Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WQa6tSvdyMPs6GRrsezJNsZm3MQ.roa
File: WQa6tSvdyMPs6GRrsezJNsZm3MQ.roa (raw, json)
Hash identifier: +dT0zU0rJbvc9UFyP8ni/u/UQhLHPcR19rDURupOaMw=
Subject key identifier: 59:06:BA:B5:2B:DD:C8:C3:EC:E8:64:6B:B1:EC:C9:36:C6:66:DC:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42FB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WQa6tSvdyMPs6GRrsezJNsZm3MQ.roa
Signing time: Wed 17 Apr 2024 21:22:57 +0000
ROA not before: Wed 17 Apr 2024 21:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17147 (0x42fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 21:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5906BAB52BDDC8C3ECE8646BB1ECC936C666DCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:6f:12:d9:85:58:33:25:3b:8c:05:b4:8e:
1d:90:7c:85:04:3e:e6:67:ce:15:df:1c:72:ee:15:
3c:4a:59:f2:4d:2f:13:5d:0e:0c:34:5b:d6:35:3d:
0b:5e:ea:90:55:6c:0a:c5:8b:6c:a7:56:a8:1b:97:
e6:cd:5f:80:28:3d:11:04:63:ce:7a:d4:f6:92:3e:
b4:ab:66:f3:83:84:bb:45:43:90:3e:fe:84:88:43:
26:37:97:d9:8d:0f:6f:da:2b:c4:48:67:ec:90:c0:
1a:9a:2a:4a:bf:c3:af:eb:5e:f0:4d:9d:07:bf:6c:
14:cf:6c:18:47:ce:43:32:4f:2e:81:7e:29:53:fb:
1b:45:f0:37:8d:9d:09:f9:2f:57:9f:42:84:07:83:
d7:ae:20:2f:04:64:e2:92:32:7a:d1:53:b6:31:d5:
dc:b5:71:c3:ae:11:1b:8d:dd:ae:ae:c7:4d:03:6b:
98:32:68:36:97:03:d4:a4:fd:68:11:50:1a:48:48:
c2:04:b5:35:25:8e:ce:7e:cb:68:69:cc:da:a5:a4:
27:b5:7a:91:5e:6a:a2:30:e0:06:98:fc:0e:b1:85:
30:51:a1:f0:b1:f6:33:d4:e2:15:36:d5:fd:cf:39:
dd:91:d7:7c:93:53:71:ac:80:16:ba:22:fe:d0:9b:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:BA:B5:2B:DD:C8:C3:EC:E8:64:6B:B1:EC:C9:36:C6:66:DC:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WQa6tSvdyMPs6GRrsezJNsZm3MQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:9a:3d:1c:22:1c:ed:71:7e:b3:fa:54:3c:11:24:61:10:67:
04:10:7e:85:bf:fd:d5:d1:99:ad:dd:5c:ce:42:89:2a:10:c0:
a1:35:0b:e1:79:c9:f6:42:1c:fe:f3:32:57:5c:4d:03:f9:21:
09:ae:ae:1f:9c:bb:fb:06:90:bd:93:af:b8:67:f0:23:70:be:
bb:47:68:fa:e8:9e:ee:fb:3c:20:8b:ca:f2:00:12:90:0b:03:
b6:17:29:47:61:0f:fd:c9:b7:fc:c4:d9:f6:94:7a:ff:a5:52:
d0:8d:c9:cb:2a:ca:e2:46:98:e3:c0:89:e3:d9:7f:46:da:4a:
b6:13:cc:3d:45:ea:50:94:22:4a:44:7e:00:57:de:0a:39:e7:
08:19:a6:88:90:c4:13:1a:c5:f7:86:0e:df:99:43:97:f4:c8:
23:9a:b1:cc:e6:9d:6e:b8:b5:ad:d7:ed:9d:0c:07:5f:90:11:
76:86:70:5b:64:33:3e:b7:89:68:de:f0:6b:7f:c8:e7:69:6b:
0f:05:a4:2f:45:1b:59:f0:0b:57:13:4e:a4:34:b5:5d:8c:d0:
97:56:1a:a0:16:23:d9:79:6b:b0:78:9a:39:19:a7:5d:66:bb:
a1:04:a4:b8:32:73:3b:b8:8b:72:ea:5e:d4:3b:e9:f0:6c:3d:
f6:dc:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:47 2024 by rpki-client on console-ams.rpki-client.org