Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wPvnpp_baVECA4zr57PfSFZwQ2s.roa
File: wPvnpp_baVECA4zr57PfSFZwQ2s.roa (raw, json)
Hash identifier: jFhouVMUHiTaNTK3EPQSnko0UIBaoVKyfoPKWaN0INg=
Subject key identifier: C0:FB:E7:A6:9F:DB:69:51:02:03:8C:EB:E7:B3:DF:48:56:70:43:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5667
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wPvnpp_baVECA4zr57PfSFZwQ2s.roa
Signing time: Mon 13 May 2024 18:54:20 +0000
ROA not before: Mon 13 May 2024 18:54:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22119 (0x5667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 18:54:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0FBE7A69FDB695102038CEBE7B3DF485670436B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:3b:dd:2a:5d:2e:5c:6a:70:c1:e0:88:49:
ba:19:e5:24:e7:b3:53:e8:e1:3a:65:aa:64:81:04:
58:49:9b:6b:cb:7c:a4:12:78:07:c5:91:48:93:5d:
9b:80:7e:14:49:88:c9:7f:f2:a1:b4:2b:4e:a7:5a:
f2:cd:1a:78:fa:cc:99:50:f3:67:2f:08:65:06:5d:
68:b4:63:22:fa:a9:e2:0f:80:e9:41:aa:a5:ca:66:
a0:e2:30:67:c5:60:cf:6e:08:98:8c:a2:31:3f:30:
25:39:dd:6d:9b:27:88:c7:40:04:bc:f4:c3:00:67:
00:70:03:32:30:47:10:fc:c9:0a:b9:b2:4a:89:80:
b1:ef:b1:4f:2f:d0:25:c6:02:f4:eb:9c:1b:49:2d:
9b:84:78:60:19:0f:8e:9a:4e:5b:2d:86:92:29:9e:
3c:13:04:e0:db:59:5a:4e:82:c2:16:87:d8:bd:e4:
b6:1d:79:e5:c5:98:c9:d6:0d:8f:a3:d5:24:d8:d0:
bb:4d:f3:43:fb:f8:bf:a4:8b:64:be:72:cf:ef:0c:
a8:f5:f4:80:81:06:ff:fc:1c:2a:c4:07:3c:ea:24:
db:f6:c1:f7:62:98:7e:8e:39:e7:30:55:fd:26:c7:
3e:d6:c1:eb:6f:aa:93:97:b7:07:20:11:90:07:f3:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:E7:A6:9F:DB:69:51:02:03:8C:EB:E7:B3:DF:48:56:70:43:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wPvnpp_baVECA4zr57PfSFZwQ2s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:5e:c7:7d:eb:77:9b:49:fb:9d:e9:b0:65:46:8f:1c:be:4c:
e2:bc:13:d1:e5:7a:77:31:1d:3d:9a:a2:aa:82:d5:56:de:80:
c1:ff:e6:c7:b9:8d:00:49:d4:19:a9:04:c8:02:8b:9f:94:75:
03:50:4c:5c:6e:da:42:39:83:67:82:a4:2d:17:17:6d:71:cf:
c7:58:99:70:fa:e1:d8:8d:3d:53:38:df:70:cd:19:0a:83:99:
b4:67:44:16:f5:ff:04:da:0f:4e:76:b8:f0:af:6e:52:8e:25:
ea:7e:1e:b9:1b:07:94:e7:96:6a:84:6a:7e:9c:9f:cc:ca:f0:
03:82:48:f5:2a:7a:54:e4:b4:da:1b:4f:38:a2:b0:1d:a1:49:
61:cb:93:0f:98:7c:a5:60:34:30:6b:dd:9e:18:1e:d9:43:55:
eb:20:7a:ac:98:30:70:22:7f:ae:fd:22:fb:59:89:3b:06:0f:
f2:12:54:f4:e2:3a:74:36:2f:38:db:bc:f4:55:01:d5:13:49:
e1:9d:93:8b:de:ef:0c:30:e5:0d:0a:48:e8:25:c4:a5:01:ea:
7c:a4:5e:2d:67:8a:0d:c4:a3:2f:4d:e3:75:df:03:3c:87:35:
a2:b1:fe:6f:7f:11:b4:ca:a1:01:a2:12:79:b3:03:60:87:85:
96:9c:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:19 2024 by rpki-client on console-ams.rpki-client.org