Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/64cugvDMwmVlDSnPollQRaqR2As.roa
File: 64cugvDMwmVlDSnPollQRaqR2As.roa (raw, json)
Hash identifier: HaQZ/1P+qU4KztqakmK+5U7sSu31Mio3upFBROuBhN0=
Subject key identifier: EB:87:2E:82:F0:CC:C2:65:65:0D:29:CF:A2:59:50:45:AA:91:D8:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F4B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/64cugvDMwmVlDSnPollQRaqR2As.roa
Signing time: Fri 12 Apr 2024 23:22:50 +0000
ROA not before: Fri 12 Apr 2024 23:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16203 (0x3f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 23:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB872E82F0CCC265650D29CFA2595045AA91D80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:8b:9b:f2:11:72:a8:f2:c5:48:9d:3b:24:
c1:17:93:30:e0:b6:2d:fd:15:4e:1c:45:98:60:2f:
79:ee:a8:cf:25:1e:65:31:ad:92:ec:f4:28:d2:5d:
cd:72:36:2b:e3:d6:3e:b0:7a:0e:42:fa:c7:4f:70:
82:5f:45:79:55:0d:98:37:c3:e9:3b:6c:ab:3c:9f:
d3:80:31:ce:43:b1:ff:17:6b:2a:12:7e:07:93:d9:
1d:8c:d8:9f:4f:eb:52:8c:5e:2b:f6:35:70:90:ac:
c3:8b:29:f1:e5:e7:ea:ed:2f:e7:65:20:13:1b:3f:
39:e4:3b:4f:d5:38:20:8d:a7:c0:a3:fb:85:b8:31:
50:d9:5d:36:05:7e:9f:40:46:80:53:84:e5:60:53:
59:c3:8e:fa:02:4a:11:0a:51:ba:f0:ba:99:71:6b:
f2:45:36:48:bd:2c:12:82:06:c8:a0:f4:17:a5:cc:
e8:7c:85:bf:51:65:f6:93:97:fe:8a:d0:71:84:55:
74:74:04:f6:a4:75:de:9b:01:92:47:a0:ca:9a:97:
74:b0:80:60:84:e5:15:99:b5:6c:ff:0f:93:2a:6a:
6c:6b:6c:98:f5:f2:b8:ce:a9:ce:8d:de:4b:6c:5f:
c9:44:09:71:8c:6a:b3:46:f1:0b:27:ab:4b:37:73:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:2E:82:F0:CC:C2:65:65:0D:29:CF:A2:59:50:45:AA:91:D8:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/64cugvDMwmVlDSnPollQRaqR2As.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
99:7a:ef:21:a1:0f:c3:80:5c:c2:1f:48:c7:e7:c8:e7:56:ae:
d0:2b:34:a2:77:06:f0:5b:bc:5b:86:5a:10:ba:42:6e:07:8e:
78:cc:ad:80:16:46:1a:25:80:0d:67:29:24:6c:a7:0d:72:ce:
a5:fa:c2:22:a6:a4:ca:9d:28:64:b4:2d:52:d7:00:30:f0:83:
e4:53:e6:e6:b5:41:54:2e:4a:3d:28:97:0b:fd:1a:2a:d7:f1:
e8:c1:98:ef:b3:90:c2:65:b5:9f:c8:cb:15:3d:52:39:b7:20:
b9:f3:31:e9:b6:1f:ca:8f:d4:42:46:68:c6:db:e2:8d:e2:a0:
c1:8b:b5:3b:d9:47:df:20:76:7c:d2:65:bf:a5:c6:47:d6:46:
45:21:7e:04:00:dd:ae:69:f2:7b:2b:df:93:98:4c:c5:89:fb:
c7:2a:65:5f:82:f1:1c:44:df:cc:1e:1d:b5:22:e8:ee:bf:58:
c3:86:d6:1e:76:dd:df:3f:aa:25:16:f4:2b:36:30:27:1a:39:
bc:26:b4:85:c4:5f:89:e8:48:88:d8:98:80:4a:19:85:6a:13:
a5:ac:be:3e:0b:ff:72:81:40:c7:2d:c8:3b:7a:eb:30:90:11:
a2:0c:6c:67:11:38:75:51:f3:2f:a8:7a:d0:e2:0d:ec:0b:53:
5e:33:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org