Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NZHJzA6Vrg2wG4CgvZCqU2X1FkA.roa
File: NZHJzA6Vrg2wG4CgvZCqU2X1FkA.roa (raw, json)
Hash identifier: 9y1k0+SwIcXU26l/BnZjxciQsTBgMlJpYDmaWcOw4TI=
Subject key identifier: 35:91:C9:CC:0E:95:AE:0D:B0:1B:80:A0:BD:90:AA:53:65:F5:16:40
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F8F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NZHJzA6Vrg2wG4CgvZCqU2X1FkA.roa
Signing time: Sat 04 May 2024 15:54:01 +0000
ROA not before: Sat 04 May 2024 15:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20367 (0x4f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 15:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3591C9CC0E95AE0DB01B80A0BD90AA5365F51640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:d2:60:60:fc:10:ec:d2:1b:d1:70:84:75:
eb:0d:58:82:82:c7:b3:5e:6c:28:11:84:03:e1:6f:
42:22:cb:77:1a:7c:7f:36:d0:e2:f6:87:5b:0c:5b:
be:d1:f6:38:c8:e6:fc:35:77:48:0a:78:73:f0:8e:
c2:57:de:60:ee:e0:39:fa:a3:1d:ba:06:96:ca:60:
38:ed:a6:dc:f1:ed:0d:86:8e:a7:c4:e4:92:fe:2f:
8c:5c:e2:45:5c:d7:6f:59:1f:9f:a5:74:1b:6f:36:
f8:ca:81:a8:4b:b1:72:94:f3:f7:7f:55:9b:9b:f7:
c5:03:44:55:bb:0c:a5:7c:cb:1a:7c:73:82:42:ae:
af:b7:97:a0:bd:4d:7c:dc:eb:fa:98:62:18:48:0f:
e1:a6:0b:6c:7b:5e:64:db:f0:8e:c3:bc:16:8f:e0:
5d:a6:d5:93:09:c7:9e:6a:26:e7:35:7c:bb:86:b6:
34:00:80:31:b0:5b:02:47:86:a5:8b:91:fd:3f:fe:
ae:24:fc:bd:d7:07:8d:c7:17:fa:d0:44:9e:2c:c9:
fe:55:ac:b9:81:0d:3a:cd:ca:8c:5b:68:dd:ac:fb:
df:7f:40:f8:86:56:1e:15:bf:91:bd:39:e6:d5:d3:
69:99:52:c4:02:ce:dc:3d:5c:9d:a6:66:79:5d:9a:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:C9:CC:0E:95:AE:0D:B0:1B:80:A0:BD:90:AA:53:65:F5:16:40
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NZHJzA6Vrg2wG4CgvZCqU2X1FkA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:71:2b:ea:f7:d7:8b:4f:37:ea:d3:cb:2a:d3:84:4f:c0:82:
64:dc:43:d0:19:cd:68:26:1f:bb:d3:6f:ad:fb:b4:ab:58:f6:
2a:ac:d5:00:85:3b:c9:70:a0:cb:74:7d:c9:4c:21:fe:8a:db:
2c:31:7a:11:63:81:d4:eb:2e:55:3a:1a:4b:39:f5:3e:51:ee:
a6:84:96:c5:01:6f:2a:a7:a5:b0:51:ae:1d:62:72:6c:7e:be:
11:fe:51:a3:04:05:e2:5c:23:66:f4:64:bc:8d:73:ca:f3:10:
bb:33:78:5c:06:3e:90:c0:08:c7:ac:56:03:4f:25:62:7e:db:
7a:a5:f0:05:a7:38:d5:f5:2b:13:a4:25:a3:48:57:99:91:f0:
c1:41:70:e9:38:a2:95:1e:cd:17:b1:8e:fb:28:d6:9a:36:b9:
94:9b:bf:a0:29:e7:f7:82:f9:52:49:4b:ef:af:6c:a8:ac:00:
04:c7:e8:03:d5:27:a7:a0:d7:cc:13:8d:df:60:be:18:5b:82:
59:5b:04:29:93:7d:b7:d8:cf:e0:09:36:3e:ed:e7:df:6e:62:
60:81:9e:d6:72:54:3c:40:00:2b:9b:65:74:a1:b2:9b:22:b3:
a0:5d:9e:68:d3:6c:e2:9d:cc:9a:62:e0:56:6b:d1:6e:83:7b:
93:dc:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:35 2024 by rpki-client on console-ams.rpki-client.org