Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-L52TDFd9hUXJghoFh9D7Z1EmUU.roa
File: -L52TDFd9hUXJghoFh9D7Z1EmUU.roa (raw, json)
Hash identifier: unyMD88aBWkCUL51agYUP/YymSoSaFCMJZeoSZbyYWg=
Subject key identifier: F8:BE:76:4C:31:5D:F6:15:17:26:08:68:16:1F:43:ED:9D:44:99:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E7F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-L52TDFd9hUXJghoFh9D7Z1EmUU.roa
Signing time: Thu 11 Apr 2024 21:52:48 +0000
ROA not before: Thu 11 Apr 2024 21:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15999 (0x3e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 21:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F8BE764C315DF61517260868161F43ED9D449945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:38:eb:07:cb:0d:b7:44:ac:f1:71:bc:a6:
21:50:87:53:3f:ea:b6:c7:06:71:01:c2:12:b0:49:
46:e0:91:65:b9:9c:31:00:8d:29:67:16:9f:b7:6f:
75:1c:4e:50:54:39:40:60:78:32:6d:1a:e8:11:e8:
66:18:df:a8:29:a0:96:35:99:0f:d4:7f:61:e3:d0:
73:af:c8:16:4b:b0:b3:44:82:5a:18:73:ec:f1:b6:
4d:c1:6e:79:98:ec:b6:98:fc:0e:d7:d3:a3:a6:b2:
d6:ab:c7:7d:e5:4f:92:c6:b8:65:75:bd:0b:fc:dc:
54:df:d1:3c:dc:b5:70:cb:cd:b9:21:10:14:44:fd:
05:f7:95:e2:4e:36:3d:31:60:79:64:b1:08:ac:d3:
0e:b9:2e:b1:18:97:a3:bc:bd:b8:f4:cf:91:04:36:
50:9b:1d:b1:94:54:eb:4a:57:f6:24:95:b9:77:4f:
55:15:b9:33:9a:20:fa:ab:46:f5:19:47:fd:a8:eb:
76:fc:8f:b5:c7:d8:4f:c3:89:73:fe:3a:21:f3:85:
57:77:19:6f:bd:0e:e5:86:8f:dd:58:4b:4e:13:3f:
46:68:00:aa:96:d4:20:42:b3:0c:47:6f:09:6a:26:
43:6c:07:c9:78:34:5e:92:65:15:d7:89:76:b2:54:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BE:76:4C:31:5D:F6:15:17:26:08:68:16:1F:43:ED:9D:44:99:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-L52TDFd9hUXJghoFh9D7Z1EmUU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:ba:3b:26:d0:ad:ce:70:ea:71:89:0c:f3:b0:20:e4:df:b1:
bc:3f:84:21:10:d8:57:3c:b9:d8:3f:53:04:1d:a7:36:6c:88:
5c:f3:4b:05:cf:e7:61:a4:11:71:e6:f2:db:00:ae:c7:01:0e:
5c:17:1a:fc:11:4a:66:97:85:6f:aa:8e:b2:81:39:b1:93:dc:
01:9e:26:15:7a:5f:d2:6f:08:62:d4:3c:2b:dc:2b:e7:d0:47:
b9:56:4c:5c:cd:5e:a2:af:43:1f:19:30:4d:04:65:d5:15:30:
13:e8:9c:63:06:dc:60:57:a9:e8:c4:aa:4f:70:8e:44:5a:f9:
9b:e7:65:59:5d:0c:d2:28:b9:7d:d8:8d:5a:9e:c0:15:39:12:
79:f8:e8:f7:d5:22:43:00:3e:cc:07:63:5d:24:ef:0c:2c:9a:
c3:6e:cf:32:59:8a:1d:16:ef:0a:89:68:b8:d9:33:6c:7f:56:
e6:4c:f6:50:9e:40:65:68:42:03:90:64:94:48:72:ac:e5:0e:
e7:73:37:e7:cb:3c:6d:c7:82:97:b2:10:a4:bb:fe:20:2f:de:
9f:e4:ff:ff:72:df:12:43:92:2a:5f:dd:a9:ae:05:c0:ad:d4:
6c:11:50:0e:37:3b:f2:82:7c:a3:fc:68:0b:96:b5:fc:ea:09:
e7:c3:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:07 2024 by rpki-client on console-ams.rpki-client.org