Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/L7tXVcwmyIbjh7BPKkD4DutR4Ns.roa
File: L7tXVcwmyIbjh7BPKkD4DutR4Ns.roa (raw, json)
Hash identifier: MkcXSdGr4c7HR/Bv5hOYdKEG9MKgoPSuiZfwSll+Jsk=
Subject key identifier: 2F:BB:57:55:CC:26:C8:86:E3:87:B0:4F:2A:40:F8:0E:EB:51:E0:DB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3513
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L7tXVcwmyIbjh7BPKkD4DutR4Ns.roa
Signing time: Sat 30 Mar 2024 08:22:17 +0000
ROA not before: Sat 30 Mar 2024 08:22:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13587 (0x3513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 08:22:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2FBB5755CC26C886E387B04F2A40F80EEB51E0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:98:0d:21:11:d6:5b:95:db:92:30:5d:34:
34:ad:67:de:88:0c:22:a4:7c:cb:47:5c:a6:4d:44:
04:7f:6b:7c:0d:34:e5:a5:1a:65:97:cb:ec:36:93:
60:4c:8c:dc:43:08:c4:2e:5e:ed:db:6e:8a:63:92:
92:a1:3d:08:56:22:e0:a6:58:1d:61:61:fd:dd:6b:
42:05:ba:6d:9e:76:bd:8e:10:9a:df:d7:78:ca:40:
b6:c5:fc:2e:2a:a0:69:df:1c:3d:61:7a:f1:74:16:
7c:8e:52:c7:5e:25:43:06:cd:95:8e:3a:71:20:28:
56:07:f1:7a:5c:46:15:56:26:55:8a:8c:dc:f5:8e:
f3:59:cd:fd:67:18:72:5e:cc:e9:a6:d0:18:8a:40:
cb:c8:c3:60:a8:bb:0b:7c:bb:31:a3:aa:36:09:b5:
f8:6b:d3:01:aa:b2:c1:b6:d7:a1:59:6a:48:70:d4:
0c:68:94:48:f4:aa:8c:30:12:b7:80:b5:ab:c8:7b:
92:28:c8:59:bc:37:12:ee:aa:66:89:66:f2:20:49:
bb:a3:83:6d:c0:79:cf:af:f8:5e:0b:e8:d7:f1:4e:
4f:16:a7:06:a3:7c:2e:bf:9e:9b:71:41:59:96:dd:
e9:6a:4a:7d:3a:e1:9c:d8:60:b4:c9:54:52:12:c0:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:57:55:CC:26:C8:86:E3:87:B0:4F:2A:40:F8:0E:EB:51:E0:DB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L7tXVcwmyIbjh7BPKkD4DutR4Ns.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:4d:45:03:1c:ed:5d:b2:35:21:d6:97:36:5a:c8:2d:1f:7e:
ea:5e:69:26:c4:07:97:3b:f0:48:3c:24:ec:fc:00:92:e2:df:
4e:ff:ff:db:d1:20:17:e0:54:6d:2b:7a:92:be:08:8d:64:39:
cb:48:cf:00:2e:96:ec:61:67:d9:bd:d8:45:3e:2c:2e:ec:bd:
1d:5e:73:63:a5:20:16:9f:47:95:30:8d:92:19:c9:64:2b:bc:
22:a1:5b:be:be:f7:c1:e3:c5:82:46:ce:dc:d3:d4:a4:44:82:
1a:fe:d9:31:5e:2f:b1:bf:80:f0:98:ca:4d:5b:80:f5:7d:a5:
a5:cb:47:98:81:fa:c5:da:0f:71:f7:db:61:b6:bd:90:69:e1:
9a:e8:74:4e:11:1d:cd:87:10:5e:b1:e0:a9:03:b8:cf:00:14:
df:e6:a6:7c:bb:69:19:99:53:e7:f9:62:64:fb:7b:92:b0:45:
12:ad:40:42:69:5a:27:20:14:bd:c7:04:fe:6c:f6:18:bc:aa:
7a:43:21:37:2d:15:6e:5b:6c:10:37:9a:5e:7a:46:56:6b:74:
60:88:0f:64:ad:85:f4:5f:87:90:d1:bf:2b:a7:96:62:85:81:
f9:f9:f3:d2:e9:e6:7a:9c:15:d0:64:7a:d0:06:3a:49:76:e6:
89:d2:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org