Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tBeerk4myLoxV4dAFuD439uG-5o.roa
File: tBeerk4myLoxV4dAFuD439uG-5o.roa (raw, json)
Hash identifier: eouN6G6xuIOiX4ysAfoktlcGwpD85AWOONgw4QnQWTM=
Subject key identifier: B4:17:9E:AE:4E:26:C8:BA:31:57:87:40:16:E0:F8:DF:DB:86:FB:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F87
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tBeerk4myLoxV4dAFuD439uG-5o.roa
Signing time: Sat 13 Apr 2024 06:52:49 +0000
ROA not before: Sat 13 Apr 2024 06:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16263 (0x3f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 06:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B4179EAE4E26C8BA3157874016E0F8DFDB86FB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:8f:b7:d3:34:35:36:d6:e0:d5:a1:b9:ae:
63:0c:a3:f6:29:a7:34:19:b0:3a:55:c4:47:ff:96:
d6:53:7a:f5:7a:b9:dd:30:8f:52:ee:ba:95:08:0f:
0b:23:ad:92:f8:b8:1f:3f:ed:84:3d:b8:bc:81:32:
a4:1a:66:56:3d:e0:75:a3:6d:3f:d7:3b:b1:0e:c5:
71:76:01:63:82:7b:ff:93:c2:52:4d:94:44:d5:ba:
53:46:d7:3a:c7:b3:f7:0d:60:b1:15:ee:83:92:d6:
1c:e1:73:c5:0b:2a:4d:bd:1d:c5:68:ed:0a:c4:9c:
7f:bc:c5:ea:ac:bd:25:aa:53:6c:7f:56:2c:d0:59:
ff:1c:7d:6f:3d:93:b3:28:79:33:7e:44:81:1b:ff:
f0:a8:31:58:e1:6e:57:42:0a:19:b9:c5:59:9a:f4:
1a:a3:59:ab:19:a1:0a:48:71:c6:f8:f7:62:1b:6c:
ce:01:36:ab:6c:f5:6b:58:b6:37:56:1d:2d:eb:81:
29:c4:91:49:98:7f:1d:17:27:a1:01:54:e4:27:11:
57:d9:b9:75:76:3e:d2:30:ec:6a:3e:af:21:f8:22:
5d:74:7b:94:e6:17:5c:1e:94:95:8a:f3:bf:a0:04:
ab:04:e4:97:f1:38:67:5e:78:58:17:3c:68:fd:51:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:9E:AE:4E:26:C8:BA:31:57:87:40:16:E0:F8:DF:DB:86:FB:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tBeerk4myLoxV4dAFuD439uG-5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:9f:92:ea:ba:34:7e:8b:6d:df:29:fc:c2:2e:27:58:25:1f:
82:67:fb:7d:ff:23:0f:0d:67:f8:eb:15:28:b7:ae:e1:38:4a:
19:08:ff:b1:86:90:a8:85:45:1c:17:e6:d6:a6:00:f5:c3:ae:
97:20:8f:e1:b6:1b:0b:d0:20:1f:bf:bf:c7:49:a2:50:40:90:
ad:23:71:e3:ca:f5:b4:a3:7a:72:2e:b3:c8:87:c1:b9:98:ab:
57:fe:67:f9:4e:99:f6:9b:21:cb:92:59:bb:c3:08:a9:34:2d:
e1:46:b0:d2:d2:18:ed:a6:d7:13:0d:7f:f9:1e:97:d7:c1:ee:
c6:fc:35:b0:b8:0b:9e:a0:68:03:af:1f:c8:e1:c4:82:c6:f3:
fe:58:39:5e:f4:db:be:e0:84:55:0c:59:c4:e9:7c:7b:d2:e6:
ad:31:e2:af:0e:b6:8a:ea:a9:a6:42:4f:58:c1:8e:0d:01:95:
74:b9:47:05:d4:7f:ca:97:65:87:9b:6d:da:ca:22:ac:d0:33:
86:e8:da:24:e6:65:d4:53:46:2c:f7:0f:f6:78:27:0e:d9:11:
58:b9:cd:41:f0:e8:0d:22:97:9d:38:4c:03:f5:1e:07:9f:18:
56:cd:3a:ed:ae:94:23:70:15:f0:19:91:68:d4:de:3a:60:96:
54:32:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:15 2024 by rpki-client on console-ams.rpki-client.org