Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qsbGCtCztYdB1SAggXqpIk6HzN8.roa
File: qsbGCtCztYdB1SAggXqpIk6HzN8.roa (raw, json)
Hash identifier: Ta1EctZUrteOaZRN8BLGEGMU9gRstVpCHBL053d9z7g=
Subject key identifier: AA:C6:C6:0A:D0:B3:B5:87:41:D5:20:20:81:7A:A9:22:4E:87:CC:DF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39B7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qsbGCtCztYdB1SAggXqpIk6HzN8.roa
Signing time: Fri 05 Apr 2024 12:52:26 +0000
ROA not before: Fri 05 Apr 2024 12:52:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14775 (0x39b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 12:52:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AAC6C60AD0B3B58741D52020817AA9224E87CCDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:83:54:e8:1c:d1:ff:bc:cb:2f:58:69:9e:
04:17:50:51:12:fc:98:8f:54:88:87:bc:b3:87:a5:
9d:a1:6b:89:6c:f3:a7:7c:bd:68:97:19:f1:44:dd:
da:7a:dc:24:c7:83:39:40:ab:2d:d5:e9:0b:81:be:
25:0e:4c:a9:95:5e:f2:f3:a1:e7:1d:d3:2d:d4:63:
ea:b4:8c:f2:ad:e6:49:8f:dc:6f:fa:27:74:e6:85:
53:ab:76:e1:99:50:bd:e8:4c:a4:c1:46:5e:f9:9d:
ff:e5:f2:6e:bb:20:4d:71:5a:16:32:da:fa:fc:17:
b1:92:48:80:0e:1d:58:ed:00:cd:bb:96:0b:a5:1a:
8a:70:2b:ca:fd:69:6b:e9:01:4a:aa:da:e7:45:d3:
82:eb:61:60:8f:b9:17:85:c7:f2:4a:be:86:d9:24:
ad:82:b5:93:0e:bf:35:f4:34:d3:99:e5:2c:fa:4a:
f3:ba:93:b0:ab:cc:d5:f0:71:09:fa:98:10:b2:e9:
18:61:da:e6:0c:36:aa:ca:c5:77:89:9f:5c:63:37:
00:b2:d0:eb:1a:4b:a9:8e:a2:e6:ce:93:ee:ae:7c:
de:73:58:9e:78:90:b4:58:5d:b0:5a:be:a6:7d:28:
de:7a:5c:52:65:21:68:5b:54:78:bf:a3:ac:f2:6f:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:C6:0A:D0:B3:B5:87:41:D5:20:20:81:7A:A9:22:4E:87:CC:DF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qsbGCtCztYdB1SAggXqpIk6HzN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
67:e3:dd:fe:32:ab:a7:22:e4:d3:5b:14:ad:98:e1:83:17:1f:
e2:3a:3c:f5:96:2c:67:0e:89:af:59:a3:da:1d:95:03:31:45:
22:a7:f8:cd:1f:87:11:e5:1f:78:d0:0d:be:b0:d5:74:91:32:
3d:ed:d6:d3:fe:0b:b5:62:a6:79:26:7b:74:be:40:05:87:ba:
2e:c3:e0:e3:b6:c2:9a:ba:b8:79:d3:8e:0e:df:d5:64:97:38:
37:7b:c8:74:b2:6d:34:ac:13:cc:c8:a9:a3:96:ff:c6:6f:74:
87:99:66:9d:40:d5:cf:8f:11:2f:5f:47:25:a1:f0:09:5e:cb:
24:59:1e:f4:89:c0:8e:0e:01:d5:d0:40:19:28:70:23:96:fd:
bf:42:78:b2:de:f6:69:c2:6c:c9:86:5a:3a:f7:c5:17:29:cb:
84:9c:83:94:85:f7:1b:f6:e0:c2:06:37:7e:2d:53:4d:05:5c:
21:ed:c2:73:ac:ce:be:ae:77:1a:aa:53:96:81:d4:4d:6d:50:
54:d7:4e:bc:72:8e:cf:cc:8e:18:dd:3b:9d:13:83:39:54:0a:
95:cb:9b:e7:40:8c:36:1e:9c:42:06:27:c5:b8:a8:78:a0:2a:
3c:73:ed:77:40:2c:cc:bc:ba:7f:bf:95:3f:a4:5b:e7:ca:bb:
89:7c:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:12 2024 by rpki-client on console-ams.rpki-client.org