Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Vpg8odlTVa9uxP9jNOQ5si-Wcag.roa
File: Vpg8odlTVa9uxP9jNOQ5si-Wcag.roa (raw, json)
Hash identifier: yjUP7mRY8aD8TUmgdFr492nBWYTfWlczPmeKjMELgIE=
Subject key identifier: 56:98:3C:A1:D9:53:55:AF:6E:C4:FF:63:34:E4:39:B2:2F:96:71:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38AF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vpg8odlTVa9uxP9jNOQ5si-Wcag.roa
Signing time: Thu 04 Apr 2024 03:52:22 +0000
ROA not before: Thu 04 Apr 2024 03:52:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14511 (0x38af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 03:52:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=56983CA1D95355AF6EC4FF6334E439B22F9671A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:cd:3f:c7:d7:a9:3a:25:23:6f:c5:6a:04:
c0:7b:36:a3:05:96:c7:ec:a6:06:6c:31:b1:55:fe:
3a:ea:2a:87:ad:d9:98:49:72:d9:75:69:fd:aa:99:
53:93:13:46:0c:56:25:2b:0e:2b:b1:e1:01:a1:1f:
f3:b9:4e:02:a1:4b:6c:9a:94:da:3f:88:18:72:11:
87:39:10:f3:d8:ca:18:8b:3a:f2:9e:fd:ed:08:53:
61:fb:da:dd:ad:9c:1a:8f:34:7a:74:7e:88:09:0b:
64:79:e7:07:3c:29:12:06:7a:5f:0f:f9:f6:7f:70:
41:6d:63:84:96:6a:56:ad:da:0f:c1:4c:4d:5f:49:
70:fe:19:42:dd:e0:ac:0d:56:db:59:de:02:18:07:
4b:74:31:b7:2b:d3:32:90:13:00:f7:54:93:d0:e8:
d0:59:d4:77:f6:5f:f9:fa:48:28:d0:e9:e4:73:e2:
de:ec:b5:01:e5:76:be:e0:f7:73:b7:c2:d3:ec:e1:
77:6a:5d:cd:33:b9:13:f1:f5:ab:dd:3b:72:b2:e8:
e0:6a:ef:3b:91:6d:6d:05:39:76:10:cc:ce:5f:69:
f8:c6:85:b5:df:92:b4:d4:1f:e4:7e:b4:1d:4c:87:
c4:89:89:c0:81:3b:23:d4:ad:f2:13:60:35:d9:84:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:3C:A1:D9:53:55:AF:6E:C4:FF:63:34:E4:39:B2:2F:96:71:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Vpg8odlTVa9uxP9jNOQ5si-Wcag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
95:ce:33:ae:61:c5:c2:d4:ab:f4:67:9c:cf:ca:aa:31:56:58:
7e:47:24:85:49:e3:dc:53:1f:7f:9a:22:98:0b:6a:1f:c5:15:
19:d0:dc:26:95:aa:4e:a2:d9:35:94:0a:ca:12:8e:ae:74:81:
be:17:cf:f0:91:cd:ea:4e:5d:8b:56:c2:c8:de:82:f5:45:3e:
d0:06:5f:a5:31:37:3c:f9:35:e5:d2:0a:86:fd:0d:78:c1:37:
41:0a:ca:af:9b:c5:93:a9:09:23:96:07:ed:45:ed:8d:83:b5:
41:33:66:bf:3e:cd:e5:5b:00:1a:bf:e5:e0:46:7a:36:0c:52:
01:fd:55:93:b7:e1:6b:c0:44:4b:b1:c3:32:c4:d3:ba:b8:a1:
f5:f1:45:08:86:39:94:96:ae:6a:d1:a7:5c:2d:36:a7:4c:0f:
5c:ba:c2:63:a3:b1:a0:cd:14:0b:97:09:a9:7e:5e:92:1b:a5:
8d:3f:00:01:5e:e7:f9:25:40:c0:c1:40:f5:21:33:cb:a0:3e:
03:c9:35:4a:b0:ee:eb:2f:31:0a:55:dc:69:55:a1:27:fe:ab:
f5:14:e2:45:3f:bc:87:f0:f5:05:eb:7e:8d:fd:3a:a4:4a:0c:
f2:ff:72:30:aa:6c:d6:3d:f3:a3:43:52:76:33:14:3c:12:43:
8f:99:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:46 2024 by rpki-client on console-ams.rpki-client.org