Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bRbnNSVgoT1UbtxfoXhsZQ2ftr0.roa
File: bRbnNSVgoT1UbtxfoXhsZQ2ftr0.roa (raw, json)
Hash identifier: PVgoyw3hOvDGY50XqTApx5o5J92sIsaM1MGsPvK4xA0=
Subject key identifier: 6D:16:E7:35:25:60:A1:3D:54:6E:DC:5F:A1:78:6C:65:0D:9F:B6:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3407
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bRbnNSVgoT1UbtxfoXhsZQ2ftr0.roa
Signing time: Thu 28 Mar 2024 22:52:05 +0000
ROA not before: Thu 28 Mar 2024 22:52:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13319 (0x3407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 22:52:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6D16E7352560A13D546EDC5FA1786C650D9FB6BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:b5:0b:f7:d1:42:06:e7:74:13:37:a6:ba:
02:06:1a:97:4b:86:9a:e1:ee:15:1a:0f:c6:16:64:
2e:d8:8c:ca:5b:a6:5f:46:13:0a:34:1b:94:fe:5d:
7c:89:df:0a:30:75:2b:bb:d1:03:c0:66:31:33:e0:
50:c5:de:65:93:d9:3a:d2:ad:f4:84:b0:19:a3:c4:
8f:30:56:f2:1c:f7:d6:af:93:85:24:96:23:22:c4:
ed:04:50:6a:d2:40:11:23:e1:80:0d:5f:1f:d3:10:
ea:c6:41:5e:bb:5b:62:4d:fb:c2:f5:85:1d:2c:18:
41:66:01:1d:f5:e1:d1:ec:37:b7:f0:37:32:e2:4c:
26:21:a1:59:eb:ae:22:7a:f4:47:f1:ea:9c:0a:95:
0e:32:10:0d:ce:b7:fb:b7:8e:31:e3:78:41:df:50:
8e:46:49:03:93:fa:8d:1e:7d:b7:fc:80:a8:f7:80:
69:16:87:eb:b1:6a:ca:f4:9d:86:92:4b:ef:f7:2b:
7d:b3:cc:23:e7:17:5b:f9:29:f5:78:a7:4f:58:89:
9d:2d:08:2e:0b:d7:90:37:e0:87:6a:04:b9:f2:02:
61:06:14:af:80:e9:26:72:81:c0:bb:1c:c0:4d:ec:
fd:8a:3f:76:16:a9:c0:71:a1:21:15:9c:06:2d:64:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:E7:35:25:60:A1:3D:54:6E:DC:5F:A1:78:6C:65:0D:9F:B6:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bRbnNSVgoT1UbtxfoXhsZQ2ftr0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:f6:af:25:80:4b:e4:9a:4a:e3:91:9e:ff:19:89:f3:12:20:
dd:fa:c1:90:b5:e9:af:88:31:c9:75:1a:22:3b:28:2a:e1:3f:
9e:a2:dd:b9:9c:85:6c:37:20:9b:b7:e1:cc:c1:6f:05:57:3a:
3c:b0:b5:db:31:63:86:1c:c6:e8:e1:b8:41:b9:71:3f:f9:96:
55:d3:86:57:e2:76:8b:30:b1:b4:b7:08:a8:8f:44:1d:8e:dd:
3a:cf:5c:74:4c:d3:53:9a:01:84:ee:f5:a7:0b:f8:7b:76:d3:
fa:e2:60:b1:aa:14:67:c4:04:83:39:92:02:fc:c0:10:32:a5:
93:14:df:02:aa:1a:7a:ba:bf:62:2d:00:94:33:b4:fe:09:f4:
69:b3:b5:20:27:b4:a1:4d:26:ac:8e:c5:4f:27:c2:20:7e:25:
2e:be:0a:a6:34:41:f3:7b:03:6f:06:e0:ae:49:23:c4:d1:45:
d1:a9:2e:ff:c8:a0:57:3c:a5:09:38:fa:68:06:4c:05:62:a2:
73:c4:94:3d:5f:18:51:2e:f5:8a:66:29:df:94:37:e9:25:a9:
88:e1:7a:bb:88:85:c5:80:1f:8e:6d:9d:76:df:d7:01:ac:29:
66:6a:89:02:04:f4:32:4a:f0:c4:f3:88:9b:b0:23:4e:af:72:
ca:bc:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org