Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sJwwZUbLTeLe6tO6bjBVslU3kMs.roa
File: sJwwZUbLTeLe6tO6bjBVslU3kMs.roa (raw, json)
Hash identifier: TFINy9Rs3J0B7myS6oqMht36P9tGPUQJtE7DyEGUsf0=
Subject key identifier: B0:9C:30:65:46:CB:4D:E2:DE:EA:D3:BA:6E:30:55:B2:55:37:90:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5597
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sJwwZUbLTeLe6tO6bjBVslU3kMs.roa
Signing time: Sun 12 May 2024 16:54:13 +0000
ROA not before: Sun 12 May 2024 16:54:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21911 (0x5597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 16:54:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B09C306546CB4DE2DEEAD3BA6E3055B2553790CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:15:29:65:75:7f:d5:15:06:a1:7f:14:ab:
3e:e9:88:21:5a:2b:5b:27:18:0e:19:8d:39:a1:3b:
83:b8:5a:de:5e:33:a1:4d:77:39:dc:44:10:cc:71:
c4:a1:d6:92:11:b5:68:00:da:d5:ac:ee:a9:0e:d2:
31:6a:46:a8:45:31:77:ea:f0:7f:56:38:c4:d4:6f:
44:e5:71:9c:8b:14:45:f4:42:7e:78:ba:45:d4:18:
99:d0:07:62:6a:48:a3:77:27:7d:2f:62:e9:34:1e:
c3:c8:25:32:c7:fb:81:87:49:31:7b:4f:cc:5d:b2:
c6:18:6d:3f:dc:9f:a9:16:c4:d8:25:33:32:34:2c:
3a:1b:a3:b4:83:73:c5:11:3c:42:e1:a1:a0:03:1d:
d7:e5:3e:75:f0:57:18:f3:9f:54:99:e1:80:19:bb:
2a:79:79:a8:7b:3d:54:a6:74:53:ac:29:6c:38:1e:
c9:3b:7c:6f:3a:0b:6f:b6:28:79:1b:be:f5:b8:85:
12:de:35:66:88:b0:03:91:d8:5e:89:b4:ed:37:64:
64:8e:ed:28:ec:13:29:49:3b:43:ca:63:03:06:26:
f7:79:43:6c:86:ed:97:cb:12:35:da:b8:8e:86:16:
6a:b3:e1:1f:b4:99:ff:41:d4:77:6b:42:a1:69:e8:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:30:65:46:CB:4D:E2:DE:EA:D3:BA:6E:30:55:B2:55:37:90:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sJwwZUbLTeLe6tO6bjBVslU3kMs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:6d:95:ad:20:33:d8:22:17:47:76:0a:34:06:a4:5a:12:d6:
c0:7e:6f:54:62:16:be:82:aa:f0:ef:8f:28:bf:8d:aa:cc:ae:
4d:4d:88:00:5d:1c:f8:e5:b2:d8:05:b2:e0:0c:2b:c5:d6:fd:
db:b8:6c:a0:d1:cf:89:a1:ab:51:fd:80:52:57:7f:45:81:85:
d6:18:a6:81:ab:78:67:a0:3e:9e:9e:65:7c:bd:ac:c8:8e:e0:
fe:7d:2e:23:aa:15:7b:7d:ff:0e:56:9c:c5:9d:cf:68:59:97:
57:a2:47:2d:89:e9:e6:ab:50:ac:39:a6:e7:75:ab:32:67:d5:
20:04:db:a9:6f:30:b6:21:b5:f0:f6:eb:48:fd:2b:59:a4:cf:
de:79:05:a6:81:1a:1d:20:95:cd:d1:96:3d:32:3f:25:b1:b8:
d9:26:0b:e4:78:7b:a2:59:59:9f:78:6f:df:b6:8d:f8:9c:c7:
3a:82:4f:8c:57:47:7e:be:70:16:98:04:8c:1d:56:82:08:ba:
6e:e2:39:94:9d:7a:0a:7a:c3:7b:84:6a:1e:e3:a6:7f:9b:bd:
e8:40:e3:0d:74:8b:50:4b:a1:68:8e:cb:6d:75:ea:e5:f4:95:
12:79:9a:db:8d:30:4e:3b:28:32:9d:c2:d9:92:f0:ef:44:5f:
ee:1b:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org