Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/amcLNYzT36tNJPfNm5qLE7bREVc.roa
File: amcLNYzT36tNJPfNm5qLE7bREVc.roa (raw, json)
Hash identifier: DxG+bIpU0RO9FlJAKlTWCNoDW3mP67qjquzfj3pfLsI=
Subject key identifier: 6A:67:0B:35:8C:D3:DF:AB:4D:24:F7:CD:9B:9A:8B:13:B6:D1:11:57
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 335B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/amcLNYzT36tNJPfNm5qLE7bREVc.roa
Signing time: Thu 28 Mar 2024 01:22:00 +0000
ROA not before: Thu 28 Mar 2024 01:22:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13147 (0x335b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 01:22:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A670B358CD3DFAB4D24F7CD9B9A8B13B6D11157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:25:f1:a8:ed:ed:ed:50:d4:b8:24:b9:39:
1c:5f:40:c2:a7:da:55:18:23:de:e0:ad:f4:66:7d:
01:e2:a0:67:c8:7e:31:38:f2:60:41:cd:98:e7:07:
1d:4c:7b:9b:b7:e0:45:37:fc:de:99:4b:e2:1e:61:
e3:35:0d:2c:88:36:0d:ac:26:31:54:0e:b8:96:3e:
95:c7:e0:1a:1f:99:ea:8b:98:01:06:a3:cb:1a:e4:
a0:cd:4a:5e:83:f1:2c:93:ac:23:d5:1c:c7:c8:f4:
4d:08:ee:b5:22:18:aa:99:7b:b6:81:ee:0e:c0:53:
50:3a:85:29:ae:fd:dc:91:ee:54:5f:25:d6:5a:20:
33:0a:03:31:f5:95:b9:f7:fc:ea:35:71:3d:10:1c:
e5:50:62:b3:ed:b5:85:3a:94:6e:fb:e9:4c:6f:c5:
4a:e9:fa:e1:1d:e6:51:46:c1:22:90:b5:93:c1:43:
40:cc:0a:19:15:b5:55:47:ec:00:ae:3a:28:92:e7:
15:57:88:83:7e:81:22:13:c7:3e:19:21:ef:4a:c0:
9e:42:8a:f2:3a:42:d1:d0:b3:de:9e:81:60:93:17:
9c:94:2c:80:b5:74:d4:24:9a:1a:2e:ab:ac:e2:06:
73:6c:fc:85:df:3d:e1:1b:aa:12:d3:bb:e9:af:4e:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:0B:35:8C:D3:DF:AB:4D:24:F7:CD:9B:9A:8B:13:B6:D1:11:57
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/amcLNYzT36tNJPfNm5qLE7bREVc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:b6:11:50:ca:21:d9:4e:61:cc:c1:31:6d:08:f5:54:74:df:
c5:3f:c1:93:40:dd:71:63:15:bb:59:60:8f:ca:77:b9:84:4b:
7d:f2:92:5c:c4:b3:70:30:c3:55:70:a5:12:ca:fc:88:01:5e:
32:41:13:38:7b:10:97:3e:22:d7:13:24:cf:38:83:24:e8:c2:
4d:9d:a6:28:fa:15:ce:5c:f9:e1:5e:5c:3f:24:9e:07:c3:18:
8f:2c:ee:41:a5:22:aa:16:b3:98:9a:f9:0b:66:8c:29:cc:28:
e6:5e:b1:97:76:8e:a1:38:fe:bb:f1:1b:d5:c9:82:fd:49:96:
bd:49:ba:06:c6:cf:0c:81:55:d4:36:d5:7f:c5:67:40:76:6f:
ae:44:35:fe:d0:7e:06:cb:83:19:87:f1:e7:dd:2e:d4:d2:df:
a2:48:b8:7c:45:e4:97:fb:63:4f:ec:d0:9d:94:7e:56:92:95:
7a:eb:f2:96:0b:92:01:1f:26:67:c2:a7:c3:6d:2c:46:9d:d7:
ab:7c:3d:13:6d:38:03:e6:ba:48:9d:6d:94:e8:f9:3d:41:d1:
07:da:5e:e8:f2:8b:fd:94:df:e7:27:a9:67:9d:c8:b7:c8:15:
b7:1c:1f:db:1b:43:d3:f1:b3:c5:43:94:5e:b0:1a:93:3f:61:
98:a8:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:34 2024 by rpki-client on console-fra.rpki-client.org