Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/673Eqb90TRMM1ACqTS0V83oBGRc.roa
File: 673Eqb90TRMM1ACqTS0V83oBGRc.roa (raw, json)
Hash identifier: fE1tKKeaMQj9KXijr77k+HrF8i9RDy+A9Xi0In4R9/w=
Subject key identifier: EB:BD:C4:A9:BF:74:4D:13:0C:D4:00:AA:4D:2D:15:F3:7A:01:19:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 486B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/673Eqb90TRMM1ACqTS0V83oBGRc.roa
Signing time: Thu 25 Apr 2024 03:23:19 +0000
ROA not before: Thu 25 Apr 2024 03:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18539 (0x486b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 03:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBBDC4A9BF744D130CD400AA4D2D15F37A011917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:ab:2b:2c:fd:5e:73:de:b4:b6:46:ef:00:
06:24:93:0b:2e:c3:d2:bd:ce:bb:29:52:36:87:7b:
e7:96:60:ba:aa:be:fb:cc:8c:d5:1a:04:d5:79:e1:
d3:f3:50:1f:be:e2:fc:38:2c:63:66:a2:7e:36:21:
b2:27:42:80:64:57:4f:68:f3:e5:f9:f4:00:26:0b:
e6:f2:5d:47:95:5a:1f:32:41:e4:b6:a2:ae:25:27:
e9:49:4a:ed:9e:13:d3:24:f1:3a:10:fd:bd:3f:bf:
b5:e9:04:e2:45:0a:62:2b:04:d6:09:70:4a:05:97:
79:7e:d6:34:f9:0e:76:ee:a3:02:94:c3:5a:b3:ff:
77:99:8e:a1:3b:ea:d0:28:c0:30:d8:88:f9:bd:5d:
7a:ba:87:fa:6d:7a:40:62:12:5d:93:47:1e:0d:cb:
1c:90:bc:ad:a7:c4:a8:34:f5:d7:e4:8c:d6:a0:90:
ab:e7:2d:5e:9c:05:35:2b:23:11:10:3e:cc:52:12:
b1:ed:62:ec:73:43:83:e8:64:f3:39:ac:7c:6d:ab:
45:f6:a8:97:d7:70:fd:e7:5e:a1:81:3d:f1:43:0f:
b9:68:fa:ea:5c:09:a6:81:9b:db:9a:be:3e:5a:1f:
4d:1e:6c:53:0b:e0:10:09:bd:f2:09:1e:37:ac:79:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:C4:A9:BF:74:4D:13:0C:D4:00:AA:4D:2D:15:F3:7A:01:19:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/673Eqb90TRMM1ACqTS0V83oBGRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:4d:a2:04:43:ee:8e:43:c8:cf:8c:c3:af:d4:9d:99:d2:8b:
19:73:50:d1:4e:a4:0c:12:ca:c2:84:30:eb:d3:c7:58:d6:bd:
f0:87:3b:24:5a:e6:89:bf:80:e9:6a:ec:b8:d8:b6:14:c8:73:
c6:b7:42:f1:9c:0f:cd:10:ab:ac:75:b1:00:44:e5:3f:86:d2:
db:1e:a1:27:ee:62:9c:76:46:b9:68:05:9f:df:a2:44:dc:fb:
83:6d:96:44:14:49:cf:98:a2:d6:e7:c2:46:92:a8:fd:de:9c:
9c:cf:8c:ae:eb:d2:f7:18:07:55:f5:f5:e2:ee:4e:da:51:5d:
74:60:52:12:f8:5d:c4:55:91:4a:0e:24:21:e9:58:04:75:e2:
f7:54:69:85:38:df:10:44:28:29:45:40:01:75:91:84:46:af:
c3:80:9e:e1:15:1f:05:4c:a0:04:88:c3:f1:74:ab:f7:b8:d1:
b2:9b:82:37:65:b0:80:db:f8:bb:3d:e7:ca:47:9f:db:60:d1:
aa:a6:44:58:ef:b4:d4:6a:94:a4:8f:1c:72:92:6c:65:35:5c:
46:a1:3b:94:1e:73:19:99:77:59:da:c0:f0:a7:2b:4d:34:0e:
1b:90:c2:97:15:52:e6:96:5c:23:67:dd:73:73:28:32:fe:0b:
9d:8b:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org