Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1k-94itznKB9fIE5iRIwAJtAYZ8.roa
File: 1k-94itznKB9fIE5iRIwAJtAYZ8.roa (raw, json)
Hash identifier: q+5ljkn8FAnW3/mt+Ce+bdlIMJVvY3h1XjwejZI3lc4=
Subject key identifier: D6:4F:BD:E2:2B:73:9C:A0:7D:7C:81:39:89:12:30:00:9B:40:61:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3973
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1k-94itznKB9fIE5iRIwAJtAYZ8.roa
Signing time: Fri 05 Apr 2024 04:22:54 +0000
ROA not before: Fri 05 Apr 2024 04:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14707 (0x3973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 04:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D64FBDE22B739CA07D7C8139891230009B40619F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2f:22:3b:d7:11:6e:ba:b3:96:e1:e6:9c:34:
78:5e:52:17:2f:23:52:34:25:1c:e0:d5:81:53:04:
1b:e0:3e:ca:28:e8:d1:9d:23:e1:56:e6:1f:b1:d0:
30:c1:75:02:77:9d:85:d4:b4:62:6f:d7:81:90:72:
80:83:4b:cd:89:8d:97:6e:bc:a8:d2:8f:48:fd:6a:
4f:4a:33:0b:3b:ce:c9:31:04:db:79:75:a3:37:e0:
54:e4:2b:32:aa:53:a8:dd:bd:d4:69:cb:ff:a6:09:
38:17:cb:f0:f8:6f:1c:8c:1b:60:c0:8f:d0:4f:c8:
6d:d5:22:d4:2b:42:ac:97:58:5e:9e:cd:f3:65:4a:
38:8e:57:bc:c8:74:82:53:81:31:c5:c7:84:7a:a1:
cc:d1:d9:5c:cc:10:6b:b9:66:e6:ea:0f:8d:83:87:
c6:5a:02:67:16:51:af:09:c0:1b:55:af:57:f2:8f:
ad:5b:c1:63:29:20:fb:91:ba:43:cc:5c:97:b9:ce:
71:f4:8e:2a:77:8c:bf:1b:08:b1:07:1d:c4:b3:b8:
41:f0:67:6b:4e:7c:72:75:de:31:5d:08:2a:6b:38:
0b:2c:90:03:d8:0a:30:fc:d9:bf:8e:f7:f4:1f:d0:
84:64:fd:bc:14:76:0e:67:00:f7:ab:3d:b0:47:32:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:BD:E2:2B:73:9C:A0:7D:7C:81:39:89:12:30:00:9B:40:61:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1k-94itznKB9fIE5iRIwAJtAYZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:3f:00:fa:a7:72:e4:b0:c0:8f:10:9d:e7:b1:8a:8d:1e:45:
9f:5e:35:d4:30:88:76:ae:fc:69:0f:41:20:f2:40:e6:c1:30:
42:8d:93:d5:32:38:ea:9b:dc:fd:5a:3e:31:65:78:d7:6f:d7:
a2:ba:d5:ad:61:9c:1d:6e:59:00:01:52:8b:57:08:b6:10:53:
56:7f:d0:78:b6:77:e1:4d:e9:74:33:9a:9a:45:a0:e6:5a:cb:
b2:32:bd:cc:2c:51:da:4a:75:38:56:ff:2c:e7:85:e1:0c:7e:
05:c5:92:89:34:2a:f9:c1:04:83:d9:1e:9c:82:55:1e:a0:ac:
04:62:0a:ba:57:3c:07:40:e8:f6:7a:e0:3c:98:2b:30:ba:29:
76:0a:ba:4d:54:be:67:dc:99:8b:62:ca:63:68:fe:c8:08:99:
5f:ec:3c:70:34:31:a5:ad:dc:2e:07:8c:34:de:0a:c3:68:f2:
01:33:d9:93:a7:52:43:3c:da:63:a3:f0:52:aa:e1:97:e6:54:
16:e0:4d:e6:31:9c:41:1e:3c:74:18:eb:ee:90:2a:4b:d0:49:
25:ca:21:0c:d7:03:57:a2:50:c0:e0:68:42:74:45:66:ba:b2:
02:9d:f8:de:85:54:d1:ae:bd:c9:82:1b:0e:21:e7:11:70:f3:
5c:df:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:03 2024 by rpki-client on console-fra.rpki-client.org