Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zZg3lcRS1ku9ZFTlakFhtl_eJH4.roa
File: zZg3lcRS1ku9ZFTlakFhtl_eJH4.roa (raw, json)
Hash identifier: b5RZQryDQhKkzvPxX+pAQkOtAORvPcTT7Omi1elrzLI=
Subject key identifier: CD:98:37:95:C4:52:D6:4B:BD:64:54:E5:6A:41:61:B6:5F:DE:24:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 581B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zZg3lcRS1ku9ZFTlakFhtl_eJH4.roa
Signing time: Thu 16 May 2024 01:24:48 +0000
ROA not before: Thu 16 May 2024 01:24:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22555 (0x581b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 01:24:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD983795C452D64BBD6454E56A4161B65FDE247E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:30:c7:59:83:00:5e:27:57:9d:cf:e6:47:
a4:83:d8:78:06:05:30:00:74:cf:28:d5:e8:5a:b9:
95:a2:02:85:7f:d3:1e:5e:35:ce:30:9d:87:8d:81:
fe:45:1f:57:5b:2f:8e:46:2c:22:8d:d1:97:fe:28:
7c:bf:51:64:43:ca:28:87:5c:10:0c:20:a0:40:39:
c9:82:7c:0a:b4:e2:e3:3c:36:87:44:3d:e8:d6:38:
d9:97:6c:d8:a0:a9:43:50:21:b5:7d:43:f4:44:81:
00:04:10:6d:2f:77:43:ed:31:68:88:54:2c:c5:f3:
1a:1e:97:31:57:56:c0:f7:d2:8d:4a:15:c6:52:d4:
be:5a:32:d8:13:22:19:53:1d:e7:86:3f:dc:ca:0c:
ab:7a:66:ae:55:52:03:e0:14:56:9c:b2:89:90:01:
47:2d:fd:3a:5c:c2:ef:ef:af:f2:43:90:19:65:b3:
18:bd:0f:0b:73:3a:25:18:be:cc:69:5c:83:0f:e2:
b2:f8:e0:cd:f7:64:61:ce:fd:0c:11:6b:dd:a5:41:
af:67:95:b4:eb:ae:53:2e:f3:0b:ef:5f:8d:f6:03:
d5:6f:9f:e5:36:1c:20:f3:4c:80:e7:bb:47:cd:c9:
42:62:69:08:ba:26:63:1a:b4:cd:fd:27:3e:2b:ff:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:37:95:C4:52:D6:4B:BD:64:54:E5:6A:41:61:B6:5F:DE:24:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zZg3lcRS1ku9ZFTlakFhtl_eJH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:4b:83:75:46:22:82:8d:fe:ac:5f:01:84:9b:73:d6:1a:b6:
83:de:00:3a:67:74:8c:6d:65:d0:4b:23:8c:93:40:58:28:e7:
d0:58:29:b3:09:ba:3c:9b:5e:7a:34:26:81:c5:ef:71:71:5a:
02:c9:0f:93:28:fe:61:af:d4:6f:f2:0a:ac:b9:0b:71:9b:ce:
9a:f1:2a:94:cf:a9:bf:cf:db:6e:9e:a5:5a:eb:b6:ea:b4:80:
d2:3b:74:75:4d:6b:0d:58:9a:12:9c:f7:c4:d5:35:7e:c3:ce:
6f:06:ca:6a:20:de:df:bf:aa:70:08:2d:37:5b:a5:ed:63:8d:
d1:31:a4:e5:e5:47:bb:9b:6d:58:17:96:c7:3d:e1:62:46:aa:
e8:4d:fa:55:32:e2:47:70:57:1c:43:df:ce:99:69:72:c5:f2:
e1:97:5b:8e:33:71:05:41:7c:b2:08:9f:57:2c:cb:7d:6b:c0:
72:82:e0:6c:fb:21:6e:cf:6a:48:7f:55:00:ef:39:81:61:2a:
1c:80:f9:34:0f:e1:30:e1:70:0b:40:7c:89:ae:75:6f:b9:c1:
b2:55:67:44:bc:1f:c9:f7:51:14:30:90:03:16:b0:de:43:12:
f2:3d:ae:93:74:94:43:2e:10:07:c2:5b:04:c4:d4:99:77:b4:
c8:6f:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org