Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CeGbZMl76ynQ6MGEEMtCOO1VYBk.roa
File: CeGbZMl76ynQ6MGEEMtCOO1VYBk.roa (raw, json)
Hash identifier: fqiJwydMpZShUZQF4ILY8Z8cmw6an6ptbw0sxUCHJ6s=
Subject key identifier: 09:E1:9B:64:C9:7B:EB:29:D0:E8:C1:84:10:CB:42:38:ED:55:60:19
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 523F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CeGbZMl76ynQ6MGEEMtCOO1VYBk.roa
Signing time: Wed 08 May 2024 05:53:56 +0000
ROA not before: Wed 08 May 2024 05:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21055 (0x523f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 05:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=09E19B64C97BEB29D0E8C18410CB4238ED556019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:5d:43:7b:c1:c9:25:79:a3:cc:5a:4e:7e:
f3:40:32:82:e9:32:b3:fe:b0:d5:20:a6:c5:fc:a3:
8d:c4:bc:6e:21:c9:df:59:18:13:d5:7b:c8:4a:4d:
e8:52:3d:12:90:da:99:69:4e:c5:9d:d8:b9:7a:c1:
a1:43:eb:6a:74:fe:6c:82:b6:7d:b1:c8:00:4d:d0:
d4:16:42:40:ee:93:04:dc:da:4e:80:a0:63:a9:28:
c9:29:1e:1f:f8:88:0a:88:85:bf:9f:4e:a7:4a:78:
c4:30:32:1d:b5:5d:64:61:07:3e:d7:88:d8:18:50:
93:21:6e:31:f6:98:0e:03:56:f0:ec:69:86:e3:42:
fe:9f:5f:af:6d:b5:40:e0:05:de:63:3a:d8:44:d9:
a7:30:22:80:2f:b0:45:4f:93:de:e7:39:95:c4:e2:
fd:24:52:d8:be:76:b2:a3:c2:36:32:68:ad:84:42:
9a:a5:5f:83:c3:17:5a:f6:33:fb:14:41:db:f0:65:
2d:e7:0a:87:7e:44:f0:1d:d9:a8:8d:8c:bf:19:c4:
f1:3a:d8:1d:f0:e4:3d:87:05:1f:83:12:97:60:e2:
ac:62:94:33:ff:c9:d3:6c:34:bc:de:2b:c8:f9:d5:
23:0d:75:78:95:f5:20:8a:3b:94:28:13:04:5f:b8:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:9B:64:C9:7B:EB:29:D0:E8:C1:84:10:CB:42:38:ED:55:60:19
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CeGbZMl76ynQ6MGEEMtCOO1VYBk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:f9:d8:37:7d:8b:a9:de:98:d9:21:96:71:cd:08:e5:7b:38:
76:13:c7:3e:70:19:74:3a:41:3f:f1:e6:04:2d:0c:4d:81:20:
59:30:cf:0b:71:e1:e2:42:a2:e2:09:2e:56:6c:2d:5a:3c:d2:
b4:cc:aa:d1:3d:a0:17:d6:38:7c:be:b2:49:4e:1e:66:70:50:
61:13:77:eb:d6:bc:d1:7d:44:98:7d:34:f0:34:3e:b5:a7:51:
c6:7d:19:76:7c:f1:0b:13:56:13:9c:ac:f7:de:74:f7:20:7c:
84:41:e0:75:2b:36:be:5b:10:cb:8d:10:0c:c4:97:f5:9e:36:
98:20:d0:6d:11:39:1e:79:23:e4:f0:ba:0c:3b:d7:21:85:a1:
5f:d1:32:54:00:db:fa:2f:6e:7d:96:36:04:26:d5:5e:ea:b4:
f5:cd:e5:03:3b:06:26:a3:ae:91:82:2e:9b:53:17:b0:13:1f:
cd:34:d8:a3:e9:8e:7b:69:5d:70:05:8b:18:1b:60:45:99:26:
cb:08:1e:6c:63:3b:16:d5:26:d7:be:80:e6:02:e1:af:93:57:
7e:6b:db:0a:24:57:fc:09:01:1d:cd:0b:32:1f:95:4b:f2:c6:
78:fd:7e:44:ff:5c:a4:82:9f:79:c5:ce:d3:06:e1:8b:41:fc:
33:b5:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:13 2024 by rpki-client on console-fra.rpki-client.org