Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T6y01TPZ7xg5SjdK9xirKK6_TAA.roa
File: T6y01TPZ7xg5SjdK9xirKK6_TAA.roa (raw, json)
Hash identifier: EE/okpkqO9nLVHEottL0wU0IkSRarjaiyp4oT7OEFrY=
Subject key identifier: 4F:AC:B4:D5:33:D9:EF:18:39:4A:37:4A:F7:18:AB:28:AE:BF:4C:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5693
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T6y01TPZ7xg5SjdK9xirKK6_TAA.roa
Signing time: Tue 14 May 2024 00:24:08 +0000
ROA not before: Tue 14 May 2024 00:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22163 (0x5693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 00:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4FACB4D533D9EF18394A374AF718AB28AEBF4C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:7f:3c:98:87:ee:e4:bd:9b:44:b7:68:28:
71:d8:7b:29:c0:a9:15:7b:89:53:46:89:80:48:c3:
59:80:ec:76:5a:e6:b6:44:d2:a1:ed:a0:82:92:d6:
2d:e7:91:fe:66:fb:6f:63:08:57:ed:2a:ad:db:35:
b2:96:98:6d:d0:17:0a:fc:ef:90:41:8a:47:42:78:
5c:d6:86:f2:1e:00:42:f8:b8:b1:61:d8:f7:b6:e4:
b2:2a:4c:b3:5a:87:ce:6d:aa:e5:76:f6:6c:a9:5a:
34:38:59:18:6c:5e:db:14:d6:fd:19:b7:28:aa:c4:
e3:d6:ee:c4:3e:cc:3e:e3:ee:86:00:02:c3:ff:d1:
fc:46:ff:35:d7:d4:c0:e1:5e:1d:d7:9c:cd:6e:2d:
7c:e8:5a:83:30:59:15:14:b9:e7:c4:be:23:1e:92:
20:25:bc:76:04:61:81:4b:a0:10:1f:56:bf:ff:e3:
2d:48:33:36:e7:f4:73:60:f9:b9:06:4b:b8:76:09:
e0:fd:0b:72:4b:1e:cd:ea:31:a0:1e:98:14:ef:57:
aa:a2:3f:27:40:1c:44:e9:fc:0c:2d:ef:ee:38:1d:
67:c0:f4:34:1c:c5:13:17:c4:2b:a3:72:4b:7a:df:
1c:33:32:e0:bb:f4:bf:aa:2b:16:70:22:63:c0:da:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AC:B4:D5:33:D9:EF:18:39:4A:37:4A:F7:18:AB:28:AE:BF:4C:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T6y01TPZ7xg5SjdK9xirKK6_TAA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:92:cc:1d:9a:82:21:d7:3c:a6:68:2c:2d:95:d3:ea:2a:19:
f6:46:f8:cd:80:68:1f:3d:7e:e7:7c:9c:b0:46:86:d6:86:ba:
02:1a:b1:d9:01:31:cd:e4:05:3a:e2:c4:90:3f:06:7c:f9:81:
80:b6:52:6e:0c:a2:91:f5:96:fb:0a:e9:c3:c2:bf:fb:f0:4d:
8d:f7:d5:8a:1a:88:85:0a:f4:1c:04:41:f5:03:bb:4a:54:c4:
11:14:59:99:3d:37:2a:3a:ff:19:d8:af:5a:e9:17:19:fc:54:
de:17:3b:5a:80:fe:24:8c:0f:1b:b3:ea:0b:50:81:4e:b9:d7:
8f:20:1d:8e:c4:5a:e5:de:4b:f1:d1:89:42:13:29:a2:86:23:
44:5e:ed:c0:af:42:cc:ee:50:56:85:31:55:fd:12:48:51:0d:
48:43:85:29:35:16:1c:6c:ed:db:e4:27:47:8a:20:6f:0d:f6:
7b:e4:02:a3:03:bb:34:d3:05:6c:ed:37:ba:c6:b6:55:5e:ed:
52:e8:d1:96:c2:8e:77:e1:8c:54:af:3f:45:30:a7:10:c0:1b:
e5:50:bf:7d:31:5b:3c:9c:76:42:92:04:c0:be:42:36:87:af:
e4:dd:f3:06:6b:a4:e5:b5:d0:02:67:0f:03:4e:1d:4f:8c:3d:
ff:d6:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:26 2024 by rpki-client on console-fra.rpki-client.org