Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H2mUdnVR1E6NPvqSP_uQF_zr0Co.roa
File: H2mUdnVR1E6NPvqSP_uQF_zr0Co.roa (raw, json)
Hash identifier: I5OqSZAwy49BagwhkAw3EY+p+hp1udz+ku+jczEBrcM=
Subject key identifier: 1F:69:94:76:75:51:D4:4E:8D:3E:FA:92:3F:FB:90:17:FC:EB:D0:2A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H2mUdnVR1E6NPvqSP_uQF_zr0Co.roa
Signing time: Sat 11 May 2024 12:24:08 +0000
ROA not before: Sat 11 May 2024 12:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21683 (0x54b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 12:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F6994767551D44E8D3EFA923FFB9017FCEBD02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:1d:4a:ec:15:74:b5:a4:d3:97:97:95:a6:
a4:61:1b:20:a5:de:b2:95:0c:88:24:5c:92:1f:59:
cb:52:cd:f7:07:ba:4e:9b:a4:df:8e:fe:80:9e:d7:
15:8c:88:37:72:3e:d8:09:c6:e1:02:77:58:85:a8:
b8:d2:5d:f2:f0:6c:23:a0:20:23:63:9f:5f:f1:07:
3d:39:1e:e7:3c:b4:c2:2d:df:76:06:db:15:50:16:
b2:e9:3f:f4:84:2b:31:67:cd:cb:de:f4:62:00:70:
14:27:b9:29:ce:c9:18:d6:2b:d2:82:b3:1f:14:72:
f8:dd:fb:ca:43:05:04:41:87:22:84:cf:56:69:95:
ef:52:85:54:93:b6:eb:2e:73:f4:cb:d0:3d:89:06:
01:a6:25:ea:8b:b9:c7:1e:b3:a4:7d:ee:09:69:db:
2d:6e:1f:e5:c2:2c:db:94:96:1c:32:60:a1:30:6b:
b2:3f:1e:5c:c7:04:ee:b7:fc:b6:d4:b5:8f:7a:c4:
7e:6e:75:2c:0d:b3:88:9c:e9:ae:9e:41:8d:7e:e8:
2f:2a:3a:36:53:9f:38:f4:50:0d:9e:f8:ab:cc:d7:
30:60:aa:20:6a:12:63:f4:a8:5a:4d:a3:b3:22:4b:
02:6b:ce:ff:a1:61:78:22:b7:ab:71:ab:c2:52:19:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:94:76:75:51:D4:4E:8D:3E:FA:92:3F:FB:90:17:FC:EB:D0:2A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H2mUdnVR1E6NPvqSP_uQF_zr0Co.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:0b:d8:f5:7b:51:ba:26:cd:27:ab:55:b9:c7:27:ca:7a:61:
ad:4c:15:e8:d8:b4:6f:ab:c7:5a:e7:04:69:a7:c4:83:e9:1a:
a9:35:de:6b:8f:d8:fb:41:4d:08:5f:4e:2e:a2:57:fc:d1:c8:
13:18:3d:74:b8:0e:55:09:fc:0a:47:5c:5a:ad:9d:01:39:a0:
e0:b4:d1:5c:bd:e9:29:90:2f:eb:2a:9a:a3:89:be:4f:1a:6d:
88:31:0a:80:57:aa:df:64:f2:1c:94:7e:e8:34:98:d1:67:51:
52:65:93:89:fb:00:3a:af:6b:6f:ee:89:7c:0f:22:93:1f:a0:
76:4e:62:29:a7:79:90:69:c3:7a:59:11:30:10:b3:3c:4d:4a:
ef:87:d4:07:bb:8c:98:76:72:82:cc:ee:fe:ca:46:83:38:ef:
a1:46:fd:dc:90:dd:e2:ea:59:47:53:40:fa:f3:e5:31:cd:a0:
c3:8f:a0:6b:a7:c5:c6:c0:88:a8:dd:83:3f:a3:7b:ce:ea:86:
f9:78:27:1f:97:62:cf:e7:d5:89:4d:cc:8d:77:2e:3c:1d:e2:
b0:05:20:8a:b6:eb:09:7d:43:54:de:ee:60:57:b4:f6:f5:c8:
f2:a2:67:ff:c2:bc:59:f6:7e:04:ca:c3:a2:7f:31:8a:44:3e:
1b:69:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:16 2024 by rpki-client on console-fra.rpki-client.org