Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7f9wR-dZe891uyQ2_AbR9EVE-Oo.roa
File: 7f9wR-dZe891uyQ2_AbR9EVE-Oo.roa (raw, json)
Hash identifier: m0rriLPKYwRtWx6TSsumxd2aCtyWe/GoNVFCiW6aQlg=
Subject key identifier: ED:FF:70:47:E7:59:7B:CF:75:BB:24:36:FC:06:D1:F4:45:44:F8:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 47A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7f9wR-dZe891uyQ2_AbR9EVE-Oo.roa
Signing time: Wed 24 Apr 2024 02:23:16 +0000
ROA not before: Wed 24 Apr 2024 02:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18339 (0x47a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 02:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EDFF7047E7597BCF75BB2436FC06D1F44544F8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:6d:2b:25:0c:b8:0b:28:de:cc:81:0f:0f:
6a:13:5b:46:58:af:f4:ff:ad:37:6e:85:4d:51:e2:
09:02:28:ae:38:a0:6f:70:e1:9c:9d:08:a2:51:10:
dc:88:d9:71:bb:3f:ad:92:f9:26:e0:e0:c0:c3:d8:
3e:89:e0:c8:94:90:ae:6c:fe:6f:2d:46:d1:c2:c3:
8a:60:90:7f:86:34:c8:70:1c:bb:7d:bb:35:87:7f:
a0:54:38:61:4e:3d:ab:82:f9:d1:1c:89:dd:15:a2:
72:37:74:9e:cd:4d:7b:bb:4f:61:bd:7b:b7:58:6c:
ef:41:98:3e:63:50:8a:6c:85:8d:5e:22:51:9c:95:
86:63:3d:88:29:fc:08:55:4a:f4:59:df:f3:16:04:
e5:d1:d2:19:b7:c3:4d:7a:8f:47:c6:68:bc:15:db:
79:1f:6a:99:65:04:7a:17:ea:93:40:e5:cc:b4:bf:
9d:8e:3a:e1:d2:f6:86:5f:64:00:07:9c:c5:6f:7c:
a3:f3:8a:58:1a:37:29:9c:c0:aa:dc:b9:ba:05:27:
29:07:c0:a7:ae:39:af:5a:36:bc:68:4e:23:24:5f:
27:39:0d:95:8b:03:c1:78:20:7f:24:3a:d7:53:c6:
78:9e:7d:82:eb:1e:fb:5f:2b:25:91:c5:2e:3e:45:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:70:47:E7:59:7B:CF:75:BB:24:36:FC:06:D1:F4:45:44:F8:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7f9wR-dZe891uyQ2_AbR9EVE-Oo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
25:b5:c5:41:89:2e:bc:7f:ba:44:8b:01:95:ea:e3:92:78:1a:
17:24:0d:1a:ef:4a:91:07:b0:68:f3:2e:71:3c:e6:3a:ce:60:
af:a1:39:d2:b9:33:7e:5b:be:61:57:53:c9:36:b1:65:d6:08:
94:dc:df:4e:2f:11:cc:4a:3d:79:cd:eb:fd:4a:25:25:d2:06:
7d:7e:84:10:18:57:74:9d:1b:4c:b1:1f:f3:c8:13:0a:41:5e:
a7:ee:00:4c:35:63:c8:1e:59:f6:c3:e3:8a:00:be:c9:cd:70:
82:e2:0a:46:c5:08:46:58:cb:fa:e5:55:64:cd:24:4e:70:f4:
d3:be:46:72:2b:79:bc:f9:9b:cd:93:55:43:83:56:a3:c1:46:
a4:dd:24:df:36:85:e0:c1:ce:59:fa:6b:2a:34:5d:c4:d2:2e:
fd:2e:fe:72:6c:48:ea:f5:1d:1d:ab:b0:0a:20:b6:ab:e4:77:
7c:a4:17:b7:a5:b8:fe:a4:f3:2e:89:f2:21:ff:60:b0:ec:12:
46:7c:7b:7b:4c:07:66:bf:a2:30:9e:eb:fe:9f:dd:c0:05:cc:
e1:d9:ee:a9:d9:f7:da:ec:7a:bb:59:5f:f2:23:fa:6a:ff:9e:
c1:9c:45:46:91:fa:54:42:0c:de:8b:d4:84:0c:3e:28:30:bc:
e0:56:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:08 2024 by rpki-client on console-fra.rpki-client.org