Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rRSkMCCl2ww4ePpgatNumgEFumY.roa
File: rRSkMCCl2ww4ePpgatNumgEFumY.roa (raw, json)
Hash identifier: ot7amgN71tR5B0kb9tme+G5q41s3psw9OvI6PoafPZI=
Subject key identifier: AD:14:A4:30:20:A5:DB:0C:38:78:FA:60:6A:D3:6E:9A:01:05:BA:66
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56BB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rRSkMCCl2ww4ePpgatNumgEFumY.roa
Signing time: Tue 14 May 2024 05:24:07 +0000
ROA not before: Tue 14 May 2024 05:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22203 (0x56bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 05:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AD14A43020A5DB0C3878FA606AD36E9A0105BA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:c9:df:72:08:8b:1d:ee:5c:c0:06:a9:1f:
8c:81:1c:25:1b:b3:65:2d:11:aa:c1:58:f1:0b:7a:
80:05:16:54:d9:33:30:f9:de:e5:03:f4:df:26:97:
a9:d7:69:1b:b9:a0:77:42:81:ea:02:eb:56:98:25:
59:3e:c6:cb:0f:3f:b4:c7:11:a1:22:3b:55:ee:aa:
ac:88:16:d2:10:af:5c:58:21:31:f7:37:8a:f5:c3:
16:64:1b:2a:cf:b7:2f:70:39:21:b2:a5:21:c2:c3:
d8:36:35:11:c6:6b:51:64:ed:35:12:10:f2:dd:48:
a6:86:b2:97:a3:82:d6:30:f2:2f:46:5d:25:92:8d:
32:4a:9b:92:a0:c5:3e:73:17:5b:dd:0c:1b:9d:ca:
9e:d6:8d:78:fe:16:72:16:c1:0b:c5:12:e5:f4:2c:
60:04:5b:f7:83:e2:01:a6:5f:79:0c:71:91:6f:92:
43:03:ca:04:1c:e6:05:e8:a4:ad:d7:b4:56:87:b7:
32:4e:2e:d7:0b:8d:79:37:78:f5:51:cf:2f:97:59:
fb:4b:37:e5:f7:4e:8b:75:a1:a6:25:72:bb:dd:97:
39:89:0e:57:08:79:1e:4d:da:13:ae:1c:06:db:d5:
13:b0:a2:46:32:3d:e5:c6:34:c0:97:3f:4b:3a:9e:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:A4:30:20:A5:DB:0C:38:78:FA:60:6A:D3:6E:9A:01:05:BA:66
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rRSkMCCl2ww4ePpgatNumgEFumY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:26:50:b1:61:40:05:3e:32:8a:0b:bc:30:7d:6f:bf:40:e7:
c5:64:e7:7e:99:3d:e8:8b:a8:53:8b:58:df:4a:2d:da:43:99:
d2:82:68:85:33:10:ce:45:4f:8c:be:0f:05:70:56:e0:eb:0b:
15:e2:49:9c:68:96:c8:3f:9b:96:d9:4e:49:fb:61:f4:bf:e2:
59:28:d3:cc:48:0d:f5:7c:57:7d:a8:c3:62:9d:e1:14:d7:e2:
3b:be:69:61:e8:e1:f9:31:97:c9:fb:2b:ad:cc:66:a5:ed:a9:
b2:25:e2:f3:57:f3:96:b3:31:41:75:1d:cd:ce:fa:b3:fc:14:
c0:e8:16:f7:8b:1d:ad:4c:6d:c0:1f:ba:1a:c7:1e:1d:a3:28:
7b:38:18:e5:96:39:0e:6f:72:e2:bd:45:94:38:8f:a7:15:cf:
b5:9f:d9:0d:f0:a1:f3:67:ab:ae:ba:c4:bd:e8:88:d8:99:23:
3d:ff:ad:e8:53:9a:94:e3:3b:45:5f:5f:f3:ab:93:35:54:89:
d1:c4:83:c5:41:4d:a9:c8:44:8f:f4:84:ef:fc:7a:88:5c:76:
35:b3:20:12:aa:d8:fe:1b:0f:3c:e3:ef:f5:7f:dc:03:b6:12:
fb:b6:f7:5d:f5:8c:b3:69:d2:a7:cd:fb:15:35:bd:d4:8b:12:
0c:b8:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 03:53:17 2024 by rpki-client on console.sobornost.net