Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rJNroIa4L_yTZF60tEnwP6lYmME.roa
File: rJNroIa4L_yTZF60tEnwP6lYmME.roa (raw, json)
Hash identifier: D94bj1dNWv4cXwNik62X9uWo2Hq8cApUKVSTt8ugxng=
Subject key identifier: AC:93:6B:A0:86:B8:2F:FC:93:64:5E:B4:B4:49:F0:3F:A9:58:98:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F43
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rJNroIa4L_yTZF60tEnwP6lYmME.roa
Signing time: Sat 04 May 2024 06:23:52 +0000
ROA not before: Sat 04 May 2024 06:23:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20291 (0x4f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 06:23:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AC936BA086B82FFC93645EB4B449F03FA95898C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:4e:5c:f9:39:7e:bf:f9:49:95:49:fd:c4:
de:e4:61:ba:2e:04:7a:a5:3c:a5:1f:e6:63:58:76:
ff:98:50:24:6c:b0:89:97:7f:0a:4a:86:0c:75:3a:
11:5c:dd:65:c2:07:f3:7e:4f:6b:e6:d4:6b:c3:c2:
53:d2:35:3b:a7:a2:27:ac:fa:c2:c1:16:b6:92:f8:
c5:7c:70:52:b5:af:a7:a0:a0:73:13:78:cf:f3:4e:
d7:b6:01:2d:41:1e:01:8b:f9:c6:df:cf:24:a0:b4:
b4:44:31:16:12:07:84:18:21:58:b0:fe:75:b6:5c:
d8:31:c9:c1:43:91:20:20:98:2b:4a:93:77:8b:e4:
90:05:93:72:c8:2b:10:54:8b:55:80:8f:ff:e8:b5:
11:96:65:c2:ce:b2:75:d6:6d:8c:87:86:8b:f2:ea:
ba:34:ca:1b:f8:25:d3:15:78:94:a9:45:07:2c:6a:
b4:9a:eb:06:f2:36:f0:bb:da:01:83:36:77:b0:c4:
24:59:a2:bd:4b:3c:8e:20:bd:8d:30:af:82:80:a3:
39:c4:f8:e5:f6:e4:46:d0:0f:e2:49:47:e8:a0:76:
42:19:39:89:8b:85:a5:86:f3:3b:a0:61:80:fa:8f:
79:ac:fd:33:61:d9:d4:be:83:f1:80:bc:71:f1:63:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:93:6B:A0:86:B8:2F:FC:93:64:5E:B4:B4:49:F0:3F:A9:58:98:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rJNroIa4L_yTZF60tEnwP6lYmME.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:3c:99:22:c2:ab:1a:b3:07:d8:aa:40:25:aa:69:ae:5c:20:
b6:b1:96:af:e4:5a:60:62:f8:b2:19:bd:f8:96:ac:31:92:f0:
df:dc:c0:07:84:55:a3:73:65:01:93:03:55:0e:bf:10:29:5c:
b0:9d:46:40:98:a0:2c:4c:e4:65:a4:7b:be:81:9d:53:b7:9a:
52:6d:86:7f:36:c9:56:04:bd:94:39:9a:86:b8:c3:8f:28:01:
61:50:68:a2:53:f5:c3:c1:33:a9:8d:a2:3d:82:f2:6c:7e:3c:
56:cb:64:cf:79:69:b0:89:0c:68:ba:d4:9f:7e:3e:d9:f2:b9:
1f:2c:43:61:da:30:9a:c8:cb:87:fa:49:14:27:68:b4:c3:a5:
31:9f:b9:57:19:da:74:ea:7e:b8:d1:b8:95:c7:76:58:6a:6a:
56:0c:b6:76:93:b1:bf:e7:27:bd:7e:25:cd:4e:c8:b6:cd:86:
cd:be:3d:90:6b:bc:85:91:c1:d1:2c:54:97:d8:9c:1e:de:2e:
c9:38:3d:07:fb:a1:3b:aa:78:99:c6:77:9c:01:c1:d7:00:a7:
41:8a:57:f8:bc:91:15:9d:e0:ed:47:67:dd:6c:5a:7e:3e:09:
51:c6:7a:dc:f5:1f:3f:3d:b3:11:8f:4b:02:db:e9:ba:3f:9c:
c3:de:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:13 2024 by rpki-client on console-ams.rpki-client.org