Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ps2Eon_mcc641AbiMHDCAJ9b270.roa
File: Ps2Eon_mcc641AbiMHDCAJ9b270.roa (raw, json)
Hash identifier: 7xO06GyZh8NWrVpR/iLQevEkAmJyzL0FK+OG4TmNZHw=
Subject key identifier: 3E:CD:84:A2:7F:E6:71:CE:B8:D4:06:E2:30:70:C2:00:9F:5B:DB:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A8B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ps2Eon_mcc641AbiMHDCAJ9b270.roa
Signing time: Sat 06 Apr 2024 15:22:30 +0000
ROA not before: Sat 06 Apr 2024 15:22:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14987 (0x3a8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 15:22:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3ECD84A27FE671CEB8D406E23070C2009F5BDBBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:0d:7b:4b:7c:d5:76:a5:72:3a:58:e1:ba:
21:a4:70:87:31:3a:71:59:35:60:1a:e4:41:12:f3:
97:e7:4e:0b:05:80:4c:19:8a:bf:7e:44:b6:8e:b3:
2c:18:fc:88:5d:48:f3:d9:57:5a:59:9e:5b:b8:61:
d2:26:54:7e:61:e3:3d:c8:4a:b3:ca:23:37:cb:3f:
ca:89:0e:ef:b5:6a:84:3c:90:28:8c:9b:d9:b8:50:
f2:f4:c8:0b:f9:c7:8f:78:e3:a4:1b:b7:f2:49:34:
72:2a:a7:25:7a:ba:02:0a:dd:53:4d:44:8d:31:ef:
16:91:8b:15:2b:42:a5:9d:27:dd:6f:3a:17:df:60:
d2:35:5b:61:32:09:68:05:98:37:1b:f3:c4:70:b6:
6b:d7:a2:0e:80:7d:cc:36:56:a6:25:95:1b:7a:6c:
43:bc:76:1f:97:5f:af:bf:16:8a:de:73:2b:73:13:
e7:c1:5e:2b:ef:81:e5:5f:96:58:e4:04:96:a7:1a:
bc:7c:3b:04:cf:5d:74:61:b1:63:39:7d:90:c7:ac:
5e:60:a6:ed:ed:e7:cb:4d:f1:f9:72:3f:61:04:18:
11:6a:76:ae:fd:f6:84:40:6e:00:2c:23:b3:e1:72:
ae:30:0e:80:7f:3b:c5:58:c0:d4:67:f7:2b:38:59:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:84:A2:7F:E6:71:CE:B8:D4:06:E2:30:70:C2:00:9F:5B:DB:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ps2Eon_mcc641AbiMHDCAJ9b270.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:37:20:9c:58:a9:6e:ef:f8:b2:70:5e:30:10:82:ee:7c:26:
0f:24:a5:e1:8a:a3:1a:40:02:b1:3e:e7:1f:f2:04:e3:b2:d0:
e7:55:a7:e0:fe:ad:75:07:80:3c:18:28:9e:e6:fe:c5:43:cf:
1e:0e:91:f7:c5:ca:7e:bf:08:5a:98:eb:b8:98:29:98:ee:15:
b8:7b:5c:75:65:d7:9f:d3:ac:c0:99:54:17:8a:e3:4c:03:c4:
1a:41:b1:79:28:4e:20:dd:9a:36:0a:bb:83:16:70:6b:07:9e:
77:cb:b0:2c:01:84:3d:37:40:25:58:e4:c7:79:79:b0:bd:40:
4f:dc:49:5e:18:ea:50:61:51:50:0c:62:5d:51:8a:f2:55:d8:
f8:2c:a7:86:ab:82:1a:4f:9d:41:4d:a0:b3:77:ed:8c:12:b7:
b0:96:f5:b5:d2:ee:d3:0f:d7:2c:9d:df:4b:ae:a5:f0:bd:0c:
29:0e:e1:df:d6:81:0d:fb:0e:8d:44:5c:30:8d:4b:d9:97:c7:
ed:c9:e6:8b:2b:50:39:fe:bd:d4:f7:50:1a:8b:44:8f:f8:31:
28:46:d7:53:b7:c5:3d:52:7f:2c:0f:c4:cc:7d:1e:f0:36:ba:
49:15:e9:29:ba:73:68:a1:2a:19:d3:8f:45:d5:5b:55:99:f7:
ba:77:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org