Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oMH3rRIMU-qmPpMpU2L_Ycb2mIg.roa
File: oMH3rRIMU-qmPpMpU2L_Ycb2mIg.roa (raw, json)
Hash identifier: 0aWdsuIDUQ1mUjgVagmMecTmGtUZcVlRRgrXSyuEyNc=
Subject key identifier: A0:C1:F7:AD:12:0C:53:EA:A6:3E:93:29:53:62:FF:61:C6:F6:98:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oMH3rRIMU-qmPpMpU2L_Ycb2mIg.roa
Signing time: Mon 13 May 2024 03:24:07 +0000
ROA not before: Mon 13 May 2024 03:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21995 (0x55eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 03:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A0C1F7AD120C53EAA63E93295362FF61C6F69888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:56:57:30:c9:50:9c:86:6b:d9:04:97:60:
b9:44:e6:ad:c3:cb:e3:97:6b:3f:6f:99:e4:91:2a:
90:fc:33:4f:d6:64:b9:18:81:b0:7d:95:e1:d6:6e:
32:d6:25:db:d8:f6:75:38:fd:a2:62:67:1d:fa:d4:
6a:29:40:0d:8e:80:96:4f:5c:ac:47:63:9e:39:54:
fe:87:4d:45:c2:57:1b:1a:78:2c:66:2d:c1:7d:f1:
42:ba:58:ac:2b:12:53:41:a5:a9:1f:b9:92:ec:07:
07:e9:64:f6:ac:fe:69:c2:83:88:96:af:ad:fe:6b:
94:3e:c2:6e:72:5a:3d:28:2d:9a:e3:81:02:c0:ad:
32:77:4d:a7:a7:17:bd:4a:e4:d6:64:22:a0:f1:90:
a1:09:9f:4d:50:25:59:c9:33:52:19:fa:0b:94:00:
e5:56:cb:cf:4f:38:13:b3:b5:22:e8:8f:5d:3b:66:
eb:82:b6:ee:9a:fd:6a:7e:10:7e:78:09:4c:ee:20:
f4:21:a4:e7:af:db:66:61:c0:de:27:58:92:ec:44:
ec:a6:91:15:d8:02:c4:b9:a6:47:c8:e3:e7:a9:17:
72:e3:8d:8b:19:b7:9e:64:e0:ce:c8:16:a4:e8:a9:
5f:72:3a:ad:0c:10:af:8c:ea:c6:f1:4e:e5:bc:3e:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:F7:AD:12:0C:53:EA:A6:3E:93:29:53:62:FF:61:C6:F6:98:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oMH3rRIMU-qmPpMpU2L_Ycb2mIg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:bb:38:46:a2:28:ce:68:4d:92:82:91:a6:2e:e6:5b:73:cb:
0e:d0:19:88:01:10:6a:13:f5:2c:6c:4e:ed:1d:6c:b0:35:89:
cb:33:eb:5c:00:2d:1a:08:1a:1f:d5:25:99:8a:af:46:36:39:
d6:ed:bd:07:bf:73:47:4e:c7:a7:0b:7b:ee:9a:93:58:83:2b:
67:45:6d:67:2e:f7:53:b0:7a:75:cf:71:7e:5a:c8:f5:0f:93:
77:96:69:cb:97:2e:79:f0:9a:08:04:88:80:13:eb:91:eb:63:
29:3a:4a:8e:07:52:f8:9d:8b:24:7d:7e:88:69:0a:f8:09:76:
3d:94:e0:02:6a:a3:07:a8:5a:41:5b:5b:84:dd:14:ed:d3:a8:
6d:c3:b4:6d:b6:02:f9:00:bc:bb:9c:06:02:08:2e:07:e3:83:
58:32:fc:8b:8b:bb:dc:18:3f:29:4e:94:ab:54:73:51:de:e8:
a1:d8:83:b5:7e:ad:20:09:54:a7:3c:b4:70:75:2d:6d:8a:f3:
6b:c0:ca:76:7e:14:99:c7:b8:06:0c:ef:e1:07:fe:62:e1:da:
ba:6d:24:0f:2c:35:cc:94:9c:a7:ec:44:8a:1f:a3:b0:38:bc:
06:66:19:ad:11:6f:4d:7f:27:e5:ef:b8:06:cc:86:17:7d:0e:
5c:c5:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:46 2024 by rpki-client on console-fra.rpki-client.org