Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6H0IC-tm0PcSYj4wubetrj96p7Y.roa
File: 6H0IC-tm0PcSYj4wubetrj96p7Y.roa (raw, json)
Hash identifier: FzNJcbn50QyylwJf9HXNL2IEHgebjfyLE6/+PelkenM=
Subject key identifier: E8:7D:08:0B:EB:66:D0:F7:12:62:3E:30:B9:B7:AD:AE:3F:7A:A7:B6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 550B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6H0IC-tm0PcSYj4wubetrj96p7Y.roa
Signing time: Sat 11 May 2024 23:24:04 +0000
ROA not before: Sat 11 May 2024 23:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21771 (0x550b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 23:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E87D080BEB66D0F712623E30B9B7ADAE3F7AA7B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:ae:43:09:2f:66:9b:4a:10:53:ba:74:5e:
a7:1f:7c:3f:73:19:d1:49:86:d4:7b:c4:a5:fc:f8:
38:75:66:21:ec:2c:ca:b4:9d:10:44:09:c9:c4:98:
eb:19:11:e8:9d:29:1b:17:9b:cd:27:4e:40:8b:53:
30:b6:65:7c:96:52:00:8d:64:56:b6:bc:e7:21:37:
80:89:23:25:46:3d:a9:06:23:92:71:8d:78:50:45:
ef:ea:88:75:fa:c2:47:4a:c7:a7:31:cf:ce:f1:72:
15:0d:9f:72:f8:9d:bd:f9:7e:ed:32:f1:67:60:61:
91:69:15:00:24:26:4a:6d:b0:3b:45:95:57:37:2b:
66:31:8f:6b:97:51:d0:b5:ce:f5:b0:6a:36:da:e5:
90:0c:d9:ce:80:ac:e8:0f:52:cd:6d:4c:01:73:e2:
e3:4c:6a:a0:1a:b8:56:e9:af:92:4b:d0:09:6b:f8:
f1:8b:15:65:d7:c8:ac:b7:fa:a4:c7:01:08:9e:77:
97:41:c4:a4:fa:d4:6d:65:f0:da:2b:3a:1c:ac:6f:
05:7e:6a:2f:c1:34:3d:06:e7:cb:82:2e:11:23:bf:
f2:01:9f:57:51:32:16:42:b3:01:de:ac:cb:44:6e:
c5:95:24:1e:a9:83:d6:6e:03:da:f9:d7:5f:aa:40:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:08:0B:EB:66:D0:F7:12:62:3E:30:B9:B7:AD:AE:3F:7A:A7:B6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6H0IC-tm0PcSYj4wubetrj96p7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:6c:56:b8:c9:31:fb:0c:fe:09:2e:f6:f1:b7:1b:df:00:09:
75:4c:74:b6:bd:80:9d:e0:09:5d:dd:b5:f0:68:21:b4:25:ff:
26:b2:3b:97:1f:37:c5:91:36:3c:fd:aa:1b:ff:81:bb:9f:3e:
6d:f6:90:93:86:5e:9a:3b:fd:94:97:84:d6:59:e9:5a:e1:02:
fa:d2:59:8a:a8:e5:91:15:de:f8:cf:62:ef:dd:7f:94:da:45:
a9:11:c8:4d:44:6b:a4:50:07:05:e5:2e:a0:0d:39:8a:a2:46:
28:f1:a7:19:73:0a:bb:89:f2:fa:c0:67:6e:ab:e7:64:f4:40:
f3:96:99:1a:48:09:2a:d7:07:0d:c1:7e:35:fe:3c:f1:c2:1c:
cc:fe:ac:88:5a:e2:7b:5d:14:d5:79:c3:5c:36:d2:39:1b:89:
d1:31:03:b0:97:54:17:9c:ff:7a:33:13:7a:79:e4:33:d7:16:
44:13:c2:95:73:6c:34:61:a5:c8:29:d7:e9:0c:6a:1f:ef:12:
1d:e2:29:ac:a2:35:83:5c:c1:69:46:25:f6:84:55:e5:86:a8:
11:6a:3f:9c:24:c7:17:ae:ac:97:24:32:b8:53:bb:bc:ea:9a:
f7:03:00:e4:02:2f:90:98:bf:47:51:b2:03:cd:1b:7b:bb:58:
90:75:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:16 2024 by rpki-client on console-ams.rpki-client.org