Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-BCB7Py-ICR_ihS92jFqpUa78WA.roa
File: -BCB7Py-ICR_ihS92jFqpUa78WA.roa (raw, json)
Hash identifier: PIfEbDP2T/7neaRptnAFDS7vEZ+uTz6X2vJC6K/M58M=
Subject key identifier: F8:10:81:EC:FC:BE:20:24:7F:8A:14:BD:DA:31:6A:A5:46:BB:F1:60
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A17
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-BCB7Py-ICR_ihS92jFqpUa78WA.roa
Signing time: Sat 06 Apr 2024 00:52:25 +0000
ROA not before: Sat 06 Apr 2024 00:52:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14871 (0x3a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 00:52:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F81081ECFCBE20247F8A14BDDA316AA546BBF160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:26:8b:4f:35:3a:51:0f:67:cd:6f:7f:85:
95:42:d4:7f:8a:c0:c0:e8:c2:34:02:91:2a:c7:4e:
1e:c9:90:bd:73:02:be:47:17:6d:b1:c4:ad:7c:b8:
92:35:2b:b3:de:e8:59:de:e5:b7:9f:95:e8:6b:f2:
7d:e9:8b:f3:45:33:8a:93:4b:42:8a:4d:5a:bb:40:
b5:96:45:9e:60:ec:20:22:fa:09:97:64:dc:3c:bb:
5b:b0:1c:4b:66:66:83:34:1d:de:4f:81:a3:b6:1d:
63:af:36:e4:13:24:aa:5d:ba:c6:39:b0:55:17:ae:
6a:89:68:03:59:e9:16:6d:1d:b9:62:77:ee:1e:ef:
75:40:fe:27:f1:5d:52:82:8c:d7:00:05:35:54:88:
d7:d1:99:9b:fc:02:8b:c5:54:48:ae:aa:85:87:7d:
ed:72:2a:34:8d:ee:97:79:41:bc:40:e1:ad:74:30:
9d:90:9d:a6:43:f3:48:99:02:75:51:e1:f7:34:00:
f5:ff:41:f8:29:e0:10:12:23:cb:76:45:39:5d:5f:
c9:2d:03:73:50:35:c0:fb:b0:ff:5b:2a:20:9d:2e:
b2:b1:c0:88:d7:ad:54:e1:8e:ee:2f:5b:4d:1e:5f:
ce:d3:47:d1:a2:6a:e9:1f:64:a5:cb:92:d0:1d:b3:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:81:EC:FC:BE:20:24:7F:8A:14:BD:DA:31:6A:A5:46:BB:F1:60
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-BCB7Py-ICR_ihS92jFqpUa78WA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:b4:7b:c0:98:e0:88:11:7a:3b:98:20:37:c8:6a:06:de:68:
8e:2b:a8:38:95:44:57:83:c7:2f:2d:e5:91:8f:60:cf:d2:4b:
73:1e:7f:96:f6:d8:29:c0:40:00:03:f6:18:ce:ad:0f:b1:b9:
f9:be:7b:58:ea:1c:2c:46:cf:93:7a:d7:20:e3:60:5d:6d:a1:
80:a5:e7:41:7e:9e:53:5e:e8:91:d2:e3:0e:a7:08:13:1b:6a:
d8:69:6b:40:91:3c:d4:d2:86:de:54:df:f7:6f:65:56:97:74:
13:6f:ac:10:99:77:ea:83:ec:13:e2:38:ab:b9:c1:d3:7d:0d:
9a:e8:33:61:49:0c:a6:db:30:94:19:76:5b:ab:b4:2c:fe:a7:
fb:97:4b:a6:13:d7:47:c4:d3:39:42:dc:0e:e2:aa:ce:00:e9:
4f:2f:b0:ad:ef:a7:fa:6c:29:80:1b:96:e7:f4:f9:31:e8:5c:
3d:ac:c5:a1:90:02:b5:b5:92:fb:78:f2:92:98:8a:e9:3b:9e:
25:3b:f5:7f:35:22:6d:01:41:8a:56:d6:62:13:8f:bf:a9:ad:
bf:3e:da:73:3d:f8:21:7e:4e:8f:3f:1f:13:ac:49:3d:ec:03:
2a:1f:80:09:b4:8d:ea:f1:e9:64:e3:05:d0:02:69:97:48:60:
c7:56:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org