Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/C_D_VLtKNdsoeABclZkhM8Pp6QY.roa
File: C_D_VLtKNdsoeABclZkhM8Pp6QY.roa (raw, json)
Hash identifier: 9FP2RwytsdsWn8yQF7SlDDrZyM5uvDIWycTRVqkZwl4=
Subject key identifier: 0B:F0:FF:54:BB:4A:35:DB:28:78:00:5C:95:99:21:33:C3:E9:E9:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5737
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_D_VLtKNdsoeABclZkhM8Pp6QY.roa
Signing time: Tue 14 May 2024 20:54:12 +0000
ROA not before: Tue 14 May 2024 20:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22327 (0x5737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 20:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0BF0FF54BB4A35DB2878005C95992133C3E9E906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:6b:3a:e1:1c:1e:76:b6:c5:4b:22:e7:c9:
81:f4:89:47:b9:1f:bf:27:e6:7d:56:23:29:51:83:
cc:41:f8:63:94:67:2f:bf:52:9a:07:84:9d:83:ad:
23:b9:39:05:50:ac:62:64:f5:e0:9f:ea:14:ec:a4:
40:f0:4b:bf:cf:ee:2a:1a:ed:40:c8:aa:b6:75:5f:
09:04:2e:8a:4e:dc:4c:be:a5:1b:c7:0e:d3:47:62:
3d:0c:bd:94:ef:8a:c1:76:44:01:fc:f8:44:67:8b:
7f:16:38:30:91:68:f8:df:a8:b9:e5:d6:ef:16:d4:
a9:27:89:10:89:05:48:79:75:c2:bf:0f:ad:6b:6e:
bc:9f:e6:f7:c1:6e:60:72:a8:2c:d9:08:ff:72:43:
3a:2f:be:02:d5:58:57:97:ca:6b:a1:6f:68:9d:1c:
67:a6:b4:ea:a3:b4:69:d1:42:e7:42:87:54:f5:d5:
2f:5c:a8:7f:f9:de:6e:f0:a1:ce:fb:06:67:8a:12:
cc:37:28:2a:83:8e:3d:50:13:2a:80:aa:8c:9f:86:
97:da:d8:01:0d:2f:8d:7b:b1:eb:35:f5:44:52:57:
d0:6f:4d:25:2f:af:2f:19:9c:98:af:c8:72:af:26:
cd:b4:08:ed:f1:5a:68:4c:9f:4a:0e:ed:a9:3d:ba:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:FF:54:BB:4A:35:DB:28:78:00:5C:95:99:21:33:C3:E9:E9:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/C_D_VLtKNdsoeABclZkhM8Pp6QY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:d5:0d:29:76:57:d8:cb:c5:9a:42:b1:f4:66:76:9a:bb:0a:
eb:6b:b6:d7:ce:b8:af:09:d7:30:38:34:ba:a2:90:d9:4f:cf:
da:86:38:0f:65:a3:ee:6a:01:6d:dd:67:7f:d8:a6:de:6e:88:
ca:1d:a6:63:6d:b8:2d:c7:8c:60:81:8b:b3:b5:c9:8d:7e:6b:
93:24:80:cc:89:db:ea:79:f4:41:27:6f:3a:be:aa:25:a9:18:
73:87:62:58:c0:32:84:3d:25:a8:e2:d7:e4:a5:02:3e:60:d2:
09:e0:a5:3c:13:0a:d9:e5:a4:a5:ba:5b:eb:1d:96:03:0a:be:
55:f7:42:2f:b3:b9:5d:80:06:2d:5f:76:8e:c5:a2:c8:4b:6a:
1d:a5:e2:40:2b:2e:09:e6:28:df:e1:5b:a4:80:2c:d6:f1:e4:
90:3a:81:2e:2d:7c:0a:82:7f:74:1d:53:b6:9b:e8:4e:0a:9a:
d9:be:99:9e:33:46:21:d3:5e:dc:74:b6:78:63:30:77:80:46:
77:7b:cf:ab:91:c9:89:b1:8b:f5:3c:36:67:4f:61:71:bb:6d:
c0:ac:f0:1c:42:f1:4b:be:59:dd:5f:95:6b:bc:79:b9:d0:58:
b9:7a:4b:f7:f0:78:4a:fa:54:c6:b8:38:ac:ac:8d:39:bd:21:
95:4f:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:23 2024 by rpki-client on console-ams.rpki-client.org