Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PBWKBoiypCn8WPHTwXxRaXsz8nI.roa
File: PBWKBoiypCn8WPHTwXxRaXsz8nI.roa (raw, json)
Hash identifier: rKm0ngrvD87hTZHDOTpvNO1ZzgxXa/9RK7x8ebUgYY8=
Subject key identifier: 3C:15:8A:06:88:B2:A4:29:FC:58:F1:D3:C1:7C:51:69:7B:33:F2:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PBWKBoiypCn8WPHTwXxRaXsz8nI.roa
Signing time: Sun 12 May 2024 19:24:06 +0000
ROA not before: Sun 12 May 2024 19:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21931 (0x55ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 19:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3C158A0688B2A429FC58F1D3C17C51697B33F272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:4a:58:bf:24:6f:4a:9e:62:a3:69:b9:6f:
a0:fa:a5:7e:87:89:fb:4b:71:59:e6:9c:0a:83:e5:
ca:71:76:fa:be:b1:81:bd:c2:4a:c2:de:f9:cb:25:
47:82:c0:98:9d:62:d1:ba:23:cc:de:9e:89:a4:f7:
8f:2c:ac:4a:09:91:56:15:68:42:4f:7a:59:37:e5:
c3:3f:64:c3:c3:ad:4c:72:d8:1a:83:4e:f6:67:00:
93:e0:7c:38:1b:71:77:51:6b:f5:ab:80:d2:36:38:
b1:a1:be:98:28:7f:cb:bf:80:17:8c:9f:5b:42:20:
e3:39:a0:b8:6c:c7:00:df:a2:57:3a:bd:f7:5b:13:
03:aa:a0:6c:e7:68:c2:c7:d1:52:fd:f3:dd:10:8b:
68:17:ac:36:b2:5c:46:5e:f5:ad:da:ba:2e:29:1c:
04:9e:fa:9e:0d:52:c4:22:de:d1:e8:fc:2a:49:4f:
08:be:cd:84:9a:a9:b6:96:a3:00:39:bd:26:27:ea:
1e:d3:1a:66:56:ab:6a:01:95:88:42:0a:c5:f8:cc:
a7:6a:11:0a:0a:1d:09:20:db:ac:4d:82:a1:61:b5:
1c:6f:67:3e:86:7d:90:68:d4:ab:75:75:03:82:6e:
8a:3a:f5:88:e8:77:0c:05:43:86:53:0d:7e:74:36:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:8A:06:88:B2:A4:29:FC:58:F1:D3:C1:7C:51:69:7B:33:F2:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PBWKBoiypCn8WPHTwXxRaXsz8nI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:e4:c3:bf:ea:37:ee:12:94:fe:2c:a3:a1:35:34:73:bd:e2:
05:74:9a:d1:21:43:11:27:df:a5:ef:00:46:da:10:03:e3:43:
da:96:35:eb:6e:c8:9b:d9:f8:c9:60:73:8b:ef:cf:07:5b:0b:
29:f6:2f:5d:8d:29:ff:1c:b9:36:65:c0:bb:6e:ba:48:c4:45:
12:86:f7:d5:57:7c:20:d7:12:df:14:ae:5c:17:1d:46:4d:cc:
3c:7f:90:0d:b5:9a:3f:bd:e2:92:1f:6b:1a:fe:58:47:5a:3c:
f6:b3:2f:b6:2d:a3:be:94:62:d8:ef:d0:be:89:77:78:d3:b9:
91:a6:3d:15:7d:e5:65:58:5b:ba:87:aa:b0:49:fc:6b:2a:d6:
cd:db:3d:b2:1d:3c:b2:fb:07:5d:06:1e:9b:a8:5a:1c:19:5f:
33:99:71:ff:41:b2:24:63:19:f1:22:06:cd:a9:47:b9:b3:6d:
52:97:c4:cd:d2:39:f8:47:79:7b:f9:3a:3c:85:56:0f:31:e7:
f2:84:f3:e8:b1:de:b4:62:87:5d:16:90:28:93:53:25:3a:bb:
ea:fc:97:6d:f2:26:7d:cd:95:2f:3a:4a:4e:27:d5:52:25:b2:
4f:cc:13:91:cb:a6:df:d4:8a:cd:ad:e7:ae:d6:50:4a:0a:42:
3d:b0:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:23 2024 by rpki-client on console-fra.rpki-client.org