Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sw7sHHYG8HwC9jXIoHmlfafWPSw.roa
File: sw7sHHYG8HwC9jXIoHmlfafWPSw.roa (raw, json)
Hash identifier: FxchyqQN+ONpfflCSplOXshq8VQgeEGKLKUlLVxfffI=
Subject key identifier: B3:0E:EC:1C:76:06:F0:7C:02:F6:35:C8:A0:79:A5:7D:A7:D6:3D:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 38B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sw7sHHYG8HwC9jXIoHmlfafWPSw.roa
Signing time: Thu 04 Apr 2024 04:22:21 +0000
ROA not before: Thu 04 Apr 2024 04:22:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14515 (0x38b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 4 04:22:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B30EEC1C7606F07C02F635C8A079A57DA7D63D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:27:aa:45:99:35:14:1c:0d:6f:69:db:38:
9f:78:92:17:63:33:04:04:a9:95:74:a2:54:ca:5b:
0a:e7:d9:fd:71:f9:71:8a:0d:14:3d:3e:83:7b:5b:
a2:08:cb:1f:27:69:2d:62:f2:de:cc:65:b0:09:e1:
a4:91:79:6e:dc:55:03:09:34:3f:00:47:63:9b:c7:
47:dd:07:5c:67:c9:6a:26:97:9a:7a:76:5a:51:a9:
ef:fd:28:25:f0:7c:66:c1:f7:e0:9c:40:b3:ba:37:
19:ab:8e:c6:d3:3e:0e:18:47:1c:f1:7a:a3:37:bb:
ca:cb:61:67:e8:e8:5d:e9:81:14:73:e4:49:67:f6:
7c:00:f0:fd:89:a4:e4:d4:c0:51:fb:6b:4e:cb:c2:
a8:ab:75:be:5f:9d:40:eb:68:14:cc:e5:07:c8:67:
2c:dc:28:2c:fd:f6:38:63:6e:04:8a:e5:e0:86:f9:
6c:52:d3:d8:16:bd:d0:1d:df:84:95:ff:49:f8:67:
9a:f6:7f:bc:c2:12:8d:b3:36:84:5f:80:b6:3a:a7:
30:30:97:31:93:0f:3e:93:92:f7:11:9d:73:f6:20:
c0:44:be:99:3d:00:82:f1:46:a8:f7:68:d2:dc:a2:
4c:a7:eb:27:af:7f:f9:42:15:db:f9:d0:33:00:b6:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0E:EC:1C:76:06:F0:7C:02:F6:35:C8:A0:79:A5:7D:A7:D6:3D:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sw7sHHYG8HwC9jXIoHmlfafWPSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:b9:ba:c7:fd:bc:44:22:f5:b1:8b:b4:dc:0c:c6:01:d6:c0:
57:19:fe:8b:8a:cd:13:eb:bc:2c:e2:2d:0d:ce:10:3b:dd:7e:
c2:6f:9d:0c:23:63:a1:4d:01:59:98:98:7f:5d:91:57:cb:6a:
61:97:4e:37:48:0e:37:4f:7f:f0:76:e2:fd:0e:d8:5f:51:9d:
20:6b:bb:2d:4c:5e:a4:86:4a:7e:74:f4:7f:8f:5c:a5:36:19:
15:78:a1:ac:c4:4f:a4:ad:f9:4d:42:6c:ae:40:74:b0:4f:bb:
e0:1b:be:2a:60:c7:de:74:b4:f3:54:12:f0:b2:c0:99:00:9a:
03:24:07:11:d0:7a:2e:8c:3b:3b:77:da:41:2a:11:b0:24:2a:
9e:ec:3a:3e:8b:84:16:a2:31:cf:0e:ad:3c:21:a0:c6:ce:7e:
ad:5e:53:c3:48:ec:0c:88:91:4f:fc:23:67:a5:fe:d1:67:fe:
31:40:19:df:5c:e7:a9:ba:82:a0:fb:9b:13:8f:d2:d4:c9:f9:
23:88:a4:1f:29:b1:53:f3:c1:72:40:c5:a7:c0:c0:3b:75:9d:
cb:e8:1a:5a:24:31:0d:16:01:a4:46:d0:85:b5:06:e2:7e:59:
dc:b5:fd:38:7f:ef:73:41:7e:4c:90:a6:c3:c2:bc:e1:26:6e:
ed:24:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:51 2024 by rpki-client on console-fra.rpki-client.org