Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ccm1FEkMpsmuPWcfQwVQ9_HtVFM.roa
File: Ccm1FEkMpsmuPWcfQwVQ9_HtVFM.roa (raw, json)
Hash identifier: SmDMXb+YaXyTvPZNFRQT0mqzpTJCJvnyxaCYbuLdx8A=
Subject key identifier: 09:C9:B5:14:49:0C:A6:C9:AE:3D:67:1F:43:05:50:F7:F1:ED:54:53
Certificate issuer: /CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Certificate serial: 20D7
Authority key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ccm1FEkMpsmuPWcfQwVQ9_HtVFM.roa
Signing time: Fri 21 Jan 2022 02:01:21 +0000
ROA not before: Fri 21 Jan 2022 02:01:21 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8407 (0x20d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Validity
Not Before: Jan 21 02:01:21 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=09C9B514490CA6C9AE3D671F430550F7F1ED5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:62:9e:53:14:ce:e4:27:34:13:53:a2:8c:
b4:c6:af:bf:75:40:52:78:c5:24:c4:6a:4d:6c:8e:
66:65:bb:2f:08:61:28:f2:d8:4e:da:e1:80:c2:95:
04:bd:76:5e:c0:78:67:32:50:b0:a4:b0:fa:19:1b:
37:f9:08:31:29:f3:24:4d:10:7c:36:38:5d:69:c9:
ec:18:91:4e:c1:bc:31:88:ca:f2:cf:b5:11:3f:cb:
e8:ad:63:0f:23:b7:81:19:f7:a0:76:09:2e:06:0b:
dd:dc:a4:1a:9b:fe:8c:80:71:92:6d:f3:8e:50:24:
7c:2b:25:eb:1e:e8:cf:c6:3a:19:ee:27:b1:9e:bd:
86:a0:a6:ea:d8:ea:1e:7b:d7:cf:c3:01:d3:e0:5a:
af:be:58:59:12:c8:20:7c:a2:58:bd:d9:06:e9:fb:
5f:f0:c0:d8:8b:8a:39:e7:e1:a4:52:60:e9:d5:d8:
66:89:54:a8:3c:01:80:88:3c:85:fa:54:f7:60:74:
ba:9c:17:d9:6d:1c:51:70:f0:e7:d5:d7:7e:71:88:
52:78:16:d7:64:b1:91:fc:3c:ac:bf:4a:8d:5a:5c:
27:ee:8f:7b:3e:8a:6e:e2:86:2e:f2:ce:20:71:b3:
b4:f1:de:9f:0e:60:eb:fd:61:27:33:18:57:d4:cf:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:B5:14:49:0C:A6:C9:AE:3D:67:1F:43:05:50:F7:F1:ED:54:53
X509v3 Authority Key Identifier:
keyid:51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ccm1FEkMpsmuPWcfQwVQ9_HtVFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6f:4e:7c:da:32:c2:a4:06:89:ce:47:e2:dd:30:b0:ea:12:fe:
eb:eb:46:ef:68:2b:3f:fc:7f:b1:d5:c7:b4:3c:7a:9f:c0:1d:
85:16:95:b3:0c:7f:e7:92:82:a9:5c:06:8e:c7:f8:93:23:51:
bb:9a:f5:9a:5f:af:17:5d:4d:f1:37:0d:0d:97:c2:6b:bf:16:
44:04:b2:80:bd:79:23:7f:5f:6c:04:a4:34:d0:e3:57:15:62:
3f:60:db:36:b8:cb:5c:46:85:a6:7c:26:3e:bc:cd:5e:b5:0e:
46:57:75:c3:a3:e1:05:2a:8e:e0:73:b1:39:01:f2:67:6e:6a:
0a:c9:c5:57:29:ad:27:f0:dc:e2:88:dc:6d:8c:0e:01:78:19:
24:03:4c:c0:1a:69:75:ff:89:9f:7b:4a:42:ac:c7:61:2d:11:
70:7b:3d:2a:72:31:ac:5e:b2:11:4a:81:81:da:76:77:bf:b7:
f2:2e:89:a8:55:17:53:7b:b4:84:0f:4b:7c:01:f5:09:d4:a2:
a1:3c:d3:a4:5f:04:c0:9a:38:4f:6c:d1:29:86:81:80:ea:cd:
cf:d0:4e:ad:f6:88:67:1e:a4:d8:c0:41:ea:3c:ca:d2:58:b0:
ef:a4:7b:a7:d7:2a:2a:95:f2:e1:59:3c:ae:df:3f:3b:ea:7d:
ba:00:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:23 2024 by rpki-client on console-ams.rpki-client.org