Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PJAYWgQ6uqqa0U7hzCaCcM7t7xI.roa
File: PJAYWgQ6uqqa0U7hzCaCcM7t7xI.roa (raw, json)
Hash identifier: M408lsF4utdgoz8IzbRBKwbuB5Q00TwxiSA22ezO1uU=
Subject key identifier: 3C:90:18:5A:04:3A:BA:AA:9A:D1:4E:E1:CC:26:82:70:CE:ED:EF:12
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36F3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PJAYWgQ6uqqa0U7hzCaCcM7t7xI.roa
Signing time: Mon 01 Apr 2024 20:22:15 +0000
ROA not before: Mon 01 Apr 2024 20:22:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14067 (0x36f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 20:22:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3C90185A043ABAAA9AD14EE1CC268270CEEDEF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:c7:18:b2:80:c5:63:80:58:6b:0a:2c:88:
74:65:08:fe:1b:be:a5:7a:cb:60:73:cb:d2:9c:60:
4c:c9:93:91:3e:0b:73:2f:80:a4:af:a3:b8:16:50:
1b:72:d1:8a:12:b8:60:92:cd:28:7b:4f:54:3a:e5:
63:53:fb:ff:5b:75:64:39:33:e6:70:84:30:29:b5:
15:0f:ee:d1:98:cd:97:59:e1:7b:81:19:1b:bf:c0:
bc:92:8d:56:ad:81:95:50:5b:77:1b:6c:11:5f:2b:
36:e4:89:55:32:20:19:69:22:24:e7:98:d2:ef:31:
f3:60:db:7f:b1:09:02:42:5b:e0:ba:6d:f4:6e:87:
02:31:33:87:6e:0b:c1:14:5d:b6:a9:fb:4a:c0:ad:
e7:a6:f6:95:43:45:00:e5:aa:6f:82:f9:da:89:94:
4e:8f:8d:c1:10:79:94:21:4f:a3:8a:03:74:10:d7:
7d:54:8a:18:bc:31:be:96:af:07:15:dd:03:27:c9:
22:31:36:75:07:8d:cd:33:da:9d:cf:39:45:d7:49:
31:91:8f:f3:e7:e2:2b:75:53:4a:88:71:93:75:75:
0b:f1:69:7c:d2:26:36:98:62:3e:cd:64:f6:87:93:
8f:49:97:99:1e:da:3f:88:c2:8e:bd:52:b5:7f:62:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:18:5A:04:3A:BA:AA:9A:D1:4E:E1:CC:26:82:70:CE:ED:EF:12
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PJAYWgQ6uqqa0U7hzCaCcM7t7xI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
75:31:d4:a2:7b:1f:21:6d:a1:f6:8e:f3:34:80:a4:88:f6:9f:
71:65:3f:7f:d2:b6:6f:4a:65:3d:39:26:5b:ab:16:27:a3:05:
bd:70:78:e8:02:02:78:b4:5a:10:64:53:ae:15:ba:c0:3f:1a:
4b:c8:e7:f3:ac:f3:d8:a8:ce:87:21:54:64:f9:a1:a9:75:80:
0e:b7:24:32:a5:0c:16:70:14:e9:9c:01:08:de:b0:38:55:33:
f8:3f:6e:ff:d6:c2:49:49:f2:5b:15:78:47:04:58:14:78:22:
a9:af:14:bd:3f:9a:6b:5c:5c:b5:75:e2:19:d3:12:33:a9:4c:
0f:76:1a:40:58:19:4a:1d:4d:72:4d:dd:17:67:5e:85:fd:3e:
20:49:86:e0:07:1a:b8:a9:a6:63:d6:8b:1d:8f:9c:27:1a:4d:
79:1a:7b:89:74:76:17:32:a8:93:10:a1:ff:b5:0a:69:b3:ae:
55:04:c7:8b:32:2f:5a:29:2b:17:20:21:22:c4:d5:ca:78:36:
29:72:67:17:48:6e:f2:ca:e5:2b:37:80:9e:4e:d4:c5:ad:53:
2d:00:24:53:b5:ff:42:b1:a3:3b:0c:e8:e4:02:9f:6d:58:5e:
08:9a:b8:4e:43:0b:e0:6a:a2:7d:93:2f:c6:db:00:8c:73:8d:
61:3e:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:39 2024 by rpki-client on console-ams.rpki-client.org