Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZwQ4HhaueO39_no-pA7wTGcLssQ.roa
File: ZwQ4HhaueO39_no-pA7wTGcLssQ.roa (raw, json)
Hash identifier: eJte99ss8Z9Kt6G3XrCDsT+2QXXRj3aGHf3thRttHyY=
Subject key identifier: 67:04:38:1E:16:AE:78:ED:FD:FE:7A:3E:A4:0E:F0:4C:67:0B:B2:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 570F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZwQ4HhaueO39_no-pA7wTGcLssQ.roa
Signing time: Tue 14 May 2024 15:54:11 +0000
ROA not before: Tue 14 May 2024 15:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22287 (0x570f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 15:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6704381E16AE78EDFDFE7A3EA40EF04C670BB2C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:c3:2e:b5:01:6f:45:25:9f:47:0b:d8:4d:
cf:02:19:57:af:ca:2b:e6:58:e3:74:5e:97:64:be:
04:31:66:7c:52:ad:cc:58:72:4d:a2:39:d6:b0:0a:
0f:dd:69:d4:56:2b:be:c3:56:59:07:0b:5a:f3:b5:
65:e2:dc:d2:71:3f:1a:bd:30:07:08:7a:fb:6a:02:
96:53:01:a5:6d:fc:8a:4b:9d:a2:09:6d:49:93:ac:
dc:f1:4c:ec:80:7b:b4:6e:84:45:46:db:cd:04:f4:
db:54:f4:01:27:d0:d3:f0:51:9d:91:de:0f:bf:08:
20:b9:73:e2:67:73:4a:e6:83:2a:1a:1f:e6:44:c5:
a2:17:80:0d:a1:4a:97:a7:9d:aa:61:9c:7e:b7:da:
9e:9e:5e:64:f2:5e:01:ec:65:58:d5:2d:4e:1c:8d:
c8:35:ad:d3:09:62:3c:9d:cf:44:7e:b3:8d:4a:bc:
ce:91:2b:74:44:8c:96:9c:76:8f:64:1a:bb:f1:c2:
61:1e:d0:96:20:ed:dc:1c:1a:a6:fa:d7:b7:8a:04:
79:22:57:c9:a1:1e:b4:f0:57:ac:93:db:f1:da:b5:
69:0c:92:8a:66:88:b6:4b:45:ed:69:0b:b4:95:95:
ab:ec:fd:9b:01:21:bf:87:a7:69:b7:96:34:19:aa:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:38:1E:16:AE:78:ED:FD:FE:7A:3E:A4:0E:F0:4C:67:0B:B2:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZwQ4HhaueO39_no-pA7wTGcLssQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
07:db:97:2c:b1:03:8c:b4:8b:3b:50:31:85:5b:38:d2:25:8b:
cc:60:d3:7c:e2:e0:59:c3:72:db:ad:44:a0:6f:1d:f5:d1:a5:
e0:77:a2:14:57:75:b0:a2:5e:61:0a:23:43:41:0d:ee:9c:7a:
5d:5c:0a:ea:cd:aa:2b:aa:e6:48:d9:c0:03:3f:9b:12:0e:4b:
d8:41:e0:0e:ba:04:3f:fa:95:61:57:59:cd:48:db:f4:b9:bc:
17:13:8b:19:8c:ae:3d:56:aa:3f:5e:c7:05:0a:c0:41:fd:95:
ca:53:f6:18:82:6d:b2:a5:8e:41:30:93:b4:b3:49:6b:c6:0c:
f1:fc:0e:44:80:78:8b:04:39:ee:82:2e:8f:df:90:c3:b9:0c:
47:67:89:75:98:b8:73:d6:bf:f7:a2:06:ab:7d:d9:8b:ad:65:
72:9a:85:71:a3:dc:6d:7a:be:1b:85:63:b3:a3:51:40:e7:56:
6a:aa:a8:8f:1e:b7:b0:6a:c5:9c:fb:f2:b1:01:88:c5:42:e1:
a6:1d:db:54:93:47:07:b5:1c:34:47:90:2d:12:85:c4:c9:10:
f7:d9:d8:00:d3:f9:20:74:06:48:5f:09:01:79:38:84:6f:10:
96:ff:a3:38:0e:45:d1:05:69:f5:fb:41:35:40:0b:ae:53:90:
f3:ce:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 10:51:34 2024 by rpki-client on console.sobornost.net