Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oeJrHbRVLQ4Ljrz8R39ZrxCBPqw.roa
File: oeJrHbRVLQ4Ljrz8R39ZrxCBPqw.roa (raw, json)
Hash identifier: ujsscZJecze3pQrDc89wF1O9OgJYW0dNJL1ezYE2OrM=
Subject key identifier: A1:E2:6B:1D:B4:55:2D:0E:0B:8E:BC:FC:47:7F:59:AF:10:81:3E:AC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B7F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oeJrHbRVLQ4Ljrz8R39ZrxCBPqw.roa
Signing time: Mon 29 Apr 2024 05:53:29 +0000
ROA not before: Mon 29 Apr 2024 05:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19327 (0x4b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 05:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A1E26B1DB4552D0E0B8EBCFC477F59AF10813EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:1b:a8:f5:58:54:82:40:fb:56:3a:22:35:
80:0f:fa:de:f3:f9:71:fa:93:57:d3:1c:06:48:b4:
4f:36:7f:66:99:eb:8b:98:71:66:a0:e1:2d:b6:1d:
12:e8:e1:87:60:7e:aa:e2:ae:fd:68:53:d5:3b:5f:
f9:65:67:9c:c0:78:05:b3:0b:2f:42:ea:9a:c6:21:
0d:cf:df:2a:fc:73:35:06:e0:d3:29:2c:35:54:a7:
23:ff:24:71:e7:56:36:16:09:83:12:d7:3a:dc:22:
37:00:5b:bd:db:c1:04:8d:e7:2b:89:b3:78:bb:51:
82:51:67:8e:25:c4:13:fd:d8:dc:aa:30:71:e6:6f:
98:a4:09:32:b3:d5:8b:1a:92:21:6f:07:29:2b:d0:
e8:e1:df:37:eb:2c:0c:0f:db:02:92:f9:d2:7c:f5:
df:a9:65:24:36:43:49:84:90:5a:2e:98:9f:36:e2:
fd:fc:e1:9e:5b:59:f4:32:a3:ac:99:9d:59:89:64:
c9:42:55:33:9f:62:71:78:6a:7e:57:a8:50:d0:d4:
9f:78:f5:f5:8a:79:c1:15:a6:0e:d1:da:22:e0:2f:
d5:89:41:6d:05:e8:3e:c6:02:2e:ba:93:12:0a:a7:
ae:c5:be:8c:1c:ff:38:50:92:04:14:40:be:32:a3:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E2:6B:1D:B4:55:2D:0E:0B:8E:BC:FC:47:7F:59:AF:10:81:3E:AC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oeJrHbRVLQ4Ljrz8R39ZrxCBPqw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
77:af:15:2a:98:a1:8b:1c:db:99:13:d0:5a:32:38:b2:36:19:
fe:c6:ef:86:55:66:b5:a5:28:d3:10:1b:4a:04:a1:34:2d:5b:
cc:c0:a6:7b:e5:f3:f7:b6:14:88:63:d4:73:69:62:20:84:4e:
b6:f9:d9:6d:3d:bb:78:1a:8a:5d:26:2f:b5:35:26:2e:e6:63:
3d:ee:dd:68:63:86:57:b9:5b:d6:25:cf:88:07:49:6f:f8:ac:
f5:ad:25:88:d8:b8:55:1a:0b:dc:65:47:a6:c7:1f:39:88:9c:
84:de:f7:ef:33:dd:e9:cf:5b:90:f5:9f:fc:d1:2e:79:c3:9d:
c9:be:20:26:a9:b1:d4:c6:ce:f0:d0:fb:34:a1:29:98:77:f1:
89:94:22:c6:2c:cd:5f:e2:0e:20:46:1e:e4:de:da:8c:c1:a4:
b2:f3:44:d0:ea:eb:70:2e:1c:d9:62:58:8f:67:f4:7e:c8:61:
45:e6:8e:c0:87:b2:bd:c0:04:1e:6e:cd:4f:95:e4:62:6b:a3:
01:92:0d:e8:35:4d:8c:76:b3:b5:98:dc:ca:91:ca:52:40:e5:
00:a0:fc:79:33:f3:1b:ef:1d:79:28:cb:fb:e9:97:c6:c0:d7:
01:8b:e9:bf:ff:5c:51:2d:98:cf:e0:17:f7:74:3c:7b:84:87:
ca:d9:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:47 2024 by rpki-client on console-fra.rpki-client.org