Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/D_kVw62eeKQ8zc-fz2MwD2R-siI.roa
File: D_kVw62eeKQ8zc-fz2MwD2R-siI.roa (raw, json)
Hash identifier: 4dU0sVCjV9FcUv8MZkexXu5+LpT55PC2G+0pwUh9fQM=
Subject key identifier: 0F:F9:15:C3:AD:9E:78:A4:3C:CD:CF:9F:CF:63:30:0F:64:7E:B2:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5827
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/D_kVw62eeKQ8zc-fz2MwD2R-siI.roa
Signing time: Thu 16 May 2024 02:54:17 +0000
ROA not before: Thu 16 May 2024 02:54:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22567 (0x5827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 02:54:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0FF915C3AD9E78A43CCDCF9FCF63300F647EB222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:a0:e0:5c:c8:e1:a6:94:ab:d3:4b:d5:ab:
bf:78:49:a0:40:2c:f8:28:4e:e1:b9:bb:30:1e:e3:
ed:b0:2e:4f:a1:72:54:04:4d:22:41:70:2a:cc:af:
c0:6b:49:cf:07:ec:69:12:d5:29:76:5d:f3:c9:eb:
32:9a:19:68:8d:53:67:a1:88:52:89:ec:ae:bc:ff:
06:7e:49:88:59:a4:6b:e7:99:1d:13:04:3e:94:eb:
e7:39:05:cb:bc:d9:e3:f7:63:e0:df:0c:95:78:85:
12:30:ad:c3:e1:00:8b:7c:ed:b3:e5:c4:b8:c2:9e:
9b:6a:9f:43:0a:3b:54:67:a1:d8:b5:53:40:eb:8a:
fe:9c:22:39:9c:08:91:3a:fc:81:38:a7:df:00:a4:
53:4b:90:55:99:d8:2a:32:a1:ef:d4:3a:f4:d7:3a:
10:24:55:53:47:fe:2e:86:ca:ed:e2:ea:87:14:4a:
44:82:68:1c:cb:0b:ac:6c:ed:7e:e8:7a:4f:c2:cc:
5f:6d:0c:26:86:7a:20:eb:b1:fc:a1:05:ff:81:c8:
4a:2f:38:54:c2:62:68:ca:80:1a:06:c2:98:b6:9c:
b6:88:d4:29:af:3a:94:db:3f:15:be:5e:b9:54:fb:
1b:43:4d:e5:5c:82:24:85:33:51:80:90:03:e6:78:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:15:C3:AD:9E:78:A4:3C:CD:CF:9F:CF:63:30:0F:64:7E:B2:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/D_kVw62eeKQ8zc-fz2MwD2R-siI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:4d:94:df:ee:d6:c7:3f:2b:15:f2:c4:14:15:58:ed:bc:71:
5f:15:3c:f5:9a:23:da:8f:33:97:e5:69:5b:25:0b:df:97:86:
f3:61:d2:12:ba:1b:71:9a:0c:07:9d:a2:c7:f2:74:f0:15:8c:
34:93:d8:51:79:8c:da:ec:1a:c0:2b:c0:ff:12:f8:25:92:cd:
76:2c:6a:f8:d6:4d:fb:64:95:87:30:00:b1:57:8e:16:fd:df:
62:cd:83:c6:32:2b:98:63:5e:31:2a:26:d1:1c:14:34:50:32:
8b:bb:fd:ee:a3:af:09:cf:ef:5a:b0:ea:b2:96:0b:80:ef:0d:
e8:ff:6e:ff:d7:0a:e1:95:1a:67:5b:21:98:90:dd:9f:52:7f:
b6:26:2a:38:94:cf:02:ca:0c:55:40:9f:ef:10:32:20:60:84:
0d:8a:7a:87:50:38:5a:02:7b:5a:fa:e9:bf:7a:41:e8:49:ed:
e4:5a:0d:ac:31:78:d1:8a:62:ec:98:44:d0:11:e8:e5:f1:24:
ba:cd:81:89:2d:61:2f:b8:13:f7:77:e7:9f:b5:94:ad:94:c2:
54:49:8d:ae:d3:f2:9c:6f:60:e4:0e:d1:79:a2:8d:18:30:95:
8e:8e:76:4d:99:da:63:9b:89:62:97:ad:a5:37:6a:db:5a:6b:
92:03:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:25 2024 by rpki-client on console-ams.rpki-client.org