Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BBCvTvY80syzV6k3Eiq69qYfSZs.roa
File: BBCvTvY80syzV6k3Eiq69qYfSZs.roa (raw, json)
Hash identifier: ZXB/nu+90/hcqCdH7Lcr55u9Z2C7cl1ciHUeJffdkNs=
Subject key identifier: 04:10:AF:4E:F6:3C:D2:CC:B3:57:A9:37:12:2A:BA:F6:A6:1F:49:9B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3663
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BBCvTvY80syzV6k3Eiq69qYfSZs.roa
Signing time: Mon 01 Apr 2024 02:22:38 +0000
ROA not before: Mon 01 Apr 2024 02:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13923 (0x3663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 02:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0410AF4EF63CD2CCB357A937122ABAF6A61F499B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:55:54:6c:bf:b8:98:9d:d5:9a:fb:cc:0c:
75:aa:08:1f:3e:2a:9a:09:76:9d:11:53:a9:d7:b8:
23:db:75:e7:7e:d4:b7:b5:9c:24:4e:38:5d:fb:4e:
2b:ae:ff:fc:79:74:32:89:74:07:b3:4b:bd:77:89:
0a:e6:75:e8:da:a4:fd:97:1e:5f:4e:0f:8c:9a:c0:
eb:47:a0:53:5f:c3:36:9d:3e:2b:1c:ad:c8:bb:62:
7a:28:dd:19:55:cd:09:80:a5:0a:38:39:5f:5d:10:
f6:64:01:73:56:26:8b:ea:d3:57:ea:66:32:3a:56:
6b:a3:73:bf:fc:16:78:16:2b:1b:03:46:37:58:89:
ec:f2:21:0e:79:cb:da:1a:79:4b:40:25:c2:2e:37:
92:c5:8a:c0:37:44:ac:d4:cf:32:09:20:53:20:f1:
0a:5b:23:e5:5a:42:9b:2f:7a:5b:74:01:a5:73:1a:
70:72:c1:cb:15:be:70:5e:d6:71:f2:93:4c:ff:c9:
9b:2a:31:41:0f:ce:41:35:a0:e9:dc:28:d2:6f:a3:
5e:c4:eb:f9:d0:37:a9:c2:d1:4a:0a:10:8d:fb:ec:
3c:5c:4c:cf:44:a1:9c:e9:f0:72:05:5d:43:2b:61:
68:9d:9f:55:8e:52:88:58:3b:26:07:46:67:27:71:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:AF:4E:F6:3C:D2:CC:B3:57:A9:37:12:2A:BA:F6:A6:1F:49:9B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BBCvTvY80syzV6k3Eiq69qYfSZs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
23:0a:1b:83:70:2c:e9:11:94:b5:ae:a2:0e:e7:00:4a:08:5e:
2f:56:6a:7f:ab:15:9b:ed:28:42:27:7b:d7:65:6b:02:96:77:
6d:d7:17:c9:a6:ec:ed:4f:11:79:8d:99:fa:55:14:cf:8f:fa:
26:e9:83:a6:c2:bb:4a:5b:5a:6f:50:6b:4b:09:be:bc:e3:43:
d1:6c:d5:8f:cf:e2:dd:a5:1c:72:ee:10:ff:99:56:73:4e:b4:
71:5f:60:f9:06:6e:ef:fd:af:4f:6c:f4:4d:1c:04:a5:15:99:
61:ac:30:b9:35:17:af:10:8f:87:40:af:7b:60:5b:4f:17:86:
8c:c7:8a:a3:25:55:a1:74:25:ef:b0:22:d3:d8:cc:0a:ca:97:
15:85:90:a9:b2:f0:cb:31:19:e5:54:2a:6c:68:80:55:ea:5d:
09:40:d9:89:5d:98:c9:33:0f:6e:5a:b5:f2:1c:b2:9a:d1:02:
b9:85:e6:29:ef:2f:19:f2:2b:61:e4:ed:63:de:19:c9:17:5b:
a2:53:7c:13:91:87:3a:36:25:86:9d:e0:63:8e:13:46:5b:52:
7d:df:6b:43:21:d4:c5:5a:a7:1a:59:ee:39:7c:15:76:eb:9e:
38:02:bf:49:ee:7c:7f:86:c7:fc:8a:59:35:e2:53:6a:fc:93:
7d:ec:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:11 2024 by rpki-client on console-fra.rpki-client.org