Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Pvin2wLSdKOuOmA-4tdt7NwMj_M.roa
File: Pvin2wLSdKOuOmA-4tdt7NwMj_M.roa (raw, json)
Hash identifier: ikVFprq5kyrTcx7HWJnb6vI1+oFMMEw2Xeg9K2HEvTA=
Subject key identifier: 3E:F8:A7:DB:02:D2:74:A3:AE:3A:60:3E:E2:D7:6D:EC:DC:0C:8F:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 500F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pvin2wLSdKOuOmA-4tdt7NwMj_M.roa
Signing time: Sun 05 May 2024 07:53:54 +0000
ROA not before: Sun 05 May 2024 07:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20495 (0x500f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 07:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3EF8A7DB02D274A3AE3A603EE2D76DECDC0C8FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7c:5b:a4:c0:3a:20:b7:2e:b5:98:17:79:c4:
93:b1:86:40:c6:c5:4c:e9:14:5a:0c:22:d0:53:c1:
14:09:a2:06:19:6a:8e:74:e0:c8:c6:c9:8a:a3:b0:
b4:ff:d3:2f:43:9c:77:7b:4b:35:0b:5a:a6:31:74:
fa:08:b5:36:88:bc:fb:4d:ab:73:8b:76:8a:71:03:
36:12:80:5c:0b:71:33:97:dd:2e:5b:6e:b0:19:d5:
26:fd:13:44:04:60:54:8e:b7:bb:12:3d:50:64:ef:
47:db:65:77:fb:37:52:45:fa:5b:d9:32:4e:3e:31:
48:d9:f6:b4:76:77:d5:35:5e:b4:ab:82:6b:08:28:
89:8f:e3:82:0b:fc:f1:72:5f:c7:1a:53:2a:83:7d:
06:cd:a3:4c:1d:21:b1:db:9f:be:5f:63:f0:2a:ac:
f8:69:42:66:08:fd:ca:85:7b:1c:96:d9:9f:c0:35:
45:9a:52:be:e6:1f:14:b9:50:be:6b:4d:ae:ee:c3:
01:35:64:3a:c0:88:d5:da:53:ee:a3:39:0e:5d:76:
e7:58:34:74:b1:10:8a:16:38:eb:61:41:bc:d8:c8:
a9:30:dc:04:ea:6e:34:35:d4:b7:11:49:97:c0:01:
4f:c9:26:15:fc:16:1d:aa:b4:c2:5f:9d:d3:55:b0:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:A7:DB:02:D2:74:A3:AE:3A:60:3E:E2:D7:6D:EC:DC:0C:8F:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Pvin2wLSdKOuOmA-4tdt7NwMj_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:0c:7d:ab:ec:45:59:79:55:9c:59:60:cc:08:1d:c0:78:0e:
99:56:86:34:37:1d:03:cd:fd:22:15:1d:06:21:c4:50:c4:5b:
54:d6:00:77:ca:a3:11:50:c6:1d:6c:72:90:3b:74:94:ff:54:
0f:54:32:52:3a:6b:34:3d:ba:77:82:67:bc:9f:07:f3:d8:87:
fd:56:f1:35:a8:f9:9d:b3:da:a8:c6:db:28:82:92:a3:23:32:
12:60:e6:e4:72:be:59:02:b0:9e:65:c8:fa:3f:bf:73:f8:c4:
5e:aa:23:bf:bb:95:2b:04:10:3b:b5:86:1b:c6:fb:52:99:59:
9e:95:af:3d:a2:d3:c1:c6:b3:a8:14:41:52:1e:ab:6e:fc:e6:
8c:1b:6d:55:9d:a5:84:4b:57:6e:81:9f:62:70:83:eb:8c:96:
3e:91:d5:64:9e:00:7c:42:31:40:59:2a:77:0b:29:50:8f:cd:
34:98:e6:05:0a:39:c8:30:60:56:d4:f6:83:94:4d:c5:a7:d6:
d9:35:8f:16:19:10:39:93:38:fc:5f:66:79:c2:3f:8a:80:31:
53:79:94:fe:c7:b5:b0:c2:21:fe:c6:32:ad:d9:b4:fc:0a:7b:
65:e5:7b:1f:7b:30:96:fb:65:c3:e2:4d:5d:e5:ea:0f:ae:54:
e6:9b:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:24 2024 by rpki-client on console-fra.rpki-client.org