Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-QQI24-7dqdikTptc1nnlGdAWDA.roa
File: -QQI24-7dqdikTptc1nnlGdAWDA.roa (raw, json)
Hash identifier: HO/7NHRUV4LeEisbNAyTKWe+wqtGzzlVQD6DWXmLvC8=
Subject key identifier: F9:04:08:DB:8F:BB:76:A7:62:91:3A:6D:73:59:E7:94:67:40:58:30
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3D1B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-QQI24-7dqdikTptc1nnlGdAWDA.roa
Signing time: Wed 10 Apr 2024 01:22:39 +0000
ROA not before: Wed 10 Apr 2024 01:22:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15643 (0x3d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 01:22:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F90408DB8FBB76A762913A6D7359E79467405830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:e5:2b:7d:93:71:df:c2:6b:0b:05:e6:95:
83:24:41:37:f9:57:71:77:85:57:5e:3e:bf:99:ec:
9e:a6:86:76:ee:85:6d:5b:6f:0a:13:46:bb:04:7f:
bc:33:2b:fb:c7:f6:04:ab:c3:18:bc:92:09:7a:d0:
d2:f7:91:c7:de:77:40:38:a3:54:9e:1d:53:ab:02:
9f:8f:9e:e6:33:a5:07:6e:c4:06:e2:05:d3:f8:88:
8a:65:17:0f:19:6e:97:b8:a1:45:ca:c5:e0:01:3b:
ce:6a:55:1c:a7:02:05:bc:49:b4:d9:92:bc:9d:23:
30:43:12:cf:d6:e6:ef:b7:b8:0d:28:ee:4a:ab:26:
13:a1:75:02:c3:c8:b5:d5:9f:2e:95:88:4f:92:5b:
0f:51:e6:06:13:2e:1b:be:19:ea:3f:da:36:60:ae:
3f:97:1d:4b:b9:9a:43:14:4a:c0:be:e4:26:90:d7:
c3:06:17:aa:a1:15:ae:33:74:c7:86:de:17:a7:ef:
4d:f2:a0:7f:0c:4b:57:73:69:ee:96:b2:b6:2d:98:
79:ae:00:b6:1c:1d:21:96:08:8d:dd:90:84:8a:a8:
00:c4:70:09:1e:73:5b:7c:be:19:dd:83:63:6f:e8:
e7:71:5e:35:4e:a3:7d:29:1a:aa:0b:e4:f0:a0:53:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:08:DB:8F:BB:76:A7:62:91:3A:6D:73:59:E7:94:67:40:58:30
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-QQI24-7dqdikTptc1nnlGdAWDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:7d:ec:14:4f:aa:2d:a0:59:e4:35:4f:ea:4d:00:7b:b2:34:
16:23:4b:87:6c:1e:81:00:14:4f:13:f0:ca:62:af:bb:04:7f:
de:5e:17:ab:d3:86:ad:85:6e:9e:ff:e3:b2:21:32:82:f9:e6:
13:b7:88:29:83:84:be:93:8d:ba:2d:95:ee:da:44:bf:77:9d:
12:a8:82:96:37:2e:7c:47:ef:01:33:de:41:50:5c:eb:69:0c:
9b:8a:7b:ea:8d:4b:bd:28:c1:df:d8:0e:ab:d2:23:3d:6c:a0:
24:9f:96:34:e4:a7:d1:fe:d6:35:22:76:6d:19:ef:3f:75:1a:
91:5f:98:40:45:2e:1e:06:f0:31:3c:a7:a9:24:2e:27:35:15:
71:c9:06:74:ee:c8:76:44:54:49:54:90:3f:2b:4f:64:13:5b:
02:09:d8:b2:e6:ee:db:b1:d0:cb:b9:24:30:e7:1a:cd:86:8c:
aa:87:5f:d6:fb:d3:00:f0:e3:d9:19:d0:25:75:41:28:42:79:
4b:03:3a:af:cb:de:ee:ba:31:23:03:1a:74:75:17:4c:a3:64:
76:97:56:05:2e:c7:40:41:e8:37:81:b0:09:af:38:7d:e2:9a:
51:97:6d:82:ee:4d:f1:ea:4f:7b:7d:65:03:c1:7b:bb:24:9d:
72:04:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org