Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wSVRONSsEQvUGZho1hVI9VI3-Qs.roa
File: wSVRONSsEQvUGZho1hVI9VI3-Qs.roa (raw, json)
Hash identifier: SnCdotbw2fQFWazXXrjeUXF9AQ5/j/5s3Rw7QsQ11QY=
Subject key identifier: C1:25:51:38:D4:AC:11:0B:D4:19:98:68:D6:15:48:F5:52:37:F9:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wSVRONSsEQvUGZho1hVI9VI3-Qs.roa
Signing time: Fri 10 May 2024 13:54:02 +0000
ROA not before: Fri 10 May 2024 13:54:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21503 (0x53ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 13:54:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1255138D4AC110BD4199868D61548F55237F90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:db:14:44:22:8b:5b:86:15:13:45:41:35:
62:09:12:1b:9a:ae:1f:e5:61:f1:74:19:dd:43:f9:
02:06:b6:36:ab:84:f8:55:75:b6:a1:d1:68:87:be:
e7:42:29:f6:ee:55:15:5e:8f:16:26:99:05:b7:12:
6a:9a:96:44:b6:34:bc:ad:24:da:08:f7:43:a6:af:
6e:7e:ee:08:99:c9:6c:a4:90:4b:a2:f3:1b:94:7e:
7e:14:78:6e:9b:17:21:2d:22:d4:81:0a:f0:71:2c:
ff:8c:22:39:2c:ee:69:f2:b5:a6:74:be:7e:89:11:
79:03:c6:02:5d:bb:dd:c3:c8:98:b8:6d:cd:69:0c:
56:ac:02:93:57:17:64:46:c1:29:aa:86:bf:6c:35:
64:05:27:1e:0c:b7:f0:e1:8e:b9:5c:3f:56:31:37:
8a:88:78:89:f1:6e:12:60:24:d4:99:ca:86:ae:b7:
a4:6c:a1:f8:03:df:18:d2:b7:42:b8:88:ab:e2:7b:
8e:85:35:6c:07:bd:8d:88:95:39:0f:b0:65:b4:49:
e9:b9:01:be:5f:95:20:de:45:60:fe:95:a2:eb:ca:
eb:ec:b3:1a:be:63:4e:55:e5:44:8b:fa:ba:d3:01:
28:b7:de:06:88:cc:2d:27:ce:c3:2a:d2:54:d6:a8:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:51:38:D4:AC:11:0B:D4:19:98:68:D6:15:48:F5:52:37:F9:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wSVRONSsEQvUGZho1hVI9VI3-Qs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:20:f3:4a:3a:9a:e8:e3:23:ed:47:27:fd:f1:b5:7e:53:05:
dc:94:73:66:53:9b:41:1b:d3:3c:28:1f:14:c6:42:4f:b5:86:
78:d4:7f:7d:db:9c:16:71:e6:49:86:5e:c7:28:b8:b2:cd:71:
b5:50:32:ba:ae:4d:28:33:4d:f6:80:cc:e0:f1:35:7c:e2:4c:
58:0a:5d:42:22:fe:d7:d8:75:a3:ea:a1:15:f5:d9:11:77:62:
24:ee:32:97:c3:47:71:0f:e8:aa:51:ab:e4:08:5d:a1:ff:d7:
02:ef:38:50:d4:fa:9c:1c:ed:e2:1d:c1:b7:6d:7e:86:a3:4d:
d9:dd:a9:74:5f:5a:72:d5:f4:57:d6:fa:01:85:4c:7a:27:c0:
a8:c6:dd:9a:7d:ff:64:1d:6f:44:53:c7:1e:db:0f:cb:03:17:
71:d3:e7:e4:68:01:24:dd:b7:b0:de:b0:11:d7:4e:e4:8f:e1:
32:fe:b9:4b:ef:c4:ea:37:af:42:72:ba:c1:64:e5:dc:83:99:
93:12:0e:be:5f:23:e2:d9:99:74:64:76:89:3b:3d:db:8b:f8:
3a:1e:12:3a:d4:46:50:82:12:37:5b:4d:d8:d6:18:30:a3:0a:
36:d8:7d:91:13:f4:98:dd:0c:54:ca:af:45:88:7c:b0:1e:da:
80:de:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org