Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4burZQ9lXm8YlA4OK2w-7AqBPdU.roa
File: 4burZQ9lXm8YlA4OK2w-7AqBPdU.roa (raw, json)
Hash identifier: Vl8vKzWj6FZn2NO8TWUdex/aQY++BwOneCqXOmS3LpM=
Subject key identifier: E1:BB:AB:65:0F:65:5E:6F:18:94:0E:0E:2B:6C:3E:EC:0A:81:3D:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5413
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4burZQ9lXm8YlA4OK2w-7AqBPdU.roa
Signing time: Fri 10 May 2024 16:24:03 +0000
ROA not before: Fri 10 May 2024 16:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21523 (0x5413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 16:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E1BBAB650F655E6F18940E0E2B6C3EEC0A813DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:09:00:6c:fe:be:b7:0e:fe:25:1e:33:3d:
49:04:49:76:7b:91:55:3e:74:40:9c:4b:89:46:a3:
83:85:26:34:e7:a6:2d:81:2f:89:f0:a1:6b:76:b1:
c6:50:fb:41:44:34:79:25:92:7c:d7:53:3e:da:63:
89:53:07:f7:65:7e:61:d9:06:88:8b:4e:a6:8f:99:
ae:51:3c:c0:bf:0a:1f:10:ec:76:10:2f:93:ee:f4:
42:1d:c4:72:11:f5:eb:13:be:fc:7e:6c:db:dd:14:
15:97:1c:dc:34:59:1a:98:9d:3e:01:07:11:80:6f:
c1:55:e6:55:29:6b:89:86:fe:73:12:8f:1a:2b:24:
ab:69:a6:b5:1d:42:d2:ca:bd:ee:19:0f:cf:36:3e:
32:55:fc:4f:d6:ce:10:d9:24:46:cf:0f:d2:8e:25:
a8:9f:bd:5c:81:ad:aa:0e:fd:05:f6:c8:96:25:49:
e8:d2:f0:42:55:8e:a2:5d:c6:7e:48:83:64:b6:be:
cd:11:0c:0d:74:eb:9b:9d:99:21:21:c7:2b:a9:14:
db:d1:31:58:25:69:b8:3a:27:6a:fa:2d:1c:b2:69:
57:7f:1b:13:34:8a:42:6e:0c:bd:84:06:eb:2d:55:
dd:ba:06:27:a4:5f:66:91:6d:9f:35:8e:1d:77:89:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:AB:65:0F:65:5E:6F:18:94:0E:0E:2B:6C:3E:EC:0A:81:3D:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4burZQ9lXm8YlA4OK2w-7AqBPdU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
14:fc:2a:d8:29:7b:9b:3a:88:7a:fe:4d:33:68:5b:fa:f2:00:
29:97:ba:4d:12:62:e7:8a:8a:d1:82:54:6c:fa:c6:d0:55:11:
3e:91:78:9a:39:fc:03:55:59:6b:b6:c5:0a:88:6d:77:6d:01:
b0:f2:e3:18:59:ed:36:bf:2e:b3:72:2e:d3:a9:45:56:b8:d4:
d2:d4:38:91:48:9d:22:57:9a:73:ba:5e:f5:4c:f4:11:c5:87:
bb:f3:f2:e9:49:0b:8a:76:4f:0e:bf:65:e1:5d:a4:77:60:28:
a4:d8:c3:f6:81:9e:2e:28:94:64:ea:ea:58:e1:32:c5:e9:5a:
87:fb:32:df:17:8d:ee:dd:dc:19:4e:11:4c:38:03:5b:51:c5:
4a:f3:5e:02:59:24:37:89:23:95:fd:27:b7:8d:b2:c4:92:85:
a1:94:08:32:bd:25:d5:3c:6c:53:33:45:cd:09:fa:5f:3a:1d:
ea:a0:fa:20:e8:ff:35:02:55:0b:43:85:a1:eb:63:a2:58:15:
a9:b8:84:93:e5:34:f2:08:17:9e:4d:f9:36:3a:b8:55:34:c5:
05:46:cb:5c:52:a3:5b:13:ae:a9:e2:ae:3c:7a:33:5f:ec:26:
59:9b:6f:24:c1:1d:e5:41:c8:9e:02:c4:68:c4:8a:a3:07:a2:
23:cb:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org