Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/I6jF_6ZBpX5GI1C7OjS7cbglJLE.roa
File: I6jF_6ZBpX5GI1C7OjS7cbglJLE.roa (raw, json)
Hash identifier: rNlE5o07NBebooWiuJVvEOmgZkLe2CfhGodL9vktJkk=
Subject key identifier: 23:A8:C5:FF:A6:41:A5:7E:46:23:50:BB:3A:34:BB:71:B8:25:24:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4083
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I6jF_6ZBpX5GI1C7OjS7cbglJLE.roa
Signing time: Sun 14 Apr 2024 14:22:54 +0000
ROA not before: Sun 14 Apr 2024 14:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16515 (0x4083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 14:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=23A8C5FFA641A57E462350BB3A34BB71B82524B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:ac:75:31:0f:85:8f:a8:b5:99:f5:1d:da:
6c:7b:4d:03:11:10:6d:c1:60:87:2d:b5:8c:c2:12:
4c:2f:04:ad:b3:23:3c:dd:40:73:fe:55:7e:0a:a4:
b6:40:81:bf:05:0f:d3:d7:3b:2e:40:70:06:be:59:
60:e1:30:3c:ec:a9:23:94:1b:55:6e:81:ed:e5:79:
17:7e:eb:3b:f4:d1:ac:09:79:ab:82:98:27:3a:79:
02:69:fe:8d:1c:2c:c4:23:26:ad:6b:87:e5:6b:44:
fd:3a:6d:f1:0a:c2:c9:77:7e:87:73:8e:aa:1a:6b:
2e:b7:35:9c:33:c8:fa:1f:5c:87:66:d9:fe:9d:05:
56:3b:30:e0:cd:32:ec:c7:1c:28:f4:08:50:fe:f6:
74:c7:39:5b:59:85:ba:f5:40:6c:88:81:d6:8a:e8:
96:62:22:dc:05:3a:e7:8f:51:5f:63:76:78:06:6d:
b6:16:1a:80:ae:44:e6:2b:69:00:de:e2:79:53:05:
15:e6:8d:cd:34:35:55:81:f5:4f:7d:a5:88:e7:02:
c3:66:1d:ea:05:80:c3:c9:48:c7:f1:81:d8:34:3b:
9c:30:3b:a3:6c:d1:3c:c4:1a:fa:08:cf:d9:07:ce:
d0:45:ac:83:ae:ab:55:92:2c:1c:bc:7b:42:65:20:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:C5:FF:A6:41:A5:7E:46:23:50:BB:3A:34:BB:71:B8:25:24:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/I6jF_6ZBpX5GI1C7OjS7cbglJLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:79:fe:22:ea:e3:d7:99:50:b7:8b:94:3c:00:8c:ff:b1:51:
72:85:94:c9:c8:cb:f2:16:2e:68:13:f8:03:bc:b5:c6:ef:c1:
54:4e:9c:95:8e:09:c3:ea:8a:6f:81:b9:73:bf:d0:25:e5:3e:
23:78:de:40:a2:c4:ba:64:eb:b7:37:0b:8e:18:66:71:5c:3f:
f6:b2:c5:0f:a6:e4:aa:44:2b:5b:68:6c:dd:33:87:1b:1e:85:
b3:90:41:a6:97:7f:15:02:87:c3:06:6b:bc:15:e6:6a:12:c2:
2b:b0:ea:db:9c:12:1d:c9:ec:db:8b:49:dd:95:2b:12:8f:9c:
6d:cd:0f:35:ab:87:e8:87:ad:ad:22:e5:a4:5d:84:87:f9:a4:
8e:56:0c:9c:fa:f9:36:9d:80:fc:68:b4:8e:03:b2:cb:06:7f:
31:bf:ce:2e:a2:10:d3:3f:3c:26:ec:ae:c0:21:57:13:6c:ab:
40:49:ff:1e:d4:d0:f2:5c:6f:6a:e2:20:5a:12:4a:6f:42:a2:
58:aa:f0:24:f5:f9:ec:b0:ae:77:cd:a8:02:73:b2:5a:8b:d8:
88:94:a5:89:22:bf:1e:e5:a0:2d:07:93:c6:18:21:cd:c7:99:
51:04:68:20:d0:d0:6a:4d:47:f5:5c:da:6a:54:9a:d5:cf:c4:
fb:d4:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:29 2024 by rpki-client on console-ams.rpki-client.org