Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4ddu6TL3umZVm7fytn2CPTyGNSw.roa
File: 4ddu6TL3umZVm7fytn2CPTyGNSw.roa (raw, json)
Hash identifier: 1/KkU8FKYUEb+5m556J59KcbElQqLSHTodODbnhyJgQ=
Subject key identifier: E1:D7:6E:E9:32:F7:BA:66:55:9B:B7:F2:B6:7D:82:3D:3C:86:35:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 447F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4ddu6TL3umZVm7fytn2CPTyGNSw.roa
Signing time: Fri 19 Apr 2024 21:53:12 +0000
ROA not before: Fri 19 Apr 2024 21:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17535 (0x447f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 21:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E1D76EE932F7BA66559BB7F2B67D823D3C86352C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:1a:54:84:09:c9:bf:2c:09:2a:05:83:af:
60:00:f2:42:26:2a:31:14:49:6c:54:20:3f:1b:54:
57:72:55:7e:66:bb:cf:6d:2b:53:64:e9:01:6b:98:
5d:ac:17:7a:9b:fb:96:6c:a0:f7:76:1c:1a:02:84:
d8:0a:00:be:16:1f:59:73:12:ac:e4:d0:9a:13:a2:
8a:54:26:0e:1c:1d:47:40:bf:70:fe:ed:fb:45:4c:
9e:5e:2f:0b:79:0b:29:89:e5:ef:4f:4a:fe:49:df:
06:22:59:89:83:18:de:62:46:08:cb:25:19:a6:74:
eb:b2:74:95:17:d4:e1:36:e5:59:44:c4:40:fb:ae:
32:ef:d8:46:cb:b4:05:6d:71:04:ca:1c:13:a2:34:
7a:e6:c3:32:f8:02:a1:38:b4:46:3c:2d:02:bd:e6:
be:f0:16:01:3a:7e:e7:45:52:05:db:29:c5:10:97:
d4:1f:3c:f3:ea:93:38:53:ef:9b:8f:03:1b:2d:80:
96:70:47:c1:c1:17:18:b7:45:6f:a4:76:ed:6b:f2:
21:50:74:da:e6:02:f2:0b:e0:b5:6d:ea:20:eb:da:
67:79:1e:bf:82:40:7e:43:1a:35:88:50:39:65:14:
d8:28:4e:67:21:6d:47:24:25:42:9e:4e:f1:0e:00:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:6E:E9:32:F7:BA:66:55:9B:B7:F2:B6:7D:82:3D:3C:86:35:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4ddu6TL3umZVm7fytn2CPTyGNSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
30:34:ac:df:de:1f:87:bc:d1:5b:be:eb:ca:9d:91:3e:7e:3f:
88:4a:e6:50:c3:d5:7f:9f:09:5a:3b:b7:e5:85:bf:b1:d8:99:
a3:ec:89:c4:cf:bb:7b:70:b5:80:88:29:2f:7c:54:ca:6a:9a:
e5:7b:85:bd:5c:3b:d4:c3:e7:8d:69:b0:40:2c:dc:7a:bf:1c:
01:2a:55:b4:9d:a6:56:b8:21:ac:04:71:d9:40:65:05:2f:34:
dd:ca:b4:10:2d:a2:fa:c6:5d:df:5c:37:f9:3c:eb:16:c5:cc:
82:58:dd:ca:90:ab:ec:2d:69:63:a1:fb:87:3f:a6:82:75:8e:
55:eb:95:d1:27:35:ab:7d:55:fb:87:b1:cc:09:da:3d:a6:cd:
dd:a7:22:36:54:da:89:2e:ed:69:47:38:23:c1:db:13:02:9d:
08:e2:09:d8:0b:96:d6:87:8b:94:56:13:47:71:5e:04:f3:25:
a8:58:c4:c7:09:0b:2b:36:dd:94:05:4d:23:19:30:5f:9b:0a:
4a:ca:78:46:47:3e:90:77:e7:20:a2:c0:cc:c5:35:0c:49:12:
9b:45:7b:16:30:29:4c:92:9f:3e:5f:c8:74:2c:79:01:df:4d:
82:73:2e:41:29:27:17:43:e1:48:e5:2d:9a:6f:a8:a9:aa:fa:
8f:2b:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:06 2024 by rpki-client on console-fra.rpki-client.org