Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VShwdfMNYJfOmlbosK4lfBYUaJg.roa
File: VShwdfMNYJfOmlbosK4lfBYUaJg.roa (raw, json)
Hash identifier: 7DLdPmu9HIco/wmDc1j6qy9PdIJCPGJNudf21XAmynk=
Subject key identifier: 55:28:70:75:F3:0D:60:97:CE:9A:56:E8:B0:AE:25:7C:16:14:68:98
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B63
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VShwdfMNYJfOmlbosK4lfBYUaJg.roa
Signing time: Sun 07 Apr 2024 18:22:35 +0000
ROA not before: Sun 07 Apr 2024 18:22:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15203 (0x3b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 18:22:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=55287075F30D6097CE9A56E8B0AE257C16146898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:81:2e:58:7a:96:f0:3b:b2:e6:e5:15:d8:
34:08:f8:8c:bc:5c:62:f1:52:eb:f3:0a:75:39:08:
42:0f:ff:b0:63:b2:7b:77:02:7c:7a:7c:ba:30:5a:
b5:36:73:f7:8c:06:84:f2:96:29:4f:b2:f9:05:c9:
28:fa:1e:87:a4:a7:7a:6a:94:f6:1b:d2:38:b3:00:
1f:f3:aa:ba:fa:a2:67:3e:69:f0:77:5f:18:f5:8a:
f3:1e:c0:03:ee:b7:8b:0c:77:ca:34:8b:43:cd:20:
64:93:5e:2d:dc:5c:5f:fe:a6:e6:25:9a:c3:6b:72:
20:6b:09:4c:68:d4:95:05:65:5b:e8:41:4e:e1:3e:
e0:9e:7d:5f:f8:c1:46:20:6a:bf:cb:3d:77:ee:63:
3c:c6:a3:b0:9b:90:9b:cb:4e:74:64:c0:9c:53:bf:
dd:31:c5:21:16:e5:a2:06:de:43:54:62:18:e2:fe:
4a:97:17:19:b2:95:84:23:4f:c9:e8:b5:2c:96:c4:
0b:11:21:5c:4b:03:11:80:5f:91:1c:63:75:6d:bf:
c2:a6:ac:07:cb:81:3a:60:c2:c7:55:21:2e:08:3d:
b2:c4:28:cd:df:ff:6e:db:ef:42:4d:dd:4e:91:e4:
50:6d:11:49:41:f1:5b:54:5e:10:d3:38:6d:17:76:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:70:75:F3:0D:60:97:CE:9A:56:E8:B0:AE:25:7C:16:14:68:98
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VShwdfMNYJfOmlbosK4lfBYUaJg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
50:bb:11:d7:6a:fc:78:b5:3e:f6:86:ff:d7:43:8b:10:d8:4b:
6e:c0:a4:6c:d0:9c:be:cd:e5:83:cf:94:38:db:0c:b3:34:cd:
17:1a:0a:5f:40:92:e4:39:fe:ca:ef:61:8c:e1:60:ab:1c:0e:
76:fc:11:88:fd:77:a8:0e:b2:b6:a7:9d:23:53:1f:0c:fa:7c:
94:65:b0:4d:ba:04:f3:89:5b:d1:01:d5:cc:67:ae:21:33:4c:
b8:63:9b:5e:4d:43:27:a5:5c:01:40:3d:0d:ea:db:c6:7c:c2:
10:cd:1e:7e:4c:b1:e4:c6:f8:fc:2d:c8:28:4f:31:76:63:76:
68:c7:a8:5a:f7:a7:98:c7:70:cf:cb:4f:03:95:05:0d:57:30:
21:02:28:65:6d:fc:51:33:15:2d:b4:c9:b6:50:93:73:f0:ee:
b1:d7:11:64:08:09:60:6d:01:81:69:ad:96:4d:40:a3:ca:1b:
6c:ca:f1:0e:75:1d:27:04:58:ad:22:6a:26:9a:c8:3f:9f:ee:
79:95:99:46:44:01:9f:79:77:c2:87:a4:fe:15:1e:19:64:fd:
e6:00:c9:89:2e:d5:f2:d7:bb:92:c7:55:78:3c:de:04:bd:7e:
c1:44:1d:a4:08:80:a9:47:1e:bc:84:af:81:02:a7:44:5d:d3:
2e:af:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org