Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8_GR1U7f8uwmPLQiHsDpZ9eYXFo.roa
File: 8_GR1U7f8uwmPLQiHsDpZ9eYXFo.roa (raw, json)
Hash identifier: HSk/s+QtcPW/7V1GM/P+/6j0rPa/GmmM3WR/Wdln6SI=
Subject key identifier: F3:F1:91:D5:4E:DF:F2:EC:26:3C:B4:22:1E:C0:E9:67:D7:98:5C:5A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 517F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8_GR1U7f8uwmPLQiHsDpZ9eYXFo.roa
Signing time: Tue 07 May 2024 05:53:54 +0000
ROA not before: Tue 07 May 2024 05:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20863 (0x517f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 05:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3F191D54EDFF2EC263CB4221EC0E967D7985C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:0d:de:62:b4:49:7b:c6:77:c6:b2:1f:e9:
65:e8:a3:17:75:2a:41:cb:d4:cf:0b:af:12:4f:e5:
59:ee:67:3d:e3:e9:74:2e:21:4b:03:85:e8:9e:d2:
af:6d:64:0a:8d:d6:ab:23:3d:ad:a3:ec:da:63:6a:
e6:c5:64:ee:54:de:db:28:48:ff:4f:0b:8b:0a:74:
ba:ec:50:08:59:dd:2e:ac:b4:67:ec:79:f6:d2:a5:
81:94:2c:5a:09:68:de:32:28:f3:92:2a:02:ce:ea:
6a:67:30:81:2c:65:c0:f6:b5:be:ac:36:79:f7:7f:
fa:12:1c:a8:60:06:cb:7b:ad:a2:74:98:5a:32:68:
41:fd:b7:5c:9f:2f:b6:c3:9e:70:0d:45:6c:58:ae:
f3:36:c5:93:3a:af:e2:c2:6c:2c:dc:f4:40:14:73:
08:e9:45:2c:1c:af:5a:20:65:fe:de:7b:b3:f9:17:
5a:cf:f0:6b:ea:35:59:f6:4f:77:42:5c:6d:3f:c7:
8b:55:3f:08:f4:99:75:71:e5:c8:da:6f:59:56:83:
8b:0a:d5:e9:cf:15:bd:73:9f:c0:1f:bf:db:1e:fc:
f9:41:21:2d:ef:bf:c6:b1:65:f2:45:66:03:11:32:
37:09:db:22:36:71:5d:d0:b6:5b:ba:88:4d:bb:f8:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:91:D5:4E:DF:F2:EC:26:3C:B4:22:1E:C0:E9:67:D7:98:5C:5A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8_GR1U7f8uwmPLQiHsDpZ9eYXFo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:6c:8f:ec:49:1c:63:be:bf:78:de:c8:7d:b9:b5:be:5e:a3:
a4:5b:f1:0a:b9:e7:14:a1:85:ba:b1:fc:65:4c:4e:a1:f8:18:
66:27:97:3f:97:12:58:fd:d2:3e:1a:c3:de:a0:a6:cd:9e:85:
76:64:c9:42:7e:df:d2:69:f7:7c:9f:04:0a:bd:24:c4:81:3f:
c9:77:3c:3b:76:6c:9a:76:25:86:56:8b:d2:b0:e6:c0:8a:9c:
5f:8c:08:ac:ce:c7:24:aa:72:4a:ea:ec:52:a1:aa:94:de:ec:
83:52:35:d3:2b:26:13:d8:38:58:e4:a6:c5:2c:e3:47:eb:07:
df:98:b3:ff:8c:3a:5f:b5:21:4d:a1:1f:98:c4:97:cc:f1:18:
11:14:3e:c5:30:c5:75:5f:bd:06:4b:1c:0c:18:f5:9a:3e:90:
2a:9b:94:43:d1:ed:0a:d5:f6:7b:c8:25:b2:99:d9:33:5b:5f:
ad:01:29:30:1c:05:e6:ed:83:19:3c:df:c1:2a:f6:15:ae:7d:
86:71:91:62:58:c9:61:6e:cf:79:31:e5:d4:fe:7c:f2:86:84:
8f:2d:e2:9e:09:c6:93:ef:8e:d9:f4:d1:5e:44:27:d1:5d:f9:
98:d2:48:88:0e:4e:4d:64:56:58:cf:23:69:43:bc:d5:27:48:
0e:a4:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-ams.rpki-client.org