Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ISkQYAIJxAR-ZUw0yt39MqJD5eI.roa
File: ISkQYAIJxAR-ZUw0yt39MqJD5eI.roa (raw, json)
Hash identifier: rOLla46ObO5dkDzLOjhFUrabsRffsLoj35+gFM7qcVo=
Subject key identifier: 21:29:10:60:02:09:C4:04:7E:65:4C:34:CA:DD:FD:32:A2:43:E5:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B07
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ISkQYAIJxAR-ZUw0yt39MqJD5eI.roa
Signing time: Sun 28 Apr 2024 14:53:26 +0000
ROA not before: Sun 28 Apr 2024 14:53:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19207 (0x4b07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 14:53:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=212910600209C4047E654C34CADDFD32A243E5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:4b:fb:72:6a:48:7f:fd:8e:2c:6c:b5:df:
7a:43:ab:c9:bf:ea:b0:d1:e7:c9:e1:c9:d9:e8:a9:
c2:e7:a2:2b:a7:de:03:9c:e7:5e:85:ec:4e:a8:89:
cb:ea:58:89:4d:e1:e2:f8:6d:68:87:01:22:fd:60:
78:68:22:20:5b:57:f5:a7:74:0a:11:4b:75:5b:f1:
6d:21:46:d0:8b:d3:b0:a7:d9:a3:05:06:e0:ba:81:
1a:d2:54:7f:7d:fa:e8:51:53:70:34:b6:c3:42:71:
35:cc:14:62:d2:7c:c4:aa:f9:56:d8:96:88:d4:ad:
33:98:83:e0:9f:f9:b7:3e:a4:19:71:60:73:d1:e5:
f7:50:aa:3d:06:7f:a5:fc:19:52:e9:33:2b:ab:bc:
5d:38:5c:53:a2:58:4b:65:ac:98:60:43:33:0e:43:
3f:dd:06:e7:44:a3:5b:d6:fd:12:c2:10:da:eb:56:
95:8e:a8:cc:2f:8c:f5:e6:6e:6d:16:c2:62:e5:44:
7a:11:3b:38:4b:86:96:1c:1a:d9:80:2e:28:80:a7:
87:50:15:7b:31:27:7b:1b:22:90:eb:f0:6a:f2:48:
42:9a:7f:3b:8f:f1:c9:b0:36:47:9f:02:8e:7b:4b:
4f:f4:5b:ec:45:2f:ec:2d:dc:e7:75:1b:21:04:39:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:10:60:02:09:C4:04:7E:65:4C:34:CA:DD:FD:32:A2:43:E5:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ISkQYAIJxAR-ZUw0yt39MqJD5eI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:6b:54:72:c1:37:8f:fd:3a:39:53:a8:36:19:0e:c3:59:aa:
a7:ba:a3:74:c1:8d:2e:ec:92:b0:4f:66:dc:eb:5c:d7:74:43:
28:b5:c2:80:4f:a4:b6:c2:f7:31:75:21:fe:fe:ac:3d:3c:05:
56:d0:69:ef:0c:aa:be:af:26:06:a8:1c:73:a9:b4:95:14:f4:
71:ca:89:e7:5b:87:4c:67:90:64:08:43:7e:87:30:01:1f:7f:
97:28:b6:75:d1:10:e6:3a:4e:d7:c2:ac:c2:3a:a9:44:a3:2b:
d6:62:37:eb:5a:82:d8:fb:c7:8d:9a:cd:c9:ef:81:d3:9c:06:
45:ff:af:e1:00:27:c9:0c:c9:2f:0e:29:7e:46:02:94:6d:3a:
cb:fb:ac:a9:07:03:c5:ea:30:3a:59:39:ba:79:f8:65:97:7a:
71:41:3a:84:3a:f5:7b:33:85:d0:2e:00:e8:48:49:55:01:5c:
f1:98:91:b9:f4:69:7e:4a:88:0f:e2:0a:9e:19:83:09:f3:60:
0c:b6:94:69:2e:5f:1e:1c:50:42:ea:67:d1:20:0f:57:e5:1c:
76:3f:7c:49:e0:0c:0c:9b:2c:9a:b2:31:82:e3:1f:7f:d5:d4:
a4:fe:10:37:e3:40:84:f9:cb:14:9d:f2:b4:d9:54:dc:07:60:
d3:d7:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:17 2024 by rpki-client on console-fra.rpki-client.org