Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zattdXHSs_bjF-Fz_F4_V5-8MnQ.roa
File: zattdXHSs_bjF-Fz_F4_V5-8MnQ.roa (raw, json)
Hash identifier: sq0+FO+WC0JJLb/ZYkXPLexj5WXm0YskT07aPQNNqlo=
Subject key identifier: CD:AB:6D:75:71:D2:B3:F6:E3:17:E1:73:FC:5E:3F:57:9F:BC:32:74
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33A7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zattdXHSs_bjF-Fz_F4_V5-8MnQ.roa
Signing time: Thu 28 Mar 2024 10:52:29 +0000
ROA not before: Thu 28 Mar 2024 10:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13223 (0x33a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 10:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CDAB6D7571D2B3F6E317E173FC5E3F579FBC3274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:74:9e:90:fd:0a:30:59:57:82:10:87:80:
84:44:42:16:20:5c:39:4b:9d:85:33:c1:6d:98:79:
09:1e:7c:b2:ae:e8:45:e6:a8:7d:e9:cb:7b:6a:a1:
ad:28:d2:e1:1a:21:d5:5d:f9:1d:8f:e6:7a:3f:68:
08:bd:72:bc:45:d7:75:ce:9b:5f:bb:08:68:71:3d:
d0:57:0e:7b:a2:19:f3:d4:54:ac:96:48:89:3f:b1:
0e:cb:f7:d5:8e:e8:cc:b5:a3:18:12:11:cc:90:86:
e0:36:a3:b7:ea:1b:2a:f9:de:46:ac:ea:f0:15:70:
c5:89:18:ab:28:6e:33:f4:5e:27:28:94:b9:48:3e:
40:b0:e1:11:bf:ff:43:81:87:20:53:3c:13:69:17:
af:b1:a8:c5:d0:58:a1:4c:c1:67:26:7d:fa:97:dc:
f9:97:b3:6a:97:5d:1c:f9:15:b8:14:64:de:9d:42:
24:26:b1:69:ed:22:77:a5:43:88:d8:eb:96:35:bb:
89:51:2f:5a:09:18:39:28:6a:ff:a4:2b:54:01:ed:
55:30:71:53:9e:99:40:1a:ab:4b:d8:d6:b5:fc:2f:
f5:15:a9:ff:bf:c5:01:19:5f:fa:8f:0f:33:d3:46:
c8:c6:83:48:0c:a5:91:af:ed:b4:15:f6:16:fa:0e:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:6D:75:71:D2:B3:F6:E3:17:E1:73:FC:5E:3F:57:9F:BC:32:74
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zattdXHSs_bjF-Fz_F4_V5-8MnQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
29:33:e1:95:bb:a4:65:8f:02:79:df:cb:e9:c6:fc:87:75:42:
38:1e:d1:81:5c:6c:3e:4f:b8:34:d9:56:6c:e4:c1:00:7c:b0:
1a:de:53:04:d0:20:2e:f5:88:8c:2a:22:cc:ba:c7:62:52:fb:
5d:7b:68:52:c1:4b:67:c4:24:f7:93:3e:e6:93:a3:49:88:03:
c3:01:e1:6b:0b:e6:49:7b:f3:09:d1:de:34:c3:15:bc:02:9b:
a1:8a:35:09:66:46:32:de:3e:e6:81:99:72:76:21:00:38:59:
2a:71:69:00:80:ae:02:7f:aa:db:d1:9a:12:73:c9:61:71:9c:
a9:b7:38:c6:a6:ce:e6:5e:4e:09:87:5f:51:fc:e6:fd:9d:59:
56:7d:03:6d:e3:87:ce:06:21:d9:13:93:c9:6e:96:11:f5:d7:
95:dc:7d:8d:84:91:7e:95:cd:a3:c8:1f:85:f6:d8:36:7d:0f:
62:20:fe:51:66:17:8f:2c:4e:34:d1:e4:ff:94:5b:b0:27:85:
f1:d3:75:7c:d8:c8:ca:c7:aa:a2:c8:bb:84:91:7f:d3:ad:f1:
74:8b:e2:b5:39:a7:9c:22:b7:cd:76:74:56:d3:d0:93:93:de:
62:e0:63:30:a4:76:ae:57:7e:be:dd:22:e4:dc:1c:20:e0:a3:
25:32:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:46:21 2024 by rpki-client on console.sobornost.net