Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QR9EhoTAaQbaot4eWw5qYyMQvuQ.roa
File: QR9EhoTAaQbaot4eWw5qYyMQvuQ.roa (raw, json)
Hash identifier: 65IHaB6UxTZN5tVDap0sXdZFOyRCU+JzRAS++ngKlRw=
Subject key identifier: 41:1F:44:86:84:C0:69:06:DA:A2:DE:1E:5B:0E:6A:63:23:10:BE:E4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4047
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QR9EhoTAaQbaot4eWw5qYyMQvuQ.roa
Signing time: Sun 14 Apr 2024 06:52:52 +0000
ROA not before: Sun 14 Apr 2024 06:52:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16455 (0x4047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 06:52:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=411F448684C06906DAA2DE1E5B0E6A632310BEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:b9:dd:0c:2f:61:16:48:3c:27:8c:75:55:
7a:9d:ca:99:9c:c7:db:03:c5:a4:4f:51:26:7f:96:
f4:88:11:ab:7a:81:ca:50:ae:86:71:5a:8f:10:76:
ed:19:45:e1:cb:0d:b0:b0:ff:2c:28:3c:e1:1f:b2:
4f:56:d5:ef:f2:42:a7:d2:4d:8f:31:9b:b3:27:b4:
39:1e:da:c2:2a:73:42:bd:36:74:7f:8e:ad:83:22:
09:e7:81:d7:22:13:2a:db:83:dc:b6:e2:13:3e:16:
9b:63:c6:54:c0:d0:38:a6:29:3c:ef:26:8e:59:51:
d7:bf:03:ad:e0:88:c8:e2:9f:e8:7b:ac:f5:ba:54:
8a:76:11:3b:ff:9a:47:44:7d:b5:2a:3b:e0:05:0a:
5b:85:5f:1f:17:40:bc:89:c3:09:40:f9:a8:c8:70:
36:0c:01:f7:a7:42:11:2b:e6:98:17:ef:9c:3e:57:
ae:60:1a:65:a0:01:97:00:db:95:d9:b1:43:98:bd:
a1:ac:71:2d:70:64:94:e8:69:a5:39:b0:6e:fc:1f:
05:23:ad:13:65:97:41:5a:6d:44:51:8e:c8:7e:15:
23:a6:d5:4c:12:b6:d2:68:0b:aa:cb:f4:c0:05:78:
67:30:41:da:89:17:fa:45:fe:ba:48:6f:dc:d9:64:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:44:86:84:C0:69:06:DA:A2:DE:1E:5B:0E:6A:63:23:10:BE:E4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QR9EhoTAaQbaot4eWw5qYyMQvuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:41:c9:64:1c:bf:af:87:c3:20:52:5b:52:54:d7:67:28:bc:
98:47:8a:ab:f0:80:f2:78:d7:8f:e5:fb:9b:90:7e:55:99:e8:
57:ea:19:76:11:dd:c6:0a:5a:83:30:22:e8:e1:b8:39:64:ab:
35:80:b9:a5:9d:eb:b8:18:94:d3:c6:59:c4:73:ab:14:bc:a1:
37:ad:63:31:5f:39:dc:e7:34:80:9d:ee:ea:ff:1b:0e:dd:08:
cd:2d:05:07:7d:73:f6:bd:d2:e0:94:d8:4a:90:90:e6:34:df:
43:57:31:39:03:a7:d6:de:71:89:8a:33:da:35:1a:e7:69:67:
ce:45:91:a9:25:08:cf:d4:66:ae:4a:44:73:74:fa:c4:49:15:
bf:bb:2c:db:7c:ad:bf:bc:bf:88:af:ca:94:f5:ed:d5:16:5b:
01:db:44:60:f0:ac:c4:a5:c5:77:c3:2d:1e:47:13:8a:f1:a0:
f5:61:0e:0a:e2:c4:f9:a7:78:e9:12:89:fc:fb:38:c3:26:59:
9c:7e:41:88:0c:27:ac:2d:0e:2d:ca:db:6a:ca:83:7b:6f:fb:
9f:92:ec:43:93:c9:e1:de:76:cd:50:c3:39:37:5d:c5:c9:e9:
c0:45:3f:da:ab:46:ca:48:b9:08:a5:99:aa:a4:ef:22:8c:19:
91:77:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:40 2024 by rpki-client on console-ams.rpki-client.org