Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w8ViY1gzfopNfzjQq-WNLFroFmA.roa
File: w8ViY1gzfopNfzjQq-WNLFroFmA.roa (raw, json)
Hash identifier: 3r01xo+G7EV0GSqEylC21uSAXwUjqaEHDnsGFRjveeM=
Subject key identifier: C3:C5:62:63:58:33:7E:8A:4D:7F:38:D0:AB:E5:8D:2C:5A:E8:16:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33E7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w8ViY1gzfopNfzjQq-WNLFroFmA.roa
Signing time: Thu 28 Mar 2024 18:52:03 +0000
ROA not before: Thu 28 Mar 2024 18:52:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13287 (0x33e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 18:52:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C3C5626358337E8A4D7F38D0ABE58D2C5AE81660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:d9:2d:59:19:ef:21:ab:56:d4:d7:d8:42:
57:e7:ad:32:81:63:fb:1b:75:a4:66:73:4d:cb:0b:
0c:d7:2e:b1:b9:61:da:1a:50:aa:8b:0d:eb:0b:eb:
78:22:f2:39:4d:9e:9e:71:51:e2:7d:a4:59:70:c5:
b5:33:54:aa:dd:37:1f:54:6e:c6:93:2c:d5:0b:0d:
59:87:f4:0b:b6:83:b3:d1:d1:e4:6e:6d:32:c5:45:
32:d2:ef:b8:5b:28:fb:96:47:15:f6:a4:6d:a5:78:
12:5a:7b:f7:fd:a8:fb:2e:7d:ee:9f:57:e5:a4:e9:
8d:f2:a9:93:ab:f4:a5:ff:f1:17:44:bc:c6:76:6e:
78:d4:ca:e7:0d:cd:aa:45:86:58:fa:54:15:de:36:
c8:57:04:b5:b7:59:77:79:00:7f:34:0c:39:4f:c6:
ce:d5:46:25:2e:24:7a:ea:63:0a:4d:06:07:7e:97:
b4:8a:bd:08:42:78:e1:70:5d:41:40:71:08:45:b7:
94:f9:d9:9c:40:59:80:30:31:af:e8:2c:a1:76:c1:
dc:30:d3:81:6f:f3:9a:20:3f:aa:6c:14:f3:9a:80:
19:6b:07:a0:9b:36:a5:df:de:ee:37:cb:25:fd:34:
2f:66:1b:fd:14:82:2e:c9:ae:3c:72:29:9e:65:41:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:62:63:58:33:7E:8A:4D:7F:38:D0:AB:E5:8D:2C:5A:E8:16:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w8ViY1gzfopNfzjQq-WNLFroFmA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:c3:28:e9:08:0e:ad:b3:42:ae:b0:63:f8:ff:e3:d0:01:4e:
16:ec:18:25:ed:20:94:14:62:90:b9:59:1e:f4:76:ee:50:4c:
6c:a8:67:8c:47:b3:f0:c8:43:16:6e:26:6f:c1:65:4a:07:0b:
64:e3:fe:37:a2:a3:68:6d:c9:b7:27:86:3c:02:e8:e8:9a:9f:
1d:a4:7e:c6:34:ca:f5:e9:4d:45:34:86:ec:da:ba:3b:c2:6e:
53:bd:18:88:4d:5e:00:8e:71:f6:7a:f5:75:d4:13:eb:bf:6b:
df:d3:94:6b:11:ff:7d:24:48:a5:0b:fc:63:90:ca:13:de:86:
f5:a4:02:18:e0:12:33:74:a9:e2:72:43:3d:95:b5:a2:33:08:
42:47:39:8a:86:62:c3:5e:1f:34:f6:36:5c:3a:81:ad:58:66:
62:9d:ed:b2:f0:0d:7d:09:f4:e4:6a:a8:19:21:92:97:d7:6c:
7c:67:e6:fb:f2:44:a3:30:4b:b3:f6:94:e2:b1:a4:6c:1e:ea:
9e:50:6e:bb:80:76:b6:86:54:47:b2:0d:65:a4:39:06:41:4d:
c7:a8:83:4e:3c:63:21:77:06:06:e7:1d:ab:d4:88:e5:fc:06:
45:13:3a:0c:b7:8b:75:8d:ec:d7:ea:d6:fd:f4:87:c3:3f:f1:
03:ac:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org