Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JsViBWXqnd8_7-vvlQkeF6ESBUo.roa
File: JsViBWXqnd8_7-vvlQkeF6ESBUo.roa (raw, json)
Hash identifier: g71t1AlYCfpFa3NF4ZcDOXIZT3Sndh2+kxyjvVSTVn0=
Subject key identifier: 26:C5:62:05:65:EA:9D:DF:3F:EF:EB:EF:95:09:1E:17:A1:12:05:4A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 507B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JsViBWXqnd8_7-vvlQkeF6ESBUo.roa
Signing time: Sun 05 May 2024 21:23:59 +0000
ROA not before: Sun 05 May 2024 21:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20603 (0x507b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 21:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26C5620565EA9DDF3FEFEBEF95091E17A112054A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:ab:b9:df:f2:36:d3:d6:c2:ec:f1:3a:e1:
e7:63:c9:f9:c6:c3:86:d6:c0:bb:ac:11:e6:e9:bd:
1a:30:1b:99:81:6e:5a:9a:b6:6d:b4:95:28:57:9d:
08:c8:55:39:58:63:c8:31:c1:94:7b:9f:48:70:9c:
f2:35:f8:2f:2a:04:23:4a:28:ad:0d:72:7a:fa:52:
a7:4c:ab:0a:a1:7b:d6:12:ad:f5:81:25:7f:17:44:
49:1c:f7:ac:6b:78:bc:2c:40:80:22:b8:d2:e8:88:
f0:f4:bb:c9:a6:bf:5d:30:3c:a8:30:90:5f:30:a7:
ee:1c:bc:0d:8f:44:41:4f:76:0e:b6:42:df:b4:c7:
a3:b5:14:5f:08:c2:8d:0b:31:46:97:5e:b9:df:ae:
d8:e8:3b:ba:7c:67:eb:0d:55:6c:1e:69:5d:8c:f0:
0f:73:9c:c5:5d:99:aa:1e:6b:a0:08:6c:89:09:e8:
4f:db:6a:72:c0:bf:2a:88:a4:6d:e0:5f:ed:d4:84:
38:40:9e:a5:e7:b0:af:93:9c:79:9c:de:a1:1d:30:
aa:95:64:76:3b:c2:bb:ae:ad:a3:9d:3d:a9:f5:a3:
c6:01:6a:f6:a0:11:64:cb:d6:e6:ff:35:e8:cd:fd:
42:f2:1b:23:96:3c:00:c0:e9:a6:66:4f:6a:4e:1b:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C5:62:05:65:EA:9D:DF:3F:EF:EB:EF:95:09:1E:17:A1:12:05:4A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JsViBWXqnd8_7-vvlQkeF6ESBUo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:4b:ad:fd:14:dc:e5:cc:86:61:b0:a2:24:98:45:e3:aa:9c:
32:29:c1:39:d6:65:8c:c2:bd:ab:4e:52:03:a8:a6:2f:c1:31:
e4:05:71:c6:fc:01:b8:6a:28:f9:5f:c4:27:0e:fb:fe:ec:90:
68:99:68:91:fc:ee:93:91:b4:b2:5e:02:f3:81:72:39:ff:aa:
71:69:f8:41:1f:0b:2c:02:13:22:06:48:60:b6:09:a9:4d:f6:
65:e5:64:58:47:4d:09:0a:cc:a5:58:da:e5:20:46:4d:1b:91:
f2:a0:0c:94:5b:bb:6f:5a:da:73:30:5a:e7:db:90:32:7d:58:
87:8c:85:2f:37:bf:20:df:1f:25:6d:75:6b:f4:f1:05:68:85:
25:cf:37:3a:cc:76:c9:c3:d3:e7:15:09:e7:ca:94:0e:c7:c1:
df:d1:11:d5:da:42:ea:19:2f:35:10:41:50:8d:1b:60:a6:a6:
fa:fa:06:0a:d1:82:26:f6:8d:f7:b9:8f:57:cc:63:82:67:1e:
de:8b:20:a0:62:c4:36:d4:8a:7f:8e:5c:6b:91:50:46:7c:5b:
fb:7c:cc:f6:1d:2a:27:cb:27:6e:bb:af:66:98:4b:05:89:0e:
bd:2b:09:97:3f:46:2a:4a:4f:4f:1c:83:a0:12:de:99:7b:db:
d9:99:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org