Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zW-CCW4bm1Yg4hAsgIxYa5D4C_g.roa
File: zW-CCW4bm1Yg4hAsgIxYa5D4C_g.roa (raw, json)
Hash identifier: nRoMPUZAANzPp/2muEf97VuEOChisTF2AxTNc7t+oyU=
Subject key identifier: CD:6F:82:09:6E:1B:9B:56:20:E2:10:2C:80:8C:58:6B:90:F8:0B:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 548B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zW-CCW4bm1Yg4hAsgIxYa5D4C_g.roa
Signing time: Sat 11 May 2024 07:24:06 +0000
ROA not before: Sat 11 May 2024 07:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21643 (0x548b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 07:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD6F82096E1B9B5620E2102C808C586B90F80BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:6c:18:a2:a7:5c:6e:ea:fb:e5:02:d0:3c:
29:90:b9:03:4e:b5:c7:23:59:2d:dd:4d:15:53:a6:
21:fb:12:cb:b1:01:fa:71:43:39:cc:fb:d8:d5:3e:
0d:71:e4:e3:78:59:f9:46:57:a3:03:8c:c1:03:ba:
f1:74:4f:89:fd:48:44:d1:e3:0a:8c:28:3a:6a:ec:
02:f0:89:d4:a9:7a:3e:8f:42:ce:98:13:7a:05:dd:
74:cb:bc:67:bd:c3:b6:16:f8:cb:16:05:56:f9:b5:
df:9a:c6:dd:1b:c0:e2:8a:e3:41:ea:36:3b:61:2f:
ea:3f:b3:d2:93:72:74:e7:05:09:32:c3:27:ca:e3:
a3:33:27:3f:60:8c:e8:90:b1:39:a4:26:14:4c:e1:
83:bb:54:f1:01:ce:7c:a6:47:f7:80:ea:e8:e0:7a:
0e:58:2d:e7:05:d8:77:e5:72:d6:f7:8e:0a:d3:d8:
c8:f3:0d:ef:fe:11:97:93:1d:c2:5b:f3:b9:6e:29:
c6:42:f8:77:bd:db:0f:2b:c6:0a:ef:83:d7:b9:10:
a3:b8:88:79:83:1b:02:76:62:c6:db:63:c0:0a:0d:
22:6e:cb:61:fb:0b:e8:bd:9b:40:e2:01:7f:8d:d1:
d0:91:78:af:ef:f5:37:70:8a:87:99:89:f8:6b:fa:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:82:09:6E:1B:9B:56:20:E2:10:2C:80:8C:58:6B:90:F8:0B:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zW-CCW4bm1Yg4hAsgIxYa5D4C_g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6c:a1:ee:1b:ab:63:1c:41:dd:04:47:3e:6d:e8:59:da:9f:1c:
38:e8:5f:68:11:f0:e2:60:e2:20:3a:2c:d8:a9:d3:a5:be:d6:
b5:8d:fc:7a:0e:d7:76:0f:4e:57:ee:66:fd:d9:d9:21:ad:6b:
fe:9c:4a:ef:ab:1f:01:45:ed:ae:5a:6c:be:c0:65:8b:4d:d7:
10:25:53:e1:40:8e:f1:91:81:b2:3b:38:43:01:17:b8:80:a8:
63:ed:e9:07:78:00:48:f4:a6:69:99:35:fe:6c:31:54:d1:ff:
60:66:3f:2b:0c:ea:19:f2:12:7e:0c:1d:d1:55:77:3d:8a:92:
53:24:22:e5:dd:5a:57:d3:73:d8:87:bf:f1:c5:9e:ee:59:8b:
fa:83:d1:1b:f4:53:a3:e8:a5:39:fc:eb:7b:11:50:3f:fc:d6:
55:bf:af:28:b1:2a:8c:73:9c:0f:ff:83:6e:aa:24:52:4f:34:
95:62:01:21:b8:35:70:6d:17:c3:e0:8c:ac:7e:9f:f3:3e:39:
f8:58:73:d0:51:87:5b:63:b5:7d:57:09:77:22:23:86:35:c8:
78:ea:b4:7e:7e:fc:71:b2:61:43:a5:86:e3:bc:3b:6b:d0:50:
50:30:50:b8:6c:d1:de:32:23:67:12:5a:f9:07:04:f4:39:90:
4c:0f:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org