Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kCN0IoM5-T8iQ8HYRxrP0JyOe6E.roa
File: kCN0IoM5-T8iQ8HYRxrP0JyOe6E.roa (raw, json)
Hash identifier: 5B9aoZsRVeOCbQe9YAfB0DI8V4cPqrUoh1pxjIukS6s=
Subject key identifier: 90:23:74:22:83:39:F9:3F:22:43:C1:D8:47:1A:CF:D0:9C:8E:7B:A1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42A7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kCN0IoM5-T8iQ8HYRxrP0JyOe6E.roa
Signing time: Wed 17 Apr 2024 10:53:09 +0000
ROA not before: Wed 17 Apr 2024 10:53:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17063 (0x42a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 10:53:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=902374228339F93F2243C1D8471ACFD09C8E7BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:fe:e5:10:15:a2:e4:4a:cb:1f:54:ec:b6:
74:9e:f5:b1:a4:1d:c7:01:ec:7b:71:4c:9b:0b:10:
e5:cf:92:45:aa:a9:37:a5:8c:34:ef:86:df:d0:1a:
a9:9d:80:eb:68:0b:9a:77:66:71:e4:7e:81:45:32:
e9:b1:76:a0:c6:04:d4:4b:27:70:e6:29:ff:ec:49:
18:9c:af:71:ca:08:00:75:10:79:bf:be:60:41:df:
11:cf:45:9f:08:6a:85:d2:e5:73:7a:b8:d9:75:e0:
96:b7:fe:d3:f5:f8:9d:87:20:a9:6c:80:01:de:b2:
96:a3:24:1d:bf:21:7c:71:a0:ee:f6:33:b7:f7:2c:
3f:06:16:d0:3b:ae:0d:b1:dd:92:87:60:bd:fe:65:
d0:88:61:f0:22:5e:be:5e:9f:6c:6c:5e:d4:6f:19:
36:20:e8:c4:1e:2e:90:8c:30:a6:ea:b3:73:a4:cd:
42:5c:6d:78:ed:1b:40:7b:8f:8d:a4:24:82:1e:35:
53:12:9d:38:50:ba:ed:60:3a:8b:e0:15:d7:a5:37:
21:58:70:cc:f0:06:92:97:10:89:15:e3:f6:4c:61:
77:da:f3:b8:9f:e6:20:88:70:55:58:f4:55:9a:f1:
df:be:7d:0a:7e:dd:9d:12:b5:e6:18:ae:5f:e1:f2:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:74:22:83:39:F9:3F:22:43:C1:D8:47:1A:CF:D0:9C:8E:7B:A1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kCN0IoM5-T8iQ8HYRxrP0JyOe6E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
24:cb:1b:51:3e:76:21:a9:83:94:6c:76:b0:19:e3:3d:cb:0e:
2f:40:40:9c:6a:65:13:e6:6f:ad:72:13:07:40:d3:76:02:06:
3d:aa:18:dc:58:a3:68:8e:0f:de:cb:67:9d:0a:16:13:c6:2b:
c6:0a:f8:23:49:d4:6a:67:5a:50:26:3b:97:38:7a:89:a8:be:
b4:07:9c:23:f7:ff:4a:d3:65:e3:51:2e:2c:46:02:63:d9:14:
67:54:97:d4:fc:be:5b:cc:b4:06:45:6f:a7:43:14:47:f7:5b:
ca:bf:b8:ac:42:f3:7b:f2:4e:79:32:1b:84:63:d8:ad:c8:53:
33:1d:cb:3c:d7:0b:8f:9e:34:f5:6f:c6:6d:c0:90:bd:59:4d:
d6:6f:25:2d:68:54:04:79:7c:4b:de:5e:44:98:5d:c1:ac:df:
84:22:20:9f:3f:7e:6b:15:2e:1c:a8:47:79:7f:8b:f9:d1:77:
8d:8c:a2:cc:7d:88:d9:32:2f:0c:d8:95:9e:6f:cd:2c:58:84:
bf:eb:40:d2:f7:a9:1f:ba:d4:fe:98:da:22:f6:c9:32:04:38:
8d:96:b4:b0:63:f4:b7:b2:8a:52:83:d4:d0:52:61:94:1d:65:
f2:db:e9:93:42:dc:39:ac:0a:a0:aa:db:2a:67:26:cf:03:4b:
db:91:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:43 2024 by rpki-client on console-fra.rpki-client.org