Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Rb5Wo_wV1LTXcMwFUXEKIjHUONU.roa
File: Rb5Wo_wV1LTXcMwFUXEKIjHUONU.roa (raw, json)
Hash identifier: zcVOXmq9BVdesQjfK8CaIOJ9NsobTJ7ZeduBIHp3n9U=
Subject key identifier: 45:BE:56:A3:FC:15:D4:B4:D7:70:CC:05:51:71:0A:22:31:D4:38:D5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 376F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rb5Wo_wV1LTXcMwFUXEKIjHUONU.roa
Signing time: Tue 02 Apr 2024 11:52:18 +0000
ROA not before: Tue 02 Apr 2024 11:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14191 (0x376f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 11:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=45BE56A3FC15D4B4D770CC0551710A2231D438D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:ea:8f:44:9c:4a:97:2d:97:e7:1c:04:3a:
73:42:c4:9e:3d:0c:54:8d:e4:8f:80:e0:8d:5b:98:
a1:95:47:b2:72:36:67:d7:b9:4e:f7:b6:88:36:c1:
ef:64:9b:d3:de:1d:72:45:1a:fe:49:35:19:fb:ba:
9b:95:54:e8:34:25:9d:fa:46:3e:ab:6f:e5:e6:f3:
30:c4:63:26:ff:e6:e4:c7:fe:2d:54:8a:e2:15:f3:
79:cd:29:74:69:1d:8c:ac:c9:96:fb:b3:6d:27:c6:
2e:06:1c:c0:05:4d:e9:74:cc:37:23:6f:02:ce:2d:
b6:ed:99:60:ef:ed:db:4d:ae:54:c7:78:2d:11:54:
12:3f:67:ec:72:1e:1e:27:91:b2:17:5d:bf:bb:a7:
e8:80:90:7c:26:1f:6b:55:0e:99:9f:30:3f:c1:2c:
4c:bd:2c:b0:2d:1a:0e:27:cc:31:f3:ff:91:e7:9a:
8a:b1:a4:30:65:cf:28:a8:c9:b7:f0:3b:39:bc:e8:
27:0b:1b:00:10:3c:0b:88:4e:c4:e6:33:b8:87:0d:
07:6e:61:47:1e:a2:58:a5:e7:1c:3d:3c:2b:c8:95:
bc:30:52:a3:ae:56:fc:b2:32:9b:eb:1d:36:68:88:
76:bf:a3:ab:23:12:ef:25:01:55:3b:87:67:5a:20:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:56:A3:FC:15:D4:B4:D7:70:CC:05:51:71:0A:22:31:D4:38:D5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rb5Wo_wV1LTXcMwFUXEKIjHUONU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:77:b7:e3:d8:9f:e8:04:51:16:e6:6c:d3:1f:42:dd:66:c3:
07:c1:9c:be:44:84:b2:86:3b:a1:de:67:f9:a9:1c:b8:95:36:
e5:c6:33:0f:58:0e:7e:d9:c8:ff:bb:5b:d2:f5:25:ef:38:7b:
20:09:d1:2a:02:04:c6:88:c2:fb:4b:f4:f8:54:24:8f:7a:e9:
f6:ad:f5:88:3a:ff:a7:33:af:2f:31:31:de:d1:52:03:99:64:
57:7b:52:2a:c8:40:f9:13:f1:6a:51:11:09:91:3c:30:9a:c8:
9a:2d:e9:c8:7b:95:61:46:67:ef:01:12:c2:20:2e:01:bc:fe:
71:77:d0:96:55:3d:58:64:cf:7c:8e:da:f0:18:e3:ed:51:46:
b9:73:05:00:69:f1:48:b1:a8:fb:ab:a3:a5:0e:46:fe:c6:df:
f9:ba:99:79:16:6a:17:a6:2b:4b:da:80:85:b6:60:92:80:24:
d5:01:6c:ad:ae:c4:02:b9:b9:2b:60:49:eb:ca:e7:39:fb:5b:
09:74:0e:d6:3f:f3:df:6b:3f:a2:38:e6:e0:50:18:32:76:e7:
4a:6b:03:7a:a8:7f:16:ed:dc:8c:45:f3:c3:cf:b1:36:6c:e6:
90:52:0c:87:4c:f1:36:ce:b3:1d:30:b0:b6:17:3a:fd:72:b6:
c1:0e:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:41 2024 by rpki-client on console-ams.rpki-client.org