Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/i6oQSytm1uuIa3LZ6oVG1_FX4wc.roa
File: i6oQSytm1uuIa3LZ6oVG1_FX4wc.roa (raw, json)
Hash identifier: zLDiwCnIVHxLn39ofPWBlXNHuF9Z2mcOkQSPz1X+Tds=
Subject key identifier: 8B:AA:10:4B:2B:66:D6:EB:88:6B:72:D9:EA:85:46:D7:F1:57:E3:07
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A5F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i6oQSytm1uuIa3LZ6oVG1_FX4wc.roa
Signing time: Sat 06 Apr 2024 09:52:28 +0000
ROA not before: Sat 06 Apr 2024 09:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14943 (0x3a5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 09:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8BAA104B2B66D6EB886B72D9EA8546D7F157E307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:ce:03:d1:1b:03:b6:c7:94:a9:ab:bc:e1:
b2:25:28:85:1e:c7:bc:78:6c:4b:46:19:dd:1b:95:
a6:92:31:ba:1f:4c:55:f7:5f:28:9f:fc:4a:72:20:
e5:8c:81:29:0c:d9:81:2d:58:37:92:99:57:f7:b3:
56:67:fa:c4:6a:f0:55:8a:c9:26:10:46:b5:40:1f:
db:88:f6:bf:9e:39:66:ed:d6:37:2a:48:70:3f:f0:
a5:ad:dc:f1:ad:ce:de:00:19:c0:dc:ea:d7:cf:e0:
08:bc:32:5b:f9:b8:bf:5f:39:41:02:dd:13:01:c7:
f8:0e:e5:d2:20:8b:95:99:2e:f5:12:f3:f9:cb:47:
ff:09:b7:82:95:55:a7:4e:8b:49:dc:0e:e5:34:9a:
1b:e8:10:74:26:6f:f3:c6:a7:c8:40:b4:3b:5a:8a:
64:21:1a:91:26:a2:f3:84:c2:e9:81:73:f3:f4:9b:
29:6a:9f:ef:08:6d:ae:c9:ef:0e:9c:9a:8a:f1:81:
9f:ed:cd:8a:d9:da:a6:c0:30:fc:3f:22:78:8e:88:
1a:80:55:69:70:e2:17:85:67:76:e1:b3:d1:3c:a8:
79:3a:fd:b7:ef:b7:df:c2:4e:ac:91:8c:5e:97:38:
fb:b1:d7:8e:2e:7f:2d:46:93:81:c0:24:89:5e:27:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:10:4B:2B:66:D6:EB:88:6B:72:D9:EA:85:46:D7:F1:57:E3:07
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i6oQSytm1uuIa3LZ6oVG1_FX4wc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:2f:89:b9:cb:93:5b:71:4f:85:94:84:1d:8f:d2:d0:6f:4e:
4d:0e:9d:56:4b:a2:d5:d1:73:7b:51:8b:05:0a:48:59:45:a4:
a9:e8:06:c2:d3:53:9e:8a:6a:bb:8d:c4:ff:22:f3:d1:61:b7:
fc:e9:24:fb:c5:fa:89:ad:f8:bb:86:b3:d3:b1:68:d4:0e:74:
f3:e9:15:6e:c6:9e:26:4a:66:a6:54:be:5c:ca:a5:6e:d4:ba:
e8:5b:eb:e0:c5:e4:85:cc:b9:73:4f:93:a1:6a:ae:eb:d8:76:
64:0f:96:b7:26:4b:ad:e0:ef:0b:f6:8c:e3:cd:3b:7e:11:b1:
a7:79:3d:24:bc:2d:be:8c:90:44:2d:6e:10:4d:3f:1f:4f:78:
51:4c:f4:f0:8c:32:56:5b:04:e9:b3:91:89:03:b1:63:78:7f:
30:cf:aa:28:1f:49:39:4b:98:6e:f2:74:d3:02:1e:3b:5c:24:
fa:5b:66:d5:10:e7:66:c7:eb:16:ff:b2:0e:eb:08:86:da:9d:
14:f9:8f:50:0c:50:09:85:73:fc:50:b3:d5:6a:60:ef:e2:87:
cc:a9:a5:9c:c9:e4:c3:f9:a8:e4:e8:1b:53:74:58:60:cd:21:
0e:26:ba:e9:df:26:3c:6e:c4:a5:b2:0e:82:f0:63:1d:e5:2b:
b5:2c:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:02 2024 by rpki-client on console-ams.rpki-client.org