Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OzGlw1O93BBud2w2g7Xre1mJqjY.roa
File: OzGlw1O93BBud2w2g7Xre1mJqjY.roa (raw, json)
Hash identifier: MMdKhzJNane2OwlnEK8k8I2QHF1Nu9j8phM0eF8iH/c=
Subject key identifier: 3B:31:A5:C3:53:BD:DC:10:6E:77:6C:36:83:B5:EB:7B:59:89:AA:36
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OzGlw1O93BBud2w2g7Xre1mJqjY.roa
Signing time: Sun 14 Apr 2024 22:52:53 +0000
ROA not before: Sun 14 Apr 2024 22:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16583 (0x40c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 22:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B31A5C353BDDC106E776C3683B5EB7B5989AA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:c5:4c:9e:3c:b9:cf:0a:2b:50:98:73:cc:
9c:b7:1a:b9:a7:46:0d:0d:2b:03:fb:e4:3c:c5:98:
87:f7:65:50:18:6b:4e:e6:3a:c8:8c:a9:b5:c0:2a:
f1:47:39:62:74:e2:b7:d0:bd:a6:6d:31:44:71:b0:
c8:3b:71:ce:98:ae:fa:f7:46:88:68:b1:cf:8b:ab:
73:a6:de:e2:a1:39:b3:82:f2:35:71:26:c0:43:05:
b9:16:2d:2f:46:0d:dd:04:7a:5d:44:72:03:bc:80:
19:fa:a5:16:f3:1f:b7:22:35:8c:41:6e:87:ee:5f:
79:a9:70:38:27:72:39:76:a7:ad:f7:11:a7:26:10:
86:cc:dd:2a:77:b7:a1:47:8d:74:12:c9:f3:5a:8e:
7b:93:28:6b:89:82:cf:34:a3:60:d4:a9:67:51:31:
be:8b:da:3d:c2:57:a6:ec:d4:a6:fd:d6:46:97:76:
9f:d1:45:5e:80:55:74:60:5b:a6:3a:76:6f:b1:37:
6e:15:9a:f3:78:fb:02:50:2b:2f:38:e8:54:b9:01:
c6:db:b1:1c:f6:32:9d:02:9e:94:ef:35:94:57:6a:
17:b0:cd:d4:48:de:52:63:22:a5:e3:ea:71:a7:77:
ab:02:bc:8c:1c:ed:35:70:f7:e9:32:22:2a:83:54:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:A5:C3:53:BD:DC:10:6E:77:6C:36:83:B5:EB:7B:59:89:AA:36
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OzGlw1O93BBud2w2g7Xre1mJqjY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:7f:af:57:13:35:a1:fa:86:85:50:ae:df:bd:a7:1c:89:aa:
1e:40:94:f3:e3:0a:d8:56:5a:d9:e1:d0:8c:95:fd:54:66:f6:
c7:28:0b:f2:35:92:f0:50:4a:74:53:f6:e1:56:93:07:0e:73:
20:76:e7:17:a3:73:40:20:63:a7:b1:43:f9:f2:16:06:8a:38:
0a:77:dd:80:3e:b1:9c:13:c8:95:ab:54:ea:33:a7:02:3a:88:
7b:9a:36:2f:04:1f:29:a1:98:26:ac:71:07:20:0c:cd:68:11:
44:14:18:50:ec:eb:55:5a:11:b6:04:72:28:b7:18:c1:87:9c:
68:95:35:15:d0:5d:42:92:be:bf:57:b1:1a:fb:f8:b8:b0:0e:
83:63:4f:94:7f:34:78:63:40:95:33:68:d6:ac:56:50:5e:ca:
fb:01:01:8f:b2:a7:5d:49:a5:d1:5a:de:53:08:ad:5d:bc:80:
21:55:92:ba:b1:87:c9:32:6c:7f:55:2c:05:1d:db:bb:41:91:
d6:be:f9:9b:47:b5:5d:49:e1:20:9a:ea:6b:c8:70:44:bf:ea:
f5:15:55:d7:6a:ba:b2:af:7e:81:cf:bb:0f:95:af:f5:dd:ae:
7b:59:fa:89:54:8b:2b:de:66:a6:f0:76:80:e0:a4:02:df:08:
6d:5c:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:38 2024 by rpki-client on console-ams.rpki-client.org