Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g689o9IWrZjTqTOIPO-BLJ8dQ7s.roa
File: g689o9IWrZjTqTOIPO-BLJ8dQ7s.roa (raw, json)
Hash identifier: +ny/sDykyRA/LG+fkt71Qo6ATIbp0PY9yiAJGp1Y6mk=
Subject key identifier: 83:AF:3D:A3:D2:16:AD:98:D3:A9:33:88:3C:EF:81:2C:9F:1D:43:BB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FDF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g689o9IWrZjTqTOIPO-BLJ8dQ7s.roa
Signing time: Sun 05 May 2024 01:53:59 +0000
ROA not before: Sun 05 May 2024 01:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20447 (0x4fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 01:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=83AF3DA3D216AD98D3A933883CEF812C9F1D43BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:7a:e7:e3:93:c4:8b:0c:3a:b4:ce:74:5d:
e8:d5:1d:84:70:c1:d9:07:3e:48:83:6a:7e:d2:c2:
2f:2a:fd:20:03:4b:f1:20:5a:3f:66:84:e7:6d:8d:
bd:7b:15:eb:fc:13:27:24:8e:0f:e2:a3:da:1f:df:
9c:15:5f:f7:e9:a1:d6:62:03:ec:57:7d:55:b0:a1:
3e:71:30:37:22:2f:1c:a9:6c:ec:48:bf:2c:16:38:
cf:fa:12:59:98:b7:a5:41:61:01:b3:78:f1:88:2e:
e9:9b:98:98:9c:3a:cb:c8:5e:b2:ba:a3:4e:50:10:
fa:75:06:9f:3f:18:5e:db:a5:92:8d:7b:c2:f9:87:
1a:09:b0:ec:0c:59:c5:4c:16:b0:d1:b0:2b:fd:93:
27:a7:e8:7a:b2:62:b8:20:f9:f7:1c:ca:e5:ae:7b:
a0:63:1c:f5:6b:90:8a:f3:9e:0e:e6:3a:00:ca:b5:
ca:8d:75:14:f9:3c:eb:fa:57:2a:60:82:b4:99:6d:
c7:c2:c5:35:7b:c0:b1:ab:8f:aa:e3:a2:63:03:b8:
de:eb:bc:9a:76:4d:12:d2:2b:9c:cc:0c:91:b7:e5:
14:7b:f8:b5:15:5b:50:18:e4:85:fe:26:fa:63:4a:
a2:27:52:22:0a:dc:a3:8b:65:c3:1e:38:90:2b:63:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:3D:A3:D2:16:AD:98:D3:A9:33:88:3C:EF:81:2C:9F:1D:43:BB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g689o9IWrZjTqTOIPO-BLJ8dQ7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
54:e5:0d:38:04:84:48:7b:bc:7a:22:f2:70:35:f4:35:43:5f:
66:73:3b:6b:de:82:d4:03:eb:64:74:07:e3:50:1e:ce:98:ae:
97:b5:dc:1b:ab:57:a4:38:de:a5:97:a6:ed:a5:a7:64:0d:a3:
26:b2:5d:29:5c:0d:79:21:dd:87:e0:d0:8c:48:a2:60:23:00:
90:37:f9:b2:d8:af:f2:d2:09:33:90:d5:b7:35:46:66:01:5b:
11:c0:d3:fe:fa:ca:83:4a:40:c2:5b:09:6e:9b:a1:aa:0e:da:
84:de:e3:dc:fa:0f:0e:d1:0f:5a:47:c0:46:a1:33:9a:0b:b7:
49:9f:13:cc:4b:fa:49:9c:a2:48:c4:f9:fc:3e:d1:e9:5d:b6:
db:a8:b0:a1:c3:d9:dc:c4:27:c8:28:75:3d:8f:04:4e:25:69:
e5:83:d7:b9:77:c2:fd:8b:52:8b:30:82:9b:ea:5d:d1:8b:1a:
9e:83:15:4b:a1:8a:49:39:ee:6d:56:1b:8f:e8:87:a6:ec:00:
ff:58:fc:cf:bb:70:30:7d:73:d3:c0:fc:8a:df:e0:9f:04:19:
d4:15:52:3e:80:a9:a7:cf:e0:b9:88:9b:e1:3a:be:b9:c3:4c:
97:a6:57:95:08:cd:4a:6f:49:e3:af:46:29:78:94:80:58:11:
ba:18:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org