Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U_1fLvaitEVHvcpPJaTQdgtirFI.roa
File: U_1fLvaitEVHvcpPJaTQdgtirFI.roa (raw, json)
Hash identifier: WNwYXzE11Bs8/h7ftH5F3hPPJXykFmDzEal3PAUfDy0=
Subject key identifier: 53:FD:5F:2E:F6:A2:B4:45:47:BD:CA:4F:25:A4:D0:76:0B:62:AC:52
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 36E7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U_1fLvaitEVHvcpPJaTQdgtirFI.roa
Signing time: Mon 01 Apr 2024 18:52:18 +0000
ROA not before: Mon 01 Apr 2024 18:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14055 (0x36e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 18:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53FD5F2EF6A2B44547BDCA4F25A4D0760B62AC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:9a:3b:ca:45:88:37:4a:0e:ac:ce:76:a3:
c5:2f:bf:64:7a:d6:05:be:a0:49:5d:ad:3a:73:f0:
8a:54:99:b2:90:f7:73:ca:bb:c9:8a:b3:80:1b:ea:
d9:96:66:f9:4c:7d:98:53:94:e2:8c:33:8f:df:5c:
56:4e:10:23:c2:cd:61:b3:7a:10:1d:5b:d6:b6:5d:
17:c9:c5:96:ed:80:c6:91:dd:e6:49:07:2f:90:03:
40:d5:f0:0b:41:18:fd:4e:ff:bb:c6:58:c9:b7:61:
1d:4f:c2:a9:e0:c4:df:68:43:6e:22:1b:44:7b:ed:
44:d4:ef:2f:f6:91:9c:29:2a:f4:e0:bf:83:a3:10:
e5:b3:7e:a4:35:07:03:17:5c:35:de:fb:8e:d9:91:
4d:fe:6f:6d:bc:e7:a4:c8:34:63:e4:ea:2b:0c:0d:
29:21:4c:9c:3a:4c:ae:ad:ee:c8:f3:c0:75:9f:bc:
9b:ce:fb:18:62:21:79:37:6d:0e:2f:23:ca:8b:9f:
86:2b:f8:c2:17:a2:7f:aa:23:f7:fe:84:94:15:8c:
a9:c8:b3:0d:1e:2b:85:c2:3e:e5:89:a7:03:ef:d7:
2f:ca:b0:0a:f1:28:7a:a2:59:6b:47:c3:c5:3b:78:
70:2f:dd:b9:32:78:08:4f:da:4f:2b:c1:8c:85:97:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:5F:2E:F6:A2:B4:45:47:BD:CA:4F:25:A4:D0:76:0B:62:AC:52
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U_1fLvaitEVHvcpPJaTQdgtirFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:2d:89:de:34:15:27:30:57:02:7c:da:39:30:f0:c4:ff:1c:
5f:d8:13:68:44:c5:12:cb:9e:68:a8:bf:60:b5:4e:88:5e:c7:
03:0d:39:57:5c:06:cf:65:f4:ed:78:3c:f1:14:b7:23:73:4b:
73:68:0a:24:ee:15:7a:24:62:2c:67:1b:6c:ee:fd:20:5d:3d:
d5:e1:88:f9:58:92:b0:08:90:e9:14:d5:66:81:9f:9e:1b:67:
4e:d2:47:02:e4:a3:5e:e0:a9:c8:d7:4a:f6:4e:7b:c0:73:cd:
cb:7f:93:0d:31:e1:c7:e5:a7:5b:58:63:db:d3:21:9c:86:b9:
a8:ab:c0:85:7d:e5:53:db:99:91:11:ec:b1:0f:4d:ac:bb:1d:
76:92:82:aa:4e:ca:ed:45:cb:5e:27:08:17:f4:8b:0a:d3:a9:
6b:d2:9c:b1:49:2e:6f:24:b4:22:b9:43:67:9e:34:c6:1d:4e:
01:b5:96:80:3e:17:36:f7:e2:21:76:d8:28:89:f8:9f:c6:7a:
5c:1a:2f:25:bd:d9:f1:87:19:5c:7c:f7:37:d9:69:3c:4c:89:
13:51:b7:06:98:96:39:b5:aa:ed:53:87:3e:32:e8:62:b0:77:
7a:31:85:9c:ba:c2:96:ed:6e:0e:34:a0:04:c3:93:23:94:42:
4b:e0:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:45 2024 by rpki-client on console-ams.rpki-client.org