Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nfc76ki6Llp6B3QBBIiT-WFu3PA.roa
File: nfc76ki6Llp6B3QBBIiT-WFu3PA.roa (raw, json)
Hash identifier: b6AK7VPWJVyvaNdTGogeJQhKuOWIBU3NgB/co8fDvd0=
Subject key identifier: 9D:F7:3B:EA:48:BA:2E:5A:7A:07:74:01:04:88:93:F9:61:6E:DC:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B9F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nfc76ki6Llp6B3QBBIiT-WFu3PA.roa
Signing time: Mon 08 Apr 2024 01:52:37 +0000
ROA not before: Mon 08 Apr 2024 01:52:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15263 (0x3b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 01:52:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9DF73BEA48BA2E5A7A077401048893F9616EDCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:60:ab:71:e7:92:05:4f:99:55:bc:9b:b2:
23:a8:dd:c2:91:31:9f:60:04:ca:3b:c8:63:4f:ba:
39:ba:a5:1d:f9:50:28:e0:45:8f:40:6c:43:f3:4f:
96:6e:62:07:38:7b:f7:dd:11:e9:29:2b:3e:61:f6:
a5:ba:90:62:4d:27:79:da:b1:0c:12:cf:13:8d:6c:
02:00:26:4c:68:f6:af:c3:6e:4d:ce:0f:f4:13:97:
ca:aa:21:8e:43:64:b6:05:c7:07:bf:56:50:8d:83:
53:76:a0:40:1e:3e:0f:1e:51:69:f0:56:d4:71:69:
76:3c:02:86:fc:20:1f:8c:99:44:80:1b:27:91:4a:
cf:fd:bb:07:e8:fc:45:e0:30:b9:3b:ac:f6:65:e9:
fd:c5:f8:8d:c1:93:fb:5f:fa:51:4d:ad:d2:1d:07:
b1:94:cf:18:d5:bc:6d:f6:4d:dc:d9:4f:8e:8d:4c:
48:55:06:1f:3f:cb:04:54:1a:66:85:58:5d:06:2f:
e9:9c:88:d3:8e:6f:f1:a2:ed:9f:b8:2a:dc:ca:c4:
fc:42:d2:b5:5c:f6:b9:be:3d:a6:6d:3b:7b:39:60:
c5:05:5d:d2:df:2c:83:83:97:61:6d:cf:97:ed:28:
ac:d7:17:1e:62:a6:fd:f6:41:25:49:49:82:b5:5c:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:3B:EA:48:BA:2E:5A:7A:07:74:01:04:88:93:F9:61:6E:DC:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nfc76ki6Llp6B3QBBIiT-WFu3PA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:a7:bf:04:2d:b0:b7:09:bc:de:64:b3:9c:f0:9f:26:1a:17:
b6:15:db:00:80:37:22:b3:b3:d5:8a:4d:50:8d:ef:13:33:09:
e1:c5:8c:71:d2:92:b9:e3:70:40:0f:76:34:89:4d:af:c6:9d:
b7:06:27:47:2e:05:c1:9c:a2:3e:4d:a9:4c:3c:f9:f9:97:e5:
7a:04:8b:96:8e:fe:c1:e1:97:52:3b:0f:cb:2e:39:b8:39:15:
16:f7:69:6c:64:7b:0d:73:de:9d:8b:d3:5b:29:8c:87:72:13:
bc:30:88:25:84:4a:ba:97:b7:b2:f8:25:0b:a0:44:0c:97:7e:
10:ee:d8:93:d7:85:68:16:eb:9c:8b:8e:6d:be:d5:3c:ac:b9:
ac:81:1e:54:b6:6b:9c:fe:1c:b1:52:71:61:6d:9f:97:12:a0:
6d:4d:a4:31:3f:0c:f1:63:85:be:7a:77:97:ac:a0:12:8d:7b:
5a:ba:93:fa:e9:d9:be:2c:c8:0e:84:02:9d:09:8f:d3:a5:9b:
d3:1e:9b:ff:b0:f4:0c:b9:5b:93:e8:5a:92:47:38:fc:2b:b4:
ad:bd:1d:95:6c:a1:d8:0b:fd:72:3b:8d:fb:93:d3:6f:6b:d7:
78:02:01:9a:1e:3a:98:ea:09:25:e3:bf:4c:60:56:1d:95:16:
2f:f3:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org