Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gFT5BWNwRQSjv5C07RVZgq0kG0w.roa
File: gFT5BWNwRQSjv5C07RVZgq0kG0w.roa (raw, json)
Hash identifier: bgpfRTxFBzI9s1bmWTWI75POpIlFTe9eES9amyphDwE=
Subject key identifier: 80:54:F9:05:63:70:45:04:A3:BF:90:B4:ED:15:59:82:AD:24:1B:4C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CD3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gFT5BWNwRQSjv5C07RVZgq0kG0w.roa
Signing time: Wed 01 May 2024 00:23:39 +0000
ROA not before: Wed 01 May 2024 00:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19667 (0x4cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 00:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8054F90563704504A3BF90B4ED155982AD241B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:8f:4c:35:1c:9d:73:3b:60:63:2d:7d:47:
06:74:a2:da:3f:2a:e0:30:96:33:33:e3:c4:7b:c1:
10:f7:2f:7a:56:02:0a:66:45:35:92:32:d2:b5:16:
35:d7:e7:e1:c4:c4:ac:13:f6:4e:50:3b:ee:7e:16:
fe:19:d7:40:b7:37:b1:89:bc:07:6d:83:ea:dd:da:
60:d6:f1:5c:be:be:d7:cc:a9:3f:32:d0:63:d9:4f:
60:b4:42:27:47:2e:69:a3:f7:ad:9e:77:38:37:a6:
78:06:0c:38:97:70:0c:0e:d9:5f:83:f4:d1:69:6c:
a6:4e:f3:34:4c:0b:4d:e6:e9:9b:bb:80:c4:ea:7c:
53:f8:2e:23:49:08:e3:dc:8a:ca:97:8e:25:22:e6:
8f:35:fa:89:a7:fa:ea:a9:9f:f5:87:bf:f4:ff:73:
4b:4a:d1:14:b7:d1:d1:ed:5d:c5:fe:14:8f:28:05:
0d:a9:83:8b:36:ec:88:b7:cb:8a:dc:13:a6:40:b9:
15:b0:11:47:5a:17:80:19:92:e7:3a:5a:5f:90:43:
35:c4:d8:ac:f1:e1:f0:fa:57:f3:b4:b7:f6:3f:5b:
cb:58:e3:9e:a7:39:5c:a8:51:f2:21:5e:a7:35:de:
f2:d9:40:d2:1c:19:0c:cb:d6:ab:1e:bd:21:dd:58:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:F9:05:63:70:45:04:A3:BF:90:B4:ED:15:59:82:AD:24:1B:4C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gFT5BWNwRQSjv5C07RVZgq0kG0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
78:ce:80:ae:8d:b1:73:23:93:76:4c:14:c1:04:76:de:d7:4b:
94:d3:3d:ad:1d:11:29:13:fb:f7:5b:2a:54:eb:57:fa:51:81:
a8:71:0f:a6:3a:61:8a:f7:fc:a3:47:93:6c:3d:26:f2:c8:e8:
11:51:ca:96:48:e4:fa:53:48:25:5a:84:af:a4:00:ab:f7:9c:
28:56:59:8f:e2:11:ba:77:ee:2f:5a:30:df:1c:49:19:f5:7e:
0b:9a:80:b9:fc:fb:6a:3f:5a:82:d4:7c:cb:80:61:41:e9:ef:
93:3f:ea:44:2c:13:b4:0b:f7:3a:45:74:2d:ef:7a:c8:03:81:
64:a4:f8:8b:83:f7:44:37:63:c2:06:66:f2:76:bb:c4:e6:2b:
57:9a:b4:8f:df:42:86:90:9b:06:26:f1:99:9e:fd:a3:d6:3c:
2f:36:13:e2:90:28:5b:ba:b3:12:e4:0c:35:59:3f:65:7d:03:
f2:3e:a4:8f:26:04:fc:81:68:0d:ce:1a:0c:8d:59:02:26:0a:
2f:ca:a6:13:fa:ae:30:d7:0b:25:cc:63:04:8c:05:46:b5:49:
1c:c9:91:19:06:9a:d1:c1:c7:a8:af:da:2e:e2:53:88:59:fd:
9a:01:ad:bb:3e:43:0e:aa:71:83:3a:da:31:14:0b:cb:ac:5b:
69:57:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org