Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7WNHtd0BRwS7Oe7hRIR6R4Wh8qA.roa
File: 7WNHtd0BRwS7Oe7hRIR6R4Wh8qA.roa (raw, json)
Hash identifier: jKwzxk5iwINkler+Z3q2hsqRytfBC4V/WV2qiTypR9o=
Subject key identifier: ED:63:47:B5:DD:01:47:04:BB:39:EE:E1:44:84:7A:47:85:A1:F2:A0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4037
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7WNHtd0BRwS7Oe7hRIR6R4Wh8qA.roa
Signing time: Sun 14 Apr 2024 04:52:56 +0000
ROA not before: Sun 14 Apr 2024 04:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16439 (0x4037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 04:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ED6347B5DD014704BB39EEE144847A4785A1F2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:c5:e8:5d:d4:8a:98:79:54:1c:55:cf:df:
ad:8f:d7:ef:d1:6c:82:1b:6f:38:e4:3c:94:49:4f:
15:d8:25:8e:4f:f1:78:07:58:39:11:65:10:1e:7b:
3c:1d:96:94:51:03:89:7f:c6:d3:7d:95:9c:7a:a7:
c1:ca:f3:21:af:14:34:02:49:97:1c:99:e4:4c:bc:
b4:30:05:64:73:18:26:83:28:3e:13:4a:2e:70:f2:
06:c1:13:9c:d8:79:a5:a2:65:86:e1:85:99:b3:52:
61:cd:34:ff:28:b0:74:2d:11:ab:c1:f5:70:c7:4d:
3d:b6:ed:95:e7:cf:4c:96:83:a9:b3:e5:9a:15:0a:
6c:7f:a1:18:cd:aa:46:02:43:3c:a9:d7:e5:b5:17:
7c:39:9c:4b:e8:17:b0:18:09:4d:85:1a:75:fd:74:
9b:3c:f7:70:cd:14:02:1b:23:8f:6f:45:44:13:f8:
40:3b:76:4b:74:8d:0d:1f:e6:45:3a:6d:e1:c1:a5:
03:0c:21:fe:34:65:4f:dd:83:9a:25:e8:14:b4:ec:
00:08:63:e9:90:0b:98:23:d7:ad:58:f7:b5:ae:67:
82:35:62:9f:75:b0:f0:2e:d5:09:63:d3:50:14:b2:
f7:7c:a6:1c:15:0b:97:ea:18:a2:a6:ee:96:76:11:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:47:B5:DD:01:47:04:BB:39:EE:E1:44:84:7A:47:85:A1:F2:A0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7WNHtd0BRwS7Oe7hRIR6R4Wh8qA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
27:6b:ca:1a:d9:93:3c:27:ac:50:29:28:79:87:fe:b8:23:92:
59:12:6e:3f:39:39:20:c8:02:6a:aa:69:92:25:4a:43:06:e4:
5e:ba:3d:d1:7a:78:88:53:99:fc:85:f5:f5:de:2d:19:1a:d8:
65:0b:b5:79:20:77:76:36:dc:7f:24:2b:56:54:20:38:cb:8f:
94:32:4c:1e:3c:81:13:a2:0f:67:2e:52:d4:d6:2c:48:a5:d6:
07:ed:52:b4:9c:73:8a:63:08:23:fe:33:44:eb:a9:f9:f8:83:
58:42:6a:59:14:e0:32:30:b0:c3:df:bc:dd:d0:16:28:44:fc:
b2:8b:25:16:54:0b:92:87:45:f0:ac:57:46:e4:5d:31:26:ab:
e6:c9:0d:b1:bf:64:aa:52:13:3c:41:32:84:00:ed:83:be:ba:
b1:2d:39:53:24:95:b0:db:34:fa:6e:f3:51:0f:f7:98:d0:b3:
90:23:9f:54:34:72:7a:43:cc:68:72:f5:20:49:7d:a2:a3:0f:
e8:da:b3:96:79:a5:5f:ec:23:36:9f:e0:86:62:11:75:fc:ee:
23:33:8c:8c:f2:b5:73:59:72:5d:95:16:97:57:ee:83:ca:ce:
04:42:9a:5e:fe:fb:7f:51:2d:76:2f:ef:51:0d:3f:0d:f9:dd:
db:21:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:17 2024 by rpki-client on console-ams.rpki-client.org