Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/uUZtY39ycIIvcL2iygdh8-jOgMY.roa
File: uUZtY39ycIIvcL2iygdh8-jOgMY.roa (raw, json)
Hash identifier: GnhYkTPHOy83H+tymtyZY67FWwwgd8tOmKcLd9BYagU=
Subject key identifier: B9:46:6D:63:7F:72:70:82:2F:70:BD:A2:CA:07:61:F3:E8:CE:80:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 382F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uUZtY39ycIIvcL2iygdh8-jOgMY.roa
Signing time: Wed 03 Apr 2024 11:52:21 +0000
ROA not before: Wed 03 Apr 2024 11:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14383 (0x382f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 11:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B9466D637F7270822F70BDA2CA0761F3E8CE80C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:1d:9d:26:75:a4:b0:91:63:2a:b1:c1:fd:
c7:80:92:a4:f1:2c:b9:8c:1d:a8:fc:74:ed:6e:d7:
46:67:21:4a:86:e0:a3:2f:7b:2f:df:ca:ba:a0:c0:
77:4a:a9:60:fa:be:1e:e9:44:7a:38:0c:bc:46:3a:
b5:e1:fd:4b:51:14:4e:64:5b:18:d7:f9:e4:f0:43:
fd:c9:c3:83:68:0c:9a:7e:44:af:b3:8c:8d:33:96:
d1:4a:59:3d:75:9d:d9:fb:e4:66:db:fe:2e:27:ea:
46:16:68:2f:a5:72:ff:af:4f:0d:26:aa:d4:e1:70:
ec:67:7f:e3:85:b3:98:59:3b:c5:a0:e3:b8:be:35:
c0:a8:d1:55:fb:85:82:b7:35:96:c7:ce:2f:ec:6b:
75:48:d8:b9:c2:02:4d:8b:1f:ed:20:27:80:e4:56:
ba:56:2d:92:74:2e:a2:95:59:d8:9c:7c:ca:f5:30:
17:85:e6:1f:49:0d:f0:27:04:b0:2e:bd:5a:4b:4f:
3f:27:21:1d:bd:af:96:a7:92:d1:dc:a8:5a:6f:70:
3d:58:66:5d:c2:38:3b:9b:a2:d1:88:2e:da:47:cb:
9b:5d:cb:a2:49:6d:f7:7c:ae:9c:dc:5a:a8:00:96:
2f:d1:dc:85:cd:cd:90:6b:60:e9:6e:e6:c5:0d:37:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:6D:63:7F:72:70:82:2F:70:BD:A2:CA:07:61:F3:E8:CE:80:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/uUZtY39ycIIvcL2iygdh8-jOgMY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:c7:4e:dd:39:00:a6:e3:0a:0c:66:45:84:ce:eb:f3:60:42:
54:85:90:74:7c:c6:2a:67:d0:cf:33:c9:3e:10:e0:66:85:67:
59:c2:6f:bd:3d:a5:67:74:d0:ad:44:0f:ff:75:51:9e:c4:ee:
02:9b:a3:10:5b:11:66:e2:54:72:b4:59:2d:bf:cf:87:44:b9:
51:d2:29:a8:ed:ae:75:46:15:ea:3b:ee:c3:86:21:9e:8d:b5:
9e:4a:81:22:41:c9:fa:bc:06:3b:a9:64:dc:90:ef:1c:22:c9:
78:93:54:a3:5d:40:d6:5c:57:54:a0:c2:c4:ac:5e:82:73:37:
4b:d9:c5:da:e2:88:e2:45:73:98:b4:7e:c1:b3:a6:38:86:cd:
12:7a:a2:ec:2f:e5:7d:f6:15:bd:c7:9c:2d:ff:06:45:7d:9f:
f0:7e:60:c9:d3:0a:f2:9b:1b:4f:1c:bf:f9:b5:1c:02:79:00:
8f:f8:31:d0:75:c0:18:fc:f5:13:7c:63:a0:39:b8:99:64:2c:
dc:45:16:c0:22:ae:3c:9e:c9:17:e7:e1:15:1e:d2:81:85:9c:
9f:87:dd:df:2d:c8:2e:19:ba:38:1c:c8:1e:99:8e:9f:7d:ce:
d9:09:aa:9e:64:67:8c:e6:45:0e:d5:46:91:fe:08:30:ac:2a:
03:76:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:52 2024 by rpki-client on console-fra.rpki-client.org