Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mUmUSLECnnzecfx3ZJpLw3DM9m4.roa
File: mUmUSLECnnzecfx3ZJpLw3DM9m4.roa (raw, json)
Hash identifier: 5ql7JmLgg5aYlhoJKdhsPPxJtyf0ijwSd4Gaff5Bn5w=
Subject key identifier: 99:49:94:48:B1:02:9E:7C:DE:71:FC:77:64:9A:4B:C3:70:CC:F6:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 430F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mUmUSLECnnzecfx3ZJpLw3DM9m4.roa
Signing time: Wed 17 Apr 2024 23:52:58 +0000
ROA not before: Wed 17 Apr 2024 23:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17167 (0x430f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 23:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=99499448B1029E7CDE71FC77649A4BC370CCF66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:e9:58:ba:8e:4d:4e:8f:4a:e3:7f:df:7e:
3f:a4:de:44:94:5c:35:a6:8b:f8:2f:46:66:9b:26:
6a:11:0a:5d:68:6e:7e:bf:7f:5a:e4:51:6f:e5:29:
94:40:33:d1:d5:04:b1:ec:9c:2d:30:51:d3:d5:5e:
dd:51:40:69:cc:d9:40:ec:cd:f9:f6:c1:54:d8:b9:
96:45:28:bb:40:b3:b9:16:a4:f2:9f:08:40:d2:ed:
15:d3:84:22:2a:cd:1f:56:ca:5c:ab:6d:ce:9a:57:
d0:41:b3:18:4d:e9:ff:e3:28:29:a4:04:ed:ab:62:
35:40:27:27:39:0c:f4:5e:f7:ab:ee:61:ca:81:aa:
39:9e:7d:03:ab:26:44:e3:50:03:b6:63:93:33:a1:
76:19:42:9a:41:cb:e2:98:19:8a:df:31:a4:37:99:
8d:71:68:0b:cd:3e:a8:73:e4:22:52:52:5c:7a:47:
5a:93:34:02:35:ba:3d:cf:a8:04:2d:04:35:81:32:
4d:37:42:f3:71:49:64:b1:b0:a8:41:c7:4c:8f:98:
d7:c4:b3:63:91:e6:94:99:cd:61:93:d9:91:af:87:
f7:12:ff:3b:14:29:76:c4:6b:2f:f2:cc:78:43:37:
6d:b2:80:5a:c9:19:06:cd:05:c8:a2:d7:73:5b:4e:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:94:48:B1:02:9E:7C:DE:71:FC:77:64:9A:4B:C3:70:CC:F6:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mUmUSLECnnzecfx3ZJpLw3DM9m4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:56:de:3b:b4:ac:24:fb:18:fb:52:76:3f:86:0e:ba:6c:2c:
38:83:23:24:a7:3f:49:c8:33:d3:5a:89:b5:7e:3b:04:c3:37:
3d:55:71:da:21:b3:11:41:40:d7:55:c7:a0:c9:6f:e8:64:8c:
49:45:89:92:12:93:16:31:b0:94:f2:3f:7b:ca:af:f9:92:f3:
d5:90:6b:cb:13:77:72:fc:15:4f:f8:dd:6a:f9:a7:68:39:c7:
ad:88:68:5c:51:05:3d:c9:ba:cd:0a:4f:0e:e1:b6:2a:5b:44:
b7:19:4d:c6:75:ca:70:46:d8:28:3d:a7:36:c8:d1:64:4d:f8:
23:bc:64:f0:86:71:7e:75:43:b3:41:6a:38:22:32:cd:b8:fb:
fe:ed:0e:28:6a:3c:e8:66:d9:e7:1a:ce:c9:9d:c3:44:f3:38:
bf:3b:88:d2:68:a6:80:a6:97:91:b1:02:1d:8a:9a:49:28:29:
ba:af:0d:5c:f1:01:ed:0e:d1:29:80:d7:61:13:42:2d:19:34:
a1:85:9d:f3:d9:55:4c:c6:b3:e2:7a:73:df:0f:9d:69:73:ec:
4a:28:87:d4:b4:97:b7:2e:f9:53:c7:db:81:ce:45:14:4a:aa:
55:74:7f:7c:5f:df:85:2b:f9:80:ca:60:48:e9:2a:41:3d:e4:
52:ea:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:07 2024 by rpki-client on console-ams.rpki-client.org