Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sfMuIVGcufnuN87vFvLda1JPaYU.roa
File: sfMuIVGcufnuN87vFvLda1JPaYU.roa (raw, json)
Hash identifier: GpN+P7SZGcFxGeJE84QLFTlQ7/T6rnEGYLtD2TiJyY0=
Subject key identifier: B1:F3:2E:21:51:9C:B9:F9:EE:37:CE:EF:16:F2:DD:6B:52:4F:69:85
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sfMuIVGcufnuN87vFvLda1JPaYU.roa
Signing time: Fri 19 Apr 2024 03:23:01 +0000
ROA not before: Fri 19 Apr 2024 03:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17387 (0x43eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 03:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B1F32E21519CB9F9EE37CEEF16F2DD6B524F6985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:dc:a5:43:c7:69:71:b7:4f:b1:39:4c:1f:
e1:0a:15:c2:1c:62:0a:d5:3a:43:cd:76:2a:e4:e9:
8b:6e:e2:ec:fa:6e:f8:1d:fa:6e:83:4b:f2:b1:c1:
ab:5f:bf:35:f2:4c:4d:8f:20:82:10:4a:3f:fd:d0:
32:d1:b1:0b:6e:cb:32:d4:42:aa:95:60:57:3f:bb:
d9:3d:2c:bd:26:7c:00:4a:86:58:4f:99:ed:fa:6a:
db:2e:26:06:10:91:3e:86:da:d4:96:a0:4a:24:9c:
75:66:e7:5e:40:ba:e4:8f:0b:bd:30:e1:ac:f9:9d:
c7:ca:62:9b:8f:09:2c:75:65:23:99:59:15:46:5f:
ad:dc:e7:e8:38:11:44:17:01:b6:ce:e2:54:cc:7d:
b9:8d:67:3c:ef:b7:2a:92:be:fe:a8:d7:98:f7:5a:
35:e6:c3:91:dd:4c:ad:98:c6:bd:77:fa:02:ef:f8:
46:10:8b:67:a4:b5:78:41:a7:e9:87:fd:91:79:45:
df:29:c1:c6:ce:3b:94:43:3a:3c:24:91:0e:f2:47:
e9:c0:07:df:6e:08:c1:9b:ec:13:ec:b5:d4:00:47:
b5:cf:99:b0:c7:3f:27:86:de:ef:aa:e5:6e:f9:ac:
65:0b:29:8d:a1:e7:4f:c7:8b:11:c7:cb:ba:38:36:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F3:2E:21:51:9C:B9:F9:EE:37:CE:EF:16:F2:DD:6B:52:4F:69:85
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sfMuIVGcufnuN87vFvLda1JPaYU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:ed:11:92:af:38:ea:f1:45:d9:34:36:1d:65:3e:81:cc:e0:
2e:98:1e:f8:33:f4:fd:dd:c7:d4:37:9d:2a:30:f9:91:f1:f8:
e9:63:95:2d:3d:35:63:87:0b:e0:ae:18:e2:ee:87:90:93:f8:
3a:c9:4f:d2:c2:c1:3a:a4:51:20:b8:4f:51:25:1a:ec:b8:e6:
f5:50:97:75:32:bd:95:a7:c5:98:62:e4:79:2c:5c:b4:00:20:
57:5e:0e:7a:55:4d:ce:1c:6d:66:6f:10:1e:63:65:d2:ad:3d:
9e:2c:bd:52:f2:31:38:14:1a:74:8a:9d:be:3d:e5:ec:5d:79:
87:99:bf:15:96:de:65:e4:bf:bc:b7:21:58:99:bc:55:bc:bb:
ad:75:b6:6c:91:6d:4b:81:62:f2:67:11:e2:c4:ab:0e:95:33:
3d:7d:25:c6:9f:14:d0:48:c1:c4:b3:56:3b:cd:2b:bf:25:7a:
2e:32:49:e2:26:3d:7a:ab:55:64:d0:c9:23:35:75:60:52:30:
0b:b5:52:3d:70:be:1c:77:55:4b:a3:69:65:fa:1f:a2:d1:af:
89:bc:4b:d9:ed:1d:19:4f:f3:7e:df:01:1c:66:a9:bb:c5:5e:
c2:50:84:b5:fb:8b:d8:dd:de:60:d9:3f:a5:88:0a:76:a9:b5:
74:fe:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:50 2024 by rpki-client on console-fra.rpki-client.org