Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TuDj8l34ORNNB13GRLTXBvJMFFU.roa
File: TuDj8l34ORNNB13GRLTXBvJMFFU.roa (raw, json)
Hash identifier: 696/E27eXD5KdgXVKiddSfQOFJisaeiug8fEDiTqUPw=
Subject key identifier: 4E:E0:E3:F2:5D:F8:39:13:4D:07:5D:C6:44:B4:D7:06:F2:4C:14:55
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F97
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TuDj8l34ORNNB13GRLTXBvJMFFU.roa
Signing time: Sat 04 May 2024 16:53:54 +0000
ROA not before: Sat 04 May 2024 16:53:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20375 (0x4f97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 16:53:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4EE0E3F25DF839134D075DC644B4D706F24C1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:eb:ad:33:c9:36:73:c5:a4:b9:90:1d:17:
22:46:d7:23:8f:e6:2c:37:37:f1:86:a0:05:51:90:
29:13:6e:86:4d:e3:c4:69:e1:92:0b:f1:aa:de:e4:
a5:7f:7c:68:80:d4:59:29:4b:8e:8f:b9:5b:16:95:
19:b9:a6:6f:a2:cc:ad:07:06:a8:92:82:03:96:a5:
dd:90:0a:3c:f7:8a:89:70:19:10:02:6d:6d:24:44:
15:fc:35:e3:cc:82:79:76:27:b3:5d:58:89:6d:33:
c4:33:bb:84:b0:8d:de:fb:ba:4c:5a:08:d8:9c:e9:
10:33:d2:21:b9:0e:b4:e1:07:cc:50:91:10:c8:35:
88:f5:51:6c:f0:bd:13:bc:1f:98:a0:46:3d:7e:dc:
e4:1f:41:f3:7d:9e:2d:d1:1f:bf:0d:57:f3:96:e0:
fd:b2:51:9a:e2:69:cc:c4:4f:2a:59:31:71:aa:a8:
d8:c4:05:f1:fa:ef:8e:15:28:53:93:26:32:f5:3e:
56:c3:94:9d:a3:6d:87:ab:9d:f7:2a:20:19:41:db:
9a:b6:b4:c9:7c:8d:f5:9a:33:ca:db:e9:bf:b6:a0:
82:b2:ab:f4:3d:bb:9d:3e:21:ac:6b:2a:dd:d1:a5:
5e:10:5f:13:ec:d3:47:2a:79:00:a3:72:fa:f1:bf:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:E3:F2:5D:F8:39:13:4D:07:5D:C6:44:B4:D7:06:F2:4C:14:55
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TuDj8l34ORNNB13GRLTXBvJMFFU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:cd:35:8f:1e:4e:0d:40:f8:fe:1a:d5:97:d4:11:19:51:88:
c2:04:e9:9a:49:df:a4:41:88:ed:33:c9:13:1a:9e:f7:e3:03:
49:5f:32:0a:32:5f:cb:32:f9:36:37:15:b0:48:4d:0a:6c:9e:
89:af:a8:71:43:ff:3c:27:b6:4b:ef:d7:1b:22:22:74:77:21:
f4:bf:db:32:40:c0:a2:ca:a4:b8:ff:4f:5c:2e:f5:0d:f4:33:
74:9a:4b:1c:c6:51:d6:9c:86:d5:e5:7a:84:c6:e1:a4:94:5c:
ac:40:49:6e:30:3e:15:7a:ac:98:35:c7:01:7f:e0:4c:51:87:
f0:57:0c:7c:46:44:12:36:a5:14:1c:df:25:76:6a:ae:9e:64:
f6:66:12:bf:6e:2c:a3:a1:04:26:7c:8f:c5:83:44:fc:ca:0a:
30:62:ca:3f:90:3c:a7:aa:79:9f:84:cf:ae:62:a9:04:c4:b6:
c7:4d:4f:0f:3e:64:04:c7:00:1d:23:df:5e:0e:9e:a4:38:c7:
cb:9b:e7:b2:54:8d:12:9f:be:fa:ec:9f:19:7d:15:91:d3:a1:
3f:f9:d3:4e:c8:59:31:e3:91:70:e8:d5:5c:4b:90:74:34:c3:
fb:b3:be:d2:39:ff:e0:1b:c6:e8:b0:7b:a7:86:21:a6:5f:61:
02:8e:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:44 2024 by rpki-client on console-ams.rpki-client.org