Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IejSyeaAQBnQDa8_rmtOhO_Ty84.roa
File: IejSyeaAQBnQDa8_rmtOhO_Ty84.roa (raw, json)
Hash identifier: clgyC/1TnG/a8vrsXl0VrzGraCyG2gJEpcU0u5L5YtE=
Subject key identifier: 21:E8:D2:C9:E6:80:40:19:D0:0D:AF:3F:AE:6B:4E:84:EF:D3:CB:CE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40D3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IejSyeaAQBnQDa8_rmtOhO_Ty84.roa
Signing time: Mon 15 Apr 2024 00:22:53 +0000
ROA not before: Mon 15 Apr 2024 00:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16595 (0x40d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 00:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=21E8D2C9E6804019D00DAF3FAE6B4E84EFD3CBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:7c:d7:cc:65:84:73:c7:00:07:73:ff:5e:
be:38:59:58:76:ca:cd:e2:28:0d:7f:8d:e4:88:24:
4a:ad:77:3f:3c:f3:06:6d:1b:1f:ca:e9:d1:05:18:
33:76:5e:68:81:18:86:df:92:9c:61:e7:cb:d7:7f:
da:3d:6b:d7:67:42:17:83:1f:d0:a9:2e:23:ee:78:
de:aa:d1:1d:79:06:0b:70:ae:8f:96:7e:3e:a5:ba:
85:dc:ab:7a:09:bb:1e:34:c1:cb:7d:0d:2e:83:ee:
5b:d4:5c:c4:f9:a7:a3:63:d7:56:7a:9a:66:6d:b3:
25:79:36:76:1a:02:06:7b:32:39:3f:a0:e2:f2:c7:
36:96:4c:22:12:4f:3f:65:de:14:b1:7e:c7:30:ec:
a5:78:e8:97:2f:74:95:d2:b5:7c:bc:06:d5:3c:6d:
54:ad:ea:79:e1:6c:41:a0:2a:0c:31:73:15:d4:e8:
76:5c:5d:ad:4e:ec:95:36:be:21:fa:95:68:52:33:
17:05:ad:74:f1:1f:d0:0d:36:61:a0:9e:da:a7:e5:
7e:a1:fc:b2:89:41:d4:14:f0:14:b3:71:fa:9b:30:
c8:f8:02:5b:0f:c3:c4:b8:ef:50:2e:58:24:b9:fd:
7c:cd:2d:84:11:24:18:d1:38:85:19:43:fa:ec:74:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:D2:C9:E6:80:40:19:D0:0D:AF:3F:AE:6B:4E:84:EF:D3:CB:CE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IejSyeaAQBnQDa8_rmtOhO_Ty84.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
80:18:cd:44:ff:a6:74:59:75:ae:54:93:3d:56:a4:10:ae:52:
d1:ac:85:c8:14:17:e6:66:90:7d:b4:dc:8c:7a:00:92:6c:04:
1c:4f:3f:25:9c:fc:0e:d1:20:69:95:23:12:df:04:ec:34:cc:
03:da:93:5a:15:45:83:59:0c:b5:c6:38:94:83:69:b6:8a:03:
8d:f7:4d:1a:30:c9:45:78:74:c7:d1:5a:52:fe:ca:ce:b3:1d:
dd:cc:0d:c6:2f:7d:65:c5:46:88:8d:a8:b0:43:a5:60:00:c6:
d1:f4:c9:f0:a9:a3:35:fe:a6:c9:4c:04:b2:5c:a5:3b:7c:bd:
f1:13:6d:4c:93:0e:f4:f9:21:00:3f:2c:46:44:51:0f:65:68:
84:99:d5:53:34:0f:56:b4:76:e5:a1:53:c8:39:8b:d9:c7:b6:
99:f2:f5:ea:c6:46:0f:03:4f:91:1c:38:34:1c:17:36:a2:88:
3f:ed:76:a3:a6:b6:cf:13:c9:ae:84:79:87:40:73:56:90:45:
d3:8e:a5:52:5e:72:78:7a:5e:7c:8f:88:dc:f3:62:d6:07:9d:
bd:0d:b6:00:e5:29:3d:21:be:37:bc:c1:cd:38:6c:f7:80:20:
01:5e:70:f1:f0:72:6b:f2:93:76:26:db:c4:5f:79:13:80:02:
08:56:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:30 2024 by rpki-client on console-ams.rpki-client.org