Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lmoAyIZQ4DUIn-WNHGolYwjoxQw.roa
File: lmoAyIZQ4DUIn-WNHGolYwjoxQw.roa (raw, json)
Hash identifier: RUracV4erHcIZPp+z6kBfMJUifnaHAlPftGY1oOwbzU=
Subject key identifier: 96:6A:00:C8:86:50:E0:35:08:9F:E5:8D:1C:6A:25:63:08:E8:C5:0C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3953
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmoAyIZQ4DUIn-WNHGolYwjoxQw.roa
Signing time: Fri 05 Apr 2024 00:22:24 +0000
ROA not before: Fri 05 Apr 2024 00:22:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14675 (0x3953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 00:22:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=966A00C88650E035089FE58D1C6A256308E8C50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:88:81:a6:2a:95:48:2f:2a:80:21:33:31:
ca:3d:f4:b6:39:65:37:17:77:98:60:0b:13:23:fb:
61:66:ac:37:9d:99:88:7b:32:36:e1:c2:b4:c9:b8:
6a:cb:89:ab:5c:8c:5c:4e:bf:cd:c9:c8:2e:31:df:
3a:fc:8e:de:bc:0c:fb:10:07:7a:c3:ae:26:1b:97:
6e:a9:86:ff:c7:72:2f:27:52:cf:93:6d:f0:ca:fc:
ec:ea:4c:34:c8:f3:c0:1e:a3:10:f7:6a:e1:09:cc:
d7:a7:00:cb:1d:8e:5a:c4:d2:8f:09:84:1f:6f:f4:
f5:4f:05:01:6c:14:77:23:c3:cf:9a:07:a7:18:ad:
52:8d:53:bc:38:87:3b:bd:fa:b2:8e:21:71:96:76:
41:58:8c:50:7e:ce:b2:6c:53:5f:ec:01:c0:74:a3:
32:b6:5e:97:4e:e2:8d:24:aa:e1:10:5c:32:7c:b1:
4b:95:9c:9e:0b:43:f3:7d:0e:f9:6f:6b:f0:06:30:
5e:36:c8:97:c1:3d:14:d6:a5:0a:dc:8b:99:56:18:
37:c0:1d:96:73:c5:83:e7:70:0f:45:63:33:62:54:
4f:92:9d:06:f9:29:c1:8d:27:d1:f6:e7:80:06:88:
79:10:0c:0c:cf:10:b2:35:1e:9c:ca:51:12:2b:1e:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:00:C8:86:50:E0:35:08:9F:E5:8D:1C:6A:25:63:08:E8:C5:0C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lmoAyIZQ4DUIn-WNHGolYwjoxQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:12:5e:7b:61:d3:3b:f6:d9:f4:e1:02:45:0f:ee:24:c0:47:
9d:74:b7:7a:9e:9f:af:ae:5a:95:c5:4a:3b:7d:05:21:57:f7:
9c:2f:b2:3c:85:04:b0:54:5a:f5:88:c1:01:20:b7:d3:7c:bd:
5c:f7:30:9d:bb:d0:be:4c:ef:01:b1:10:51:9b:24:02:c3:a2:
c2:06:70:c5:71:ca:dd:31:d9:07:2b:98:fb:c5:b4:b1:51:3f:
d2:41:bd:5f:3b:2c:62:c5:bb:10:f1:8b:eb:60:3b:06:a7:f2:
96:68:dc:dc:66:63:b0:ad:6d:c0:f6:ac:35:07:dd:76:ae:4b:
ac:80:cb:06:16:a7:bf:41:d6:1a:57:09:6b:e8:fa:bf:ec:fa:
e4:1d:7b:fd:9a:9e:e0:86:e6:e7:72:f6:88:a4:45:b1:22:a0:
1f:bf:6d:e3:06:3d:6e:4a:fb:8f:75:d5:67:18:00:e6:3b:b6:
29:65:8f:4a:cf:cf:4b:82:95:8a:cd:a7:b3:9f:28:76:c1:d1:
53:93:ff:68:da:a7:73:e3:ff:c4:c6:3a:89:5e:07:81:2c:2d:
77:69:e4:57:0e:cb:de:f1:fa:a9:11:c2:0d:32:a8:bf:92:a0:
b9:7e:17:19:16:66:eb:7e:c1:d0:bf:83:ab:cf:00:20:88:b6:
de:a3:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org