Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VWJmG1GS0P-bW3NgJnxdAEWSJkE.roa
File: VWJmG1GS0P-bW3NgJnxdAEWSJkE.roa (raw, json)
Hash identifier: 86nF7flglgeV55I+cHEmK+98xeDN7hZe5nccfMoSM2o=
Subject key identifier: 55:62:66:1B:51:92:D0:FF:9B:5B:73:60:26:7C:5D:00:45:92:26:41
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52DB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VWJmG1GS0P-bW3NgJnxdAEWSJkE.roa
Signing time: Thu 09 May 2024 01:23:57 +0000
ROA not before: Thu 09 May 2024 01:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21211 (0x52db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 01:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5562661B5192D0FF9B5B7360267C5D0045922641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:c0:1c:65:d1:4e:58:b4:3c:a1:84:e4:c1:
98:0c:b5:84:21:12:56:ea:52:95:ec:d6:85:0d:58:
ad:3a:dd:da:c4:c8:90:4d:3b:0c:81:4b:ba:98:b3:
70:aa:8d:2a:c3:70:99:54:03:4b:68:3b:98:10:57:
36:72:4e:48:94:01:9c:11:93:3a:ad:8b:0c:48:fa:
f0:af:3b:4b:fc:56:16:38:df:ac:34:65:06:98:61:
4b:4a:81:55:c2:81:b2:b8:01:02:6b:d5:68:ca:3b:
e8:44:7d:61:56:d6:79:a1:d9:26:b3:51:47:4a:98:
55:fb:96:66:5a:60:da:cf:01:64:b6:19:8c:7d:29:
93:d0:96:65:bd:93:ff:54:f4:b4:63:19:a9:72:44:
bf:5b:42:91:5a:b6:27:70:4b:19:d1:ce:67:f3:6d:
49:03:97:75:70:fb:4a:e8:a1:7f:68:de:1c:d9:64:
a9:11:19:7c:f5:95:2e:12:94:7f:92:71:4d:24:37:
b3:c7:fa:9e:f2:e8:7e:6b:58:f5:19:ef:60:9b:96:
48:ae:af:fa:50:aa:5a:f9:93:8b:a5:28:55:9d:c1:
7e:03:20:d7:2a:5b:18:30:85:9a:e9:9f:f4:e3:fd:
d0:88:24:d7:a3:80:57:f9:c4:c5:36:9b:4b:41:a2:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:66:1B:51:92:D0:FF:9B:5B:73:60:26:7C:5D:00:45:92:26:41
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VWJmG1GS0P-bW3NgJnxdAEWSJkE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:4b:64:a8:3e:c3:72:08:fc:ef:2e:a1:7e:cc:7c:67:00:a7:
16:27:ab:cd:6a:1c:f4:15:76:f7:c2:cc:72:7b:bd:8d:9a:ee:
a2:d2:e7:24:88:85:83:46:a9:24:ee:b1:bb:ea:f4:a8:74:ce:
ee:89:da:65:44:ac:b0:08:d7:81:28:07:42:8d:8b:2c:16:85:
56:11:a5:25:c6:36:2c:6c:df:34:b6:ee:ad:00:19:34:96:f8:
c3:fa:b4:ee:42:ea:d7:b4:4b:6a:2c:db:f4:2b:0e:85:0f:c3:
17:6e:5a:54:56:b2:bb:b8:73:61:dd:70:ab:f4:42:b6:bc:f4:
49:e7:0f:e3:e0:be:e8:50:90:0d:61:02:a3:82:0d:0a:60:97:
0f:a2:13:03:d0:8e:99:4f:2c:a1:d1:7f:41:56:24:6e:46:ee:
9f:02:b6:13:27:de:dc:70:4c:5b:c5:7b:67:f9:e3:ea:8c:be:
33:dc:5a:09:12:c8:8a:72:77:59:17:44:be:e1:86:08:ae:ee:
18:52:99:46:f3:85:2a:c5:4e:84:ae:3b:ce:7a:6e:fa:3b:c3:
81:28:0b:eb:54:f2:94:24:ec:7c:aa:a0:56:a2:aa:b3:3e:8a:
6c:a0:f4:f4:06:77:4a:79:b2:da:e0:ce:1a:f3:24:d3:0f:ba:
55:f6:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:28 2024 by rpki-client on console-fra.rpki-client.org