Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/M9_9hyaUvlk9146z7F5ZDY01wqc.roa
File: M9_9hyaUvlk9146z7F5ZDY01wqc.roa (raw, json)
Hash identifier: gIDY0LA6k0BUIWr7jjlS8Yl2yYikDL3xFV4N+jkoBlI=
Subject key identifier: 33:DF:FD:87:26:94:BE:59:3D:D7:8E:B3:EC:5E:59:0D:8D:35:C2:A7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M9_9hyaUvlk9146z7F5ZDY01wqc.roa
Signing time: Fri 19 Apr 2024 05:53:04 +0000
ROA not before: Fri 19 Apr 2024 05:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17407 (0x43ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 05:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=33DFFD872694BE593DD78EB3EC5E590D8D35C2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:e0:ca:83:d7:1c:10:84:f8:0c:20:f8:3b:
e8:1f:58:c4:2f:87:71:f8:a3:4e:35:d7:c1:23:76:
7b:7f:a1:38:d5:f7:a9:e3:0d:17:8b:0b:9b:ed:e4:
b3:f3:07:16:71:ca:61:30:bd:7f:59:00:36:4a:31:
2d:36:2b:89:cf:38:98:53:50:26:b0:17:29:85:8c:
14:05:4b:07:41:0d:4e:0c:8f:f2:85:97:0e:6c:b5:
9a:0b:9e:0c:df:5e:70:ff:03:3b:b5:88:ee:14:50:
25:8b:97:16:41:0e:7b:07:16:51:ea:d4:6c:40:80:
db:8d:18:c8:5b:dc:a3:6a:32:07:3c:3a:c9:94:95:
4e:41:e3:b4:6c:6c:48:69:dd:2f:18:26:2f:4b:8a:
ed:7c:11:23:86:41:c9:59:1b:a1:01:40:90:42:f0:
41:e9:c9:a2:27:ff:ab:09:eb:74:dd:e4:49:87:72:
9a:32:06:b2:7e:79:94:52:f0:c8:54:2d:1c:13:8e:
bb:0d:d5:50:fa:ef:d6:a1:dd:02:a1:1a:ab:a5:fc:
6f:e4:2c:93:8a:2c:b7:76:e7:8a:4d:dc:b2:ef:ea:
6b:9d:b0:79:cb:6c:44:c0:aa:32:b1:c0:23:43:b6:
7c:fc:38:74:21:02:c4:40:10:ff:6c:7f:c1:72:7e:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DF:FD:87:26:94:BE:59:3D:D7:8E:B3:EC:5E:59:0D:8D:35:C2:A7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/M9_9hyaUvlk9146z7F5ZDY01wqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
62:22:61:58:9e:3b:bf:f9:91:d4:16:6f:a9:95:ed:67:c1:81:
da:0a:c4:00:cc:18:a7:fa:b3:c8:8a:29:39:a4:19:f4:69:38:
6b:0b:80:5e:eb:a9:40:d2:e7:9e:0f:2c:c6:95:01:84:7d:bd:
16:f1:46:51:87:50:d8:03:2a:df:b3:14:2e:0b:27:85:ae:cd:
21:7c:34:b0:5a:3c:34:39:31:8b:28:ef:d3:0f:0b:6a:99:ed:
e1:0e:ba:46:dc:aa:95:ef:59:f4:c9:db:9a:8a:e6:ef:5e:f5:
fe:b1:3f:d2:c1:ed:79:9e:bf:45:5f:bb:0d:c2:ac:b3:8e:9c:
4d:38:3d:b7:fb:ea:a9:fc:de:6f:53:49:1b:63:3f:58:53:a2:
45:4b:1c:23:6c:75:5e:3e:01:6c:e3:6d:aa:08:f6:28:1b:12:
7c:4a:02:56:d5:85:49:56:97:d0:45:01:0c:64:00:49:cf:86:
91:26:3b:af:2a:c1:05:3e:a3:1a:27:48:a6:99:7e:85:ee:3c:
72:bb:0c:c5:52:c0:09:df:9e:81:9f:5b:ba:bb:0d:ec:8b:bf:
11:60:f8:5b:0b:38:cd:e1:11:3d:b8:f1:74:e7:83:d6:9b:87:
af:5c:13:17:04:13:7f:73:9e:b8:d2:eb:00:8a:79:fa:52:f3:
a8:81:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:20 2024 by rpki-client on console-fra.rpki-client.org