7a:f0:9c:01:01:
f1:d3:90:e7:8a:00:40:4f:45:ca:6f:4d:4b:19:7a:
db:00:fd:ba:3e:74:43:e3:f9:ed:8d:62:41:43:02:
07:68:04:ae:97:dd:a5:90:65:de:3a:66:84:a7:d5:
32:2a:e8:90:bc:0f:9e:d2:af:ea:8b:b1:b6:95:c7:
ec:2f:97:93:0a:9c:e7:c1:67:a1:54:92:93:4c:1a:
be:39:a2:ab:1a:80:06:3a:69:86:2a:19:c6:4d:06:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:A8:13:29:33:E5:9A:1E:93:42:62:A0:24:58:C8:CB:91:DE:B3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w52oEykz5Zoek0JioCRYyMuR3rM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:29:b3:ac:b5:81:0c:0f:ff:26:1f:99:c2:85:8a:be:fc:5b:
5a:f0:ee:20:bc:c6:d5:ab:ba:01:f8:e9:ad:94:f7:20:01:e7:
24:8e:ad:8d:05:ac:af:de:7d:c4:9d:98:99:aa:e0:df:21:0d:
54:c6:fd:f8:2c:a2:72:4b:41:8f:1f:03:5f:83:ae:44:2b:fd:
75:1c:34:70:c3:52:c6:76:7c:21:96:5f:a6:4f:8f:31:6b:dd:
07:c7:9d:b1:bd:a6:51:26:58:85:00:d0:a6:8d:d1:a4:4d:1d:
dd:a9:b5:e6:f6:04:16:eb:79:6e:58:7a:a0:7e:83:12:0a:a6:
09:fd:bf:be:d4:49:46:9b:1e:71:d0:4d:6a:51:34:f5:85:f6:
ae:43:61:a0:39:1a:a7:38:51:9c:66:ea:bf:79:2b:54:e3:11:
89:f4:e4:a5:1e:ab:ea:6d:d9:08:d3:b4:ad:f3:0b:49:b6:4b:
49:09:4a:99:6f:36:b0:60:ce:17:1d:12:5e:25:7b:18:1f:2f:
8c:fc:46:cc:b2:ae:04:28:99:96:e9:73:4d:54:d8:68:38:3c:
89:9d:40:90:f5:02:21:3e:e8:fd:2a:21:8b:b2:d0:9c:df:e7:
ca:a0:ed:fc:f1:d1:24:77:d9:dd:c4:09:06:d0:47:74:42:90:
28:45:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org