Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9-36cikvE1kYNfNBqXy5mWnqC8c.roa
File: 9-36cikvE1kYNfNBqXy5mWnqC8c.roa (raw, json)
Hash identifier: lVehMRPLIV5RMAP76r2Rdgm9UIqDq30t3DvyPgRNoTY=
Subject key identifier: F7:ED:FA:72:29:2F:13:59:18:35:F3:41:A9:7C:B9:99:69:EA:0B:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BBF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9-36cikvE1kYNfNBqXy5mWnqC8c.roa
Signing time: Mon 29 Apr 2024 13:53:51 +0000
ROA not before: Mon 29 Apr 2024 13:53:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19391 (0x4bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 13:53:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F7EDFA72292F13591835F341A97CB99969EA0BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:02:2e:85:4a:d0:dc:45:e6:a1:8b:1d:80:
ca:01:13:68:2e:aa:fd:d3:77:8a:72:6c:94:66:d5:
bc:b7:5f:72:ed:f7:a2:52:84:d7:c7:97:92:c0:f9:
1f:fa:f3:fc:d9:d2:8a:a2:1d:a5:b8:2f:52:16:0f:
a8:28:74:78:c2:7d:70:f9:6d:ff:04:d2:4e:4b:bd:
5a:a2:0b:30:dd:be:d7:b8:35:6f:d6:2a:bf:6f:9b:
51:1e:1d:92:0d:a5:cc:6d:ee:4d:34:ca:e0:5c:2f:
0a:b3:c7:38:2f:5e:6d:36:d0:7f:3f:f6:d2:04:9a:
f4:63:b8:12:cb:89:49:ea:f1:fc:28:92:cc:17:1a:
bf:53:d7:b9:b6:bc:11:56:dd:e4:1d:a2:45:8d:2f:
32:f7:3c:37:62:91:4b:91:64:70:3a:a0:3e:3f:e4:
f7:8a:af:4c:0d:7a:23:3f:b0:fb:c6:dc:0b:30:45:
8c:00:a5:41:b7:4d:c7:a4:63:ca:64:97:f9:5c:ca:
c4:5c:6a:f0:a9:32:d6:35:58:09:2e:ef:62:16:09:
a7:95:0b:df:0f:db:f9:95:ee:f7:50:61:1f:45:7f:
2d:e3:f2:e8:d4:8f:e2:5b:5d:9a:c1:78:b7:d3:7b:
3a:cc:bc:be:8a:52:b7:33:78:3e:e6:73:b2:98:ec:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:FA:72:29:2F:13:59:18:35:F3:41:A9:7C:B9:99:69:EA:0B:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9-36cikvE1kYNfNBqXy5mWnqC8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:30:fd:a2:7c:08:db:96:60:06:33:47:f4:55:d5:4f:6f:34:
c5:e4:6d:45:61:fa:ad:ce:2a:cf:50:69:a5:d4:9c:7a:67:a9:
56:a1:a2:d1:3a:57:f0:31:ac:db:16:38:47:5e:8b:7b:17:09:
6b:a2:2a:85:5f:9f:a4:b4:5c:2a:31:54:93:d3:98:d0:f2:16:
84:0a:0d:d4:84:59:9f:95:9d:9c:8d:f6:04:f4:99:af:97:b8:
2b:ac:08:5a:b4:df:ac:bd:30:61:33:da:65:da:23:e7:2b:5d:
38:7e:d2:f8:c5:f3:48:28:a6:26:78:e9:d2:f5:2f:a5:36:33:
cf:94:ec:7f:7b:77:50:4c:25:90:d0:ef:51:a4:52:fa:c2:01:
b2:36:46:1b:4a:ba:cc:60:0e:ba:7b:20:e1:ea:5e:1c:d0:5f:
6b:5a:b0:59:1e:f1:b6:6c:e3:f6:6f:bc:a3:ee:f3:32:3e:21:
15:03:b0:fe:00:62:8f:f9:eb:62:3b:d2:c5:0a:ee:6f:70:8d:
dc:fb:04:da:bf:07:33:11:49:1e:78:b5:d1:8a:90:96:31:7f:
eb:38:e6:5e:a1:c0:e0:fa:27:85:87:71:56:66:85:d3:fd:db:
75:a8:29:81:64:67:84:18:34:3e:bc:bb:2a:3c:90:ad:59:eb:
b8:e1:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:09 2024 by rpki-client on console-fra.rpki-client.org