Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LA1--Wl9fhr0e7CiM7CJvfnzfO0.roa
File: LA1--Wl9fhr0e7CiM7CJvfnzfO0.roa (raw, json)
Hash identifier: rbXKCPx+U8U2qZ2Twe4vqJwWpxX8cyFlPfzG1g1Rkjo=
Subject key identifier: 2C:0D:7E:F9:69:7D:7E:1A:F4:7B:B0:A2:33:B0:89:BD:F9:F3:7C:ED
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 341F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LA1--Wl9fhr0e7CiM7CJvfnzfO0.roa
Signing time: Fri 29 Mar 2024 01:52:05 +0000
ROA not before: Fri 29 Mar 2024 01:52:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13343 (0x341f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 01:52:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2C0D7EF9697D7E1AF47BB0A233B089BDF9F37CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:f1:a6:96:61:a2:84:5b:a4:f8:b8:1c:89:
4c:a7:c7:da:27:0d:ca:5f:91:6d:2a:25:a0:85:b4:
25:b6:b7:35:2b:b3:c4:e3:82:60:9b:f4:5d:ea:4e:
12:09:cc:9c:1b:30:65:ea:4c:2b:d4:2c:be:19:eb:
e4:4a:df:32:6b:ab:d6:f3:26:b8:f1:96:88:ae:19:
5c:b7:d9:5f:06:66:51:a3:7d:73:19:f1:73:42:1a:
e8:4c:26:0b:aa:a2:f9:e4:d5:d5:70:69:c6:34:a1:
f0:cc:5e:85:a6:92:53:d5:dc:c8:fb:00:25:69:e4:
7a:af:9d:35:2a:46:f1:2f:c6:31:35:33:02:93:fd:
75:da:46:8d:ca:bd:5d:99:7c:25:0c:58:8a:34:7e:
25:84:f0:e2:a5:7c:0e:e0:6a:35:7a:47:4a:a9:d6:
b5:87:4c:e3:95:01:8d:29:3a:cb:11:fb:2b:36:c7:
d9:a5:ae:34:d2:28:3d:0c:16:ec:b6:28:8a:50:21:
60:8d:f8:b7:d5:2e:a7:4d:61:c2:ba:39:d9:aa:ed:
17:21:e0:36:36:91:fd:b9:3d:25:2c:b4:b1:c3:5c:
d0:3a:df:42:3f:32:a4:97:c1:5e:93:e2:5f:de:67:
be:ab:44:8e:1c:44:2a:20:9e:76:28:87:a9:4f:6a:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0D:7E:F9:69:7D:7E:1A:F4:7B:B0:A2:33:B0:89:BD:F9:F3:7C:ED
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LA1--Wl9fhr0e7CiM7CJvfnzfO0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:ae:f2:99:a8:77:42:e6:a8:ef:a1:67:1c:e2:99:8e:14:16:
6e:fa:fa:c7:4b:36:8f:81:8d:b4:79:4a:37:93:bf:46:95:19:
50:df:8f:6e:8f:06:9f:09:02:ee:c7:87:46:3b:3c:b5:30:b8:
8e:98:b8:85:66:2b:2e:78:5e:61:34:41:ba:d5:84:d1:79:cc:
2b:09:3b:0a:98:5b:1e:b4:4a:9b:4d:b3:24:2c:55:70:3f:77:
57:18:5a:11:30:28:d0:c3:55:ca:2b:dd:5b:ae:4c:5f:0c:d9:
3b:af:b9:1d:06:1b:0d:07:15:bf:a8:21:43:5a:7f:03:f5:98:
c3:fc:bb:ff:14:d4:f2:a9:6a:39:8a:8a:76:dc:82:ec:dd:7b:
ea:8e:b0:bb:ca:0a:cd:3e:c3:48:86:c4:20:56:f6:b5:81:cd:
b1:1f:19:0d:6e:42:47:70:37:e2:d2:98:a7:ae:bc:8b:19:83:
da:00:18:30:68:03:85:03:9a:11:dd:92:09:b9:b1:04:5d:d5:
26:93:ff:98:91:e4:94:eb:7b:46:a2:04:b8:15:b8:8c:cb:42:
4d:e2:02:77:6b:e2:99:14:6a:2d:14:56:2a:05:0a:c8:b2:46:
13:d2:50:3e:88:cc:d7:e7:bb:c8:8d:df:9b:59:ef:18:f2:82:
ac:75:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org