Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/cTwWlPd7Q1zU4mHyiC1esmXCt74.roa
File: cTwWlPd7Q1zU4mHyiC1esmXCt74.roa (raw, json)
Hash identifier: Kz37mvAw0hd7FivtbFgbYVyIbHGy5VkN0gRRgdZ6CBc=
Subject key identifier: 71:3C:16:94:F7:7B:43:5C:D4:E2:61:F2:88:2D:5E:B2:65:C2:B7:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 462B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cTwWlPd7Q1zU4mHyiC1esmXCt74.roa
Signing time: Mon 22 Apr 2024 03:23:08 +0000
ROA not before: Mon 22 Apr 2024 03:23:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17963 (0x462b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 22 03:23:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=713C1694F77B435CD4E261F2882D5EB265C2B7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:9a:13:27:d0:53:ad:39:f4:e0:36:38:10:
b9:e8:c5:03:5e:a3:1b:6e:f9:fd:3c:bf:33:72:c3:
77:9d:a2:f4:8b:bf:e2:74:f9:8c:c2:23:2e:ee:96:
83:af:76:7f:0a:cb:c1:e7:e9:59:48:bc:64:04:9a:
3e:65:9d:62:d9:40:66:d0:60:96:bd:c9:5b:22:7d:
f1:e1:79:14:3b:5d:5b:41:07:93:93:a1:10:9b:b7:
71:08:aa:52:86:4f:7a:d5:3b:bb:43:bb:ae:44:2a:
e3:b8:ed:26:82:fd:75:69:1c:8c:15:d0:1f:9f:3b:
eb:94:30:80:e0:73:34:c7:7c:e4:a0:0d:cd:0a:1f:
7f:95:34:d5:95:c5:86:05:f3:aa:16:f8:0f:b2:4d:
08:09:e4:d3:eb:19:05:b5:2e:a1:23:e6:ef:ff:f1:
51:00:00:15:c6:49:fe:6b:ca:ba:e3:f3:7f:6b:6c:
08:5d:a0:e8:3c:a3:47:e6:96:53:b8:39:58:bc:8d:
61:8d:55:d1:75:62:58:4d:18:6b:7e:14:1f:5e:96:
83:6d:25:fb:3d:f5:f5:0d:a6:db:db:15:20:76:3d:
f8:87:e6:f6:2e:75:d0:99:11:01:72:99:a0:e8:0b:
2c:d2:d7:6c:be:49:31:2e:3b:df:d7:2e:0f:ac:19:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:16:94:F7:7B:43:5C:D4:E2:61:F2:88:2D:5E:B2:65:C2:B7:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/cTwWlPd7Q1zU4mHyiC1esmXCt74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:1e:b8:3b:0f:52:b4:f1:30:0c:26:fc:e6:25:01:a2:42:ef:
0f:76:4d:d1:a5:31:24:95:08:ed:fc:b6:e5:60:52:f5:c2:59:
54:fd:b6:94:81:2b:36:39:a3:da:4b:b2:34:4f:97:99:74:00:
88:dc:78:98:5a:5a:15:c7:4e:13:93:2f:57:eb:a5:9d:73:3d:
70:9b:7e:e4:6b:10:b3:0d:ff:48:ab:c8:c2:bf:3f:9d:81:a5:
b9:a5:26:95:0d:30:e3:89:db:ff:55:c1:51:b0:12:a2:38:83:
69:b3:b2:56:13:5a:98:9d:91:65:00:58:e7:21:b9:ad:72:43:
bf:33:00:5b:6f:06:33:67:c8:a4:4c:57:ae:fa:a8:d4:07:4a:
99:32:0b:36:56:0a:64:02:5c:d6:90:ba:5c:2f:84:b1:cf:7f:
15:ed:af:31:5a:44:5e:da:e6:ac:56:28:18:f8:c2:d4:b9:7d:
b8:2e:24:21:e8:b7:65:8d:7a:8f:9b:61:e5:df:52:99:7d:ae:
c5:10:dc:99:c7:e8:bc:8d:e7:40:2a:31:15:af:a6:f9:c3:7a:
2b:6a:d3:86:59:36:4d:f1:0d:ee:ee:ee:a7:f2:2e:37:e4:cc:
41:b1:b0:09:af:c5:42:cf:61:34:3c:7a:b6:0c:1e:8c:b6:b8:
1d:71:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:15:13 2024 by rpki-client on console.sobornost.net