Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nSq01X0auUnCHWI0ue0W0nXKqPs.roa
File: nSq01X0auUnCHWI0ue0W0nXKqPs.roa (raw, json)
Hash identifier: g7ZLFaZnqhV/sRlqvntKbWLwrxULwnSQrOV4E6jixKM=
Subject key identifier: 9D:2A:B4:D5:7D:1A:B9:49:C2:1D:62:34:B9:ED:16:D2:75:CA:A8:FB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 516F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nSq01X0auUnCHWI0ue0W0nXKqPs.roa
Signing time: Tue 07 May 2024 03:53:52 +0000
ROA not before: Tue 07 May 2024 03:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20847 (0x516f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 03:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9D2AB4D57D1AB949C21D6234B9ED16D275CAA8FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:39:d9:09:9e:57:c7:12:15:c8:24:fe:93:
67:b6:08:8f:50:a6:5b:74:62:3a:1b:2a:74:60:5e:
c8:25:2f:0e:37:50:54:d1:bc:cd:b8:42:f7:4d:b7:
00:da:6d:4b:87:97:24:d1:5e:ee:9e:31:4f:13:96:
76:25:52:78:8a:12:92:35:48:e1:92:fe:01:33:0b:
00:9d:60:4b:c9:7b:0a:bb:b9:5b:7e:bc:0f:e8:06:
71:c1:81:6f:a8:a5:c1:a3:8c:af:76:24:dd:93:66:
b9:dc:ab:22:33:c4:42:db:b0:64:80:00:bd:2a:1e:
40:31:45:07:84:0e:5b:ab:24:70:ef:66:1e:e0:ea:
43:ee:34:22:ea:bb:b2:9d:fa:ff:40:37:06:ce:b9:
f8:e3:33:97:d2:a6:b8:40:53:ec:ef:4b:32:7f:83:
e4:35:02:7e:91:83:79:d2:7c:47:5f:53:a7:5e:be:
6f:eb:09:d7:42:ae:33:9f:2a:42:34:45:d5:bb:25:
be:19:66:26:7a:82:b7:8f:5c:c2:9e:fb:40:5a:be:
b3:4f:c6:74:5a:76:31:d4:56:24:60:da:8b:89:9d:
81:17:90:9a:d5:0c:3b:66:36:23:ee:10:e3:a7:39:
88:ae:06:ea:ac:75:0f:20:57:89:7b:08:84:57:e7:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:B4:D5:7D:1A:B9:49:C2:1D:62:34:B9:ED:16:D2:75:CA:A8:FB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nSq01X0auUnCHWI0ue0W0nXKqPs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
83:2b:e4:4b:b4:f9:f7:90:66:ed:59:ce:28:ff:f7:43:a9:ff:
ef:0b:e1:2a:21:7b:d7:0f:60:c3:52:6d:02:bd:ae:13:a6:99:
f3:d8:bd:d8:39:ff:7e:4f:5a:03:98:46:21:e7:45:07:06:d9:
7e:19:15:c0:47:00:8c:62:c2:6b:ef:01:1a:59:0c:3f:cc:89:
5e:2c:a0:a2:4a:4d:ae:79:70:35:2d:5d:d6:95:9f:0d:06:7b:
03:2f:fc:cb:a7:27:aa:99:69:d3:66:6f:3a:c4:b3:51:16:37:
60:2c:8e:6e:0f:82:e0:cf:ae:f7:2d:69:18:5c:b5:3e:d7:d7:
37:90:d4:b3:ad:1c:b5:ad:83:c7:37:f6:8c:1b:24:0a:1a:13:
67:9a:0a:92:73:e0:e0:34:28:9b:55:64:6c:d0:be:61:37:4f:
09:ee:41:44:6a:df:95:20:a6:82:a4:3f:e8:bc:34:ad:6a:4e:
9c:f1:9c:02:64:65:1c:ac:b9:96:f7:18:f9:67:fa:19:e8:a2:
16:a6:8e:d1:56:50:8f:de:ae:aa:7f:a3:8d:0d:cc:1d:16:f6:
ce:d4:a1:a9:e0:0b:18:f2:e2:68:bd:f4:c9:d8:ef:b7:a1:9d:
19:60:67:d0:51:df:91:fe:b2:c8:39:43:d0:01:73:e4:e0:49:
4d:0d:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:45 2024 by rpki-client on console-fra.rpki-client.org