Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vRksuvNwhZSG6KmV360LiRva3e8.roa
File: vRksuvNwhZSG6KmV360LiRva3e8.roa (raw, json)
Hash identifier: JGUmO62IX5Ps0U02XSu/oU5KT5ps2/WKB9e2QTtRmoY=
Subject key identifier: BD:19:2C:BA:F3:70:85:94:86:E8:A9:95:DF:AD:0B:89:1B:DA:DD:EF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FBB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vRksuvNwhZSG6KmV360LiRva3e8.roa
Signing time: Sat 13 Apr 2024 13:22:49 +0000
ROA not before: Sat 13 Apr 2024 13:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16315 (0x3fbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 13:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD192CBAF370859486E8A995DFAD0B891BDADDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:25:06:b0:aa:2c:51:9f:59:5f:64:10:29:
f9:1b:e3:32:a4:18:ce:1e:fe:d3:4f:b4:af:20:80:
e7:b0:8f:6f:b9:6c:ee:8b:e5:ec:d5:a9:18:5b:af:
22:6f:70:d4:ad:1e:79:b4:be:13:8d:32:b0:cb:6b:
05:8b:05:5b:19:ef:bc:57:4d:ea:94:c5:11:71:f1:
72:cf:79:78:87:93:79:3d:69:23:bc:97:22:b9:36:
2d:3b:b3:b1:16:9f:55:eb:d1:5c:f8:69:6a:b8:72:
70:9d:84:45:a3:0d:12:03:5d:05:b6:04:13:ea:4c:
4b:04:2c:9c:af:7c:a0:6a:1e:4c:72:ab:7b:3b:61:
93:b9:37:0e:9e:f9:ea:57:ce:46:ad:ed:fd:51:45:
67:67:d7:af:f6:58:1e:86:0a:3a:65:e1:68:22:fb:
6a:9f:4c:9f:58:1c:99:b5:0c:65:e3:da:cd:47:13:
2a:25:dc:a0:c0:02:79:e9:aa:9f:fb:3e:01:25:20:
75:98:4b:7d:4a:a8:4e:89:74:be:30:51:a7:8a:62:
5a:4a:38:0f:48:2d:13:32:2e:75:1d:8e:97:f3:22:
ed:80:11:c7:a6:e0:1d:29:20:f8:0b:f3:b9:ae:4b:
50:2b:6e:0c:f4:e2:74:3a:d8:cf:7d:d7:b2:1e:b4:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:2C:BA:F3:70:85:94:86:E8:A9:95:DF:AD:0B:89:1B:DA:DD:EF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vRksuvNwhZSG6KmV360LiRva3e8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:4a:9d:e7:cd:c4:67:a8:8f:53:62:2a:24:f0:03:c0:50:38:
fb:6e:ec:0e:0f:2f:40:4a:5d:b8:58:86:a4:20:69:a0:d9:61:
68:7b:f5:b6:ac:b7:8b:f1:7e:ae:a6:9f:1d:41:39:53:5d:26:
0d:47:e3:3a:d0:a2:44:6e:78:0f:12:eb:63:73:18:c3:a6:15:
4d:1c:67:8c:a1:70:b0:c3:29:6e:d1:e9:41:dc:ad:aa:a5:d2:
77:f8:07:0a:b9:a5:d2:28:c7:2f:0f:b2:30:a8:a3:fe:64:da:
cb:bd:92:65:4b:30:ff:a2:65:46:f5:99:3b:2f:3c:e8:dc:56:
77:3a:21:2f:66:6a:81:be:85:ad:d6:6b:6d:97:4c:08:a5:0f:
97:b9:71:29:4a:c4:f6:56:a4:7b:c1:95:a0:f0:2a:fa:87:7b:
9c:cf:a7:50:2e:5e:6d:46:41:52:d3:c8:a0:96:cb:83:e7:da:
30:72:48:75:19:62:3a:91:61:0f:4c:54:61:fc:f1:d2:46:22:
d4:a7:5d:a5:7a:63:f3:ee:03:66:7e:e3:ab:28:d7:63:12:82:
47:ec:7d:ed:65:a1:40:7f:d7:bc:f5:33:76:3e:38:4b:32:a9:
66:5e:bb:36:b2:b5:78:58:93:c0:de:f8:11:79:36:a2:46:ef:
fa:58:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:17 2024 by rpki-client on console-ams.rpki-client.org