Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nCCYDC1Q3cS1goWTyMVXmI2o7Rg.roa
File: nCCYDC1Q3cS1goWTyMVXmI2o7Rg.roa (raw, json)
Hash identifier: kbrSH4hW5kc6c2dKRAtOpC3jsv7vKuyayDLEBgzwzc8=
Subject key identifier: 9C:20:98:0C:2D:50:DD:C4:B5:82:85:93:C8:C5:57:98:8D:A8:ED:18
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 546F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nCCYDC1Q3cS1goWTyMVXmI2o7Rg.roa
Signing time: Sat 11 May 2024 03:54:01 +0000
ROA not before: Sat 11 May 2024 03:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21615 (0x546f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 03:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C20980C2D50DDC4B5828593C8C557988DA8ED18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:bc:ba:e5:a9:61:28:ad:b4:a1:f0:58:4b:
6a:a5:7a:0c:80:08:b1:4a:af:ab:11:08:1e:90:2c:
94:10:d0:a7:39:f2:5c:8c:57:ac:df:3c:eb:74:10:
fc:60:1e:f5:c9:26:06:15:8b:2c:ee:7e:b3:90:f0:
9d:7f:29:58:55:b8:51:39:7e:af:46:52:bc:08:26:
c1:f4:c4:f5:d7:4c:4a:21:00:57:31:29:d8:02:7c:
64:0b:73:47:0b:89:a3:9a:50:98:f8:34:7e:61:ba:
ec:b3:f2:e8:a3:b7:95:5d:ed:34:79:c0:8c:aa:ac:
29:38:d0:e9:9b:71:6b:b3:18:4c:47:68:a4:56:fe:
7c:37:b3:f4:7f:72:d2:14:c6:4c:58:d3:1e:ea:24:
0c:12:4a:2c:1b:38:82:c4:6a:40:bc:c4:fc:07:28:
dc:08:21:4e:59:e4:2d:82:5e:c7:ea:6e:9f:7e:05:
ef:fd:58:72:27:90:fb:b6:9e:ca:ce:a1:c3:90:f5:
fd:94:5f:e4:3e:49:50:ec:37:9b:51:cc:76:5c:fc:
64:f5:60:20:85:18:15:56:3d:45:83:db:ac:7b:90:
b8:f0:34:75:46:e7:cd:a4:22:64:f6:90:9b:60:6e:
06:57:f4:6d:6c:23:c3:c2:8c:c4:be:fe:3b:19:dc:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:98:0C:2D:50:DD:C4:B5:82:85:93:C8:C5:57:98:8D:A8:ED:18
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nCCYDC1Q3cS1goWTyMVXmI2o7Rg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:7f:00:c2:b5:82:bb:40:6e:7c:0c:78:8b:e4:ce:44:6e:2d:
09:1f:f0:ea:4c:b6:19:34:12:49:f5:e8:4c:3a:00:82:dc:99:
4f:4b:90:23:b0:28:fa:62:41:03:33:82:76:8d:20:8e:21:b7:
21:c1:73:26:80:7d:06:2d:9e:e7:79:18:e3:e3:06:e0:54:c3:
41:09:96:0b:51:38:42:b1:83:e2:22:72:1e:a7:18:c1:c8:da:
36:77:08:24:9e:fe:d4:03:2b:1b:62:39:df:4e:e4:ca:32:b6:
ef:fc:dd:66:82:a4:45:37:74:8e:e3:d3:4f:c3:5f:a3:fa:f5:
74:9f:06:08:ba:b9:fc:48:79:7c:1f:ae:82:87:4e:9f:ce:66:
bf:ec:c7:36:bd:16:38:7f:aa:29:72:91:9b:71:22:9c:53:ef:
86:d1:3c:9b:29:7c:37:4d:12:2b:e1:ad:bc:eb:ac:ba:86:2f:
70:cd:63:ca:0c:c7:8b:fe:4e:34:76:5b:6c:f1:36:4c:49:ef:
39:1a:e8:28:ca:4b:3a:00:4d:8f:24:19:4d:0e:c2:b9:30:c7:
79:96:0e:ce:ab:58:e8:fb:6d:98:3f:d0:97:06:1e:91:87:ad:
32:b5:b8:4e:1d:a5:78:f1:5a:c7:a5:da:8a:09:e6:96:09:14:
47:cb:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:09 2024 by rpki-client on console-ams.rpki-client.org