Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BTHLdmeIXMKoiclP-vn0usmkeyE.roa
File: BTHLdmeIXMKoiclP-vn0usmkeyE.roa (raw, json)
Hash identifier: iHIZZ3om1wYqNRHBqnYqUIcqrtGOut/w0zFIwI/YEfc=
Subject key identifier: 05:31:CB:76:67:88:5C:C2:A8:89:C9:4F:FA:F9:F4:BA:C9:A4:7B:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3487
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BTHLdmeIXMKoiclP-vn0usmkeyE.roa
Signing time: Fri 29 Mar 2024 14:52:11 +0000
ROA not before: Fri 29 Mar 2024 14:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 14:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0531CB7667885CC2A889C94FFAF9F4BAC9A47B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:54:2c:47:dc:3d:a4:8b:db:7d:a4:9f:b7:
74:2f:90:7a:6c:8d:9c:56:0c:09:e6:7a:10:4f:0e:
bd:cc:34:e8:7b:b1:54:ef:00:a9:fd:02:33:af:ec:
ed:61:79:8a:f9:64:92:12:eb:f9:6d:62:1e:51:0f:
a4:4a:c0:37:e2:a2:1c:c0:42:ac:10:42:22:35:03:
9b:51:3c:32:0b:eb:42:3c:75:60:8b:32:85:26:4f:
44:79:cc:eb:36:07:5c:7e:cd:ce:bb:d2:a3:da:7d:
24:92:60:05:0a:5f:fa:c3:9b:a8:0f:f6:52:5c:94:
fb:52:ab:bf:7e:12:99:14:e9:b0:a6:f2:ad:68:7d:
da:c0:b5:d6:e8:df:53:30:b1:8f:15:12:33:57:81:
fd:9c:ac:dd:5e:39:b8:33:3d:0b:42:f7:94:0a:64:
8f:ec:3d:94:ec:9b:46:90:6b:76:64:a2:79:b8:9e:
ef:6a:6e:59:0e:91:e1:60:74:62:e9:64:95:c0:e1:
21:2e:53:4f:a3:6b:16:11:11:3d:84:26:aa:0a:e6:
2c:63:2c:0e:78:a1:4a:5b:82:9c:fd:30:3a:1e:ab:
ef:64:6b:f2:58:1c:26:b0:58:10:86:b9:e5:e2:d5:
97:2c:31:67:ff:76:ff:ba:15:f3:4d:bf:08:7f:a7:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:CB:76:67:88:5C:C2:A8:89:C9:4F:FA:F9:F4:BA:C9:A4:7B:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BTHLdmeIXMKoiclP-vn0usmkeyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
05:43:1e:c2:af:4a:4a:a3:0b:3c:24:34:ab:30:8d:8f:cb:9e:
ac:2a:4e:e4:13:8f:0e:8b:b5:0c:c9:fe:e2:16:bd:07:4b:9a:
ca:71:26:7b:2e:51:87:91:e6:6c:1f:8f:2c:78:df:3e:98:69:
40:63:f1:26:b3:00:a2:c1:6e:11:e7:0d:3a:b9:3e:44:af:ec:
e0:f0:5f:b0:21:f0:a3:f5:0a:90:e7:c4:5a:b2:d4:db:31:dc:
4e:78:6d:d8:8c:42:0e:57:b3:7d:ea:70:44:f7:18:af:74:1e:
ff:19:f8:7d:97:c0:1f:e3:89:fc:41:db:cc:31:eb:af:c9:c8:
9f:0a:cf:35:9c:f0:8b:56:6e:5c:b6:e7:30:93:a8:eb:3a:7c:
d0:60:c9:99:68:2f:fb:7f:2a:a6:5d:00:d1:79:2d:b5:cd:e4:
c7:2d:79:d1:2d:59:ba:f9:c7:46:b2:6d:08:d5:38:87:9d:61:
82:db:a7:28:46:3e:65:e8:2c:41:0a:d1:f3:6a:a7:c8:9f:f9:
4b:c8:ad:10:04:f2:1e:86:78:45:d4:61:58:ce:5c:4e:74:1c:
e2:40:61:22:07:a1:8f:29:59:c4:f5:99:6e:b6:75:17:40:a2:
52:51:45:f2:11:88:f1:72:0f:98:a8:e1:2d:3e:66:18:03:81:
bc:5a:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:12 2024 by rpki-client on console-fra.rpki-client.org