Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kY-kJf_z5ItP1QOsNILx2N0f09A.roa
File: kY-kJf_z5ItP1QOsNILx2N0f09A.roa (raw, json)
Hash identifier: KhfRxAdisgC5S4Yb4VnHOhotJWKO3uxSIuSylqnLqps=
Subject key identifier: 91:8F:A4:25:FF:F3:E4:8B:4F:D5:03:AC:34:82:F1:D8:DD:1F:D3:D0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BDB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kY-kJf_z5ItP1QOsNILx2N0f09A.roa
Signing time: Mon 29 Apr 2024 17:23:30 +0000
ROA not before: Mon 29 Apr 2024 17:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19419 (0x4bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 17:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=918FA425FFF3E48B4FD503AC3482F1D8DD1FD3D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:55:cf:d7:f5:46:58:0a:5f:89:2c:ae:16:
38:e7:d4:10:45:d3:ce:89:a4:78:09:c0:b0:66:d5:
2d:7f:e3:ef:1d:27:33:95:79:9f:e5:d9:2f:b6:5e:
a7:59:4e:72:53:03:05:b5:bf:c0:cf:b1:53:cf:b3:
2c:f1:1c:02:dd:f0:76:b8:fa:ef:d1:f2:c1:73:0c:
24:38:41:6f:a6:3b:55:81:fd:34:ff:b7:ae:cb:ae:
d6:46:0e:c9:c3:7a:26:ba:9f:a5:8f:d1:41:9b:79:
cb:b9:13:54:64:cb:06:d4:f2:b1:f3:22:62:d6:ec:
66:97:34:83:9e:d4:79:27:cd:fd:34:d0:a0:db:03:
9f:b2:07:72:40:da:80:41:5e:aa:11:d5:83:4d:ff:
2d:98:5e:e7:75:46:7e:3d:01:59:30:47:c8:27:23:
0b:d2:6f:64:27:62:35:f8:ec:f5:c8:9b:c8:08:56:
cd:df:ce:44:b5:b9:d7:2e:49:58:10:34:d6:80:1b:
eb:50:70:9b:cc:92:ca:fe:36:74:db:24:41:33:07:
a6:99:ab:7a:23:7c:05:9e:4f:0f:31:6e:0e:db:90:
ee:a5:41:5c:cb:d6:64:c1:3a:d8:a6:73:76:b5:7e:
dc:87:05:e9:c8:c0:ba:8c:65:2d:80:5d:c6:f6:f8:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:A4:25:FF:F3:E4:8B:4F:D5:03:AC:34:82:F1:D8:DD:1F:D3:D0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kY-kJf_z5ItP1QOsNILx2N0f09A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:bc:e7:5e:8c:df:49:77:3a:04:fc:ac:26:6c:b0:67:6d:a7:
26:ae:7d:47:a4:6f:7d:75:90:9c:d6:60:9f:29:fe:a4:91:bd:
8a:48:72:33:b0:fd:da:c1:3b:bc:f7:dd:2b:4b:7a:0e:8c:49:
0c:03:f1:6c:e7:16:b1:5d:02:5b:15:fb:8a:1c:95:93:ea:bd:
23:4c:52:ac:ad:f2:f4:bc:27:fa:51:65:40:45:27:e4:0c:c9:
8a:aa:43:47:67:7d:2e:31:9c:43:23:f4:25:27:f3:54:ef:ed:
a0:62:c5:97:4f:d4:40:8a:51:d6:d6:aa:66:a9:69:e7:12:70:
1a:ff:a8:01:3a:3b:a7:8e:1c:62:01:86:97:7e:cf:7e:d3:45:
fe:46:7b:b4:ee:a2:30:c7:ae:4d:eb:02:80:a2:ab:6c:e7:3f:
f4:27:c3:85:7e:ae:48:bf:38:ff:d6:5e:8e:85:b2:79:8d:b5:
0d:93:3b:ed:da:61:c7:58:51:8d:af:d2:a6:99:ee:58:07:4a:
c7:ab:0e:80:e4:d9:3a:72:90:61:5f:22:a6:e1:6b:f9:b0:a9:
5e:a8:69:1f:48:f6:ab:3d:94:2a:32:d4:4c:c6:8e:e2:2e:0f:
46:21:b6:9d:6f:30:70:41:9e:26:42:84:a1:fa:3a:8d:c3:d9:
24:37:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:43 2024 by rpki-client on console-fra.rpki-client.org