Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gIjD1DIh3snPxeeZtOKJf3qlqNI.roa
File: gIjD1DIh3snPxeeZtOKJf3qlqNI.roa (raw, json)
Hash identifier: pKfZq6i/IiELQGDI68DMiyrPoAAqqLmHxNoekiN5fFE=
Subject key identifier: 80:88:C3:D4:32:21:DE:C9:CF:C5:E7:99:B4:E2:89:7F:7A:A5:A8:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 504F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gIjD1DIh3snPxeeZtOKJf3qlqNI.roa
Signing time: Sun 05 May 2024 15:53:50 +0000
ROA not before: Sun 05 May 2024 15:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20559 (0x504f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 15:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8088C3D43221DEC9CFC5E799B4E2897F7AA5A8D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:40:8b:34:46:90:f1:24:0d:01:45:d7:23:
33:87:20:b3:96:16:c6:56:84:f6:4f:0e:02:92:76:
f1:e0:bf:9a:c5:23:cb:c2:7b:8e:03:a9:0f:75:94:
32:05:14:a4:5d:62:9a:a4:9b:2f:d6:e5:8c:3f:8a:
42:63:49:3d:f1:f6:7c:eb:ed:dc:68:70:e2:d0:0c:
e8:80:d3:51:37:cd:a3:31:b1:0f:53:ef:df:c2:51:
77:9b:10:fb:18:b3:91:a4:06:c7:a1:fe:0e:c9:54:
2f:35:8e:16:3e:be:30:31:57:cd:fe:29:25:28:ec:
9a:b4:01:46:83:7d:1e:d7:36:2e:09:15:37:f1:68:
db:eb:dd:51:4c:42:ad:1a:b8:3f:6b:de:52:1f:1a:
c7:a4:c0:ae:04:1d:f4:4e:94:92:05:66:2f:ab:1c:
16:ad:2f:bd:20:77:2c:c3:64:b1:d6:1e:ab:dc:45:
fd:5b:f3:79:b7:30:b4:db:0e:79:26:1d:3d:a4:7b:
d8:0e:f3:60:15:5e:65:18:71:71:08:f0:0f:bf:4b:
8c:29:5a:72:4b:48:bc:1b:d3:81:92:32:fd:91:e5:
87:7f:44:fc:f8:23:0c:4d:69:be:cf:a4:95:3c:8c:
77:bf:27:e3:05:83:90:4b:eb:7c:ae:01:26:ad:91:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:C3:D4:32:21:DE:C9:CF:C5:E7:99:B4:E2:89:7F:7A:A5:A8:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gIjD1DIh3snPxeeZtOKJf3qlqNI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
78:93:f7:e9:dc:dc:8d:7b:e2:30:7b:0c:b7:d0:4c:d4:f9:07:
99:7f:86:c3:ea:f1:3a:2f:d9:38:7c:55:3f:d2:6c:f6:5a:39:
f9:88:59:6a:c0:a5:e6:6a:95:7a:c8:af:fb:3c:cd:e0:8c:d2:
97:8d:fd:6d:bd:bc:78:8a:09:63:54:66:17:7b:b9:49:87:8a:
00:5b:21:b0:12:d5:32:09:7b:33:ed:9d:24:f1:43:cf:71:a6:
d9:77:39:c1:37:0a:da:ff:d5:e4:6c:fa:85:f1:a8:da:1f:20:
f1:b5:69:e9:47:5d:bb:48:fc:52:d3:55:ff:39:f3:dd:03:f8:
3a:84:5a:20:6e:23:49:b8:19:6c:2d:24:16:e8:82:fa:77:31:
63:cd:5c:b2:c0:5d:84:d0:b5:1e:7f:43:8d:5e:55:a9:b0:f1:
5a:ef:b6:cd:9b:7b:17:95:ad:c0:80:a8:65:65:b4:a0:c7:cd:
c6:c1:2b:45:27:1f:e7:83:58:d7:95:14:2d:f2:24:8e:55:b2:
91:4f:a0:be:ca:95:94:d5:48:0c:40:16:b5:d2:91:83:a2:bb:
f7:3b:0f:83:d4:90:d4:52:b4:2f:04:61:63:01:58:fc:e1:ce:
8e:45:fd:97:c3:ec:c6:24:f0:b8:68:5e:77:75:4c:67:a2:53:
1b:ce:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:39 2024 by rpki-client on console-fra.rpki-client.org