Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vTh7WrGbKWBkLCrtNoAru1zXyb4.roa
File: vTh7WrGbKWBkLCrtNoAru1zXyb4.roa (raw, json)
Hash identifier: WbvNgsCMZe9u0moNq1laolJfNX8WVC5A0ZVjTlR8TQY=
Subject key identifier: BD:38:7B:5A:B1:9B:29:60:64:2C:2A:ED:36:80:2B:BB:5C:D7:C9:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vTh7WrGbKWBkLCrtNoAru1zXyb4.roa
Signing time: Sat 11 May 2024 11:24:11 +0000
ROA not before: Sat 11 May 2024 11:24:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21675 (0x54ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 11:24:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD387B5AB19B2960642C2AED36802BBB5CD7C9BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:a5:e8:e5:e2:52:e4:95:33:ff:8f:85:20:
ae:eb:65:d6:42:27:08:50:93:49:f1:ab:e0:8d:ae:
e0:94:36:31:c6:ea:0a:1c:7c:b4:51:9c:c7:f9:d3:
5d:39:3f:40:af:cc:35:90:2d:38:c5:9b:64:6d:1a:
34:9a:c8:02:f7:83:0b:41:35:a3:6f:c6:ca:d5:f2:
c7:a3:ac:70:96:8e:b9:d2:ce:86:0c:35:02:e1:e9:
ee:74:52:c6:0f:cc:42:68:19:d2:ec:bd:36:48:ac:
b9:60:3f:63:17:82:a5:e7:79:79:12:0c:88:86:e6:
68:be:57:fa:c5:8a:92:dd:79:d6:dd:49:46:b7:b5:
f3:13:b1:64:5e:08:b4:39:75:b8:e9:58:ad:65:c6:
5f:90:55:85:e3:23:03:f6:63:b8:f7:99:fb:50:48:
11:35:17:1c:34:10:07:3b:b1:a4:9f:17:d9:a1:73:
db:b1:3b:ac:9a:cf:2f:5a:47:74:99:65:5c:5d:a5:
f5:b8:23:ef:89:a4:a9:71:88:26:3e:10:f0:9c:8c:
d5:33:e9:3f:78:4c:f0:1a:a8:1e:da:04:09:97:a7:
59:26:ab:42:1f:b0:bd:00:7c:6a:11:85:a1:d8:ff:
e2:08:b5:8a:4f:9a:56:15:da:b9:4b:d8:42:4a:d8:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:7B:5A:B1:9B:29:60:64:2C:2A:ED:36:80:2B:BB:5C:D7:C9:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vTh7WrGbKWBkLCrtNoAru1zXyb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
70:f8:21:c5:f3:5b:44:80:23:bd:83:67:4c:e7:4b:43:e7:27:
f6:4c:3f:c3:ac:c0:2d:96:cc:7e:27:4e:8e:d4:f9:63:89:90:
de:70:24:ea:2a:fc:03:29:4e:ee:c0:0c:61:0f:68:94:be:7b:
42:75:15:24:58:a2:9d:33:6b:04:68:ae:ee:9c:0d:c6:9c:32:
b4:37:d5:cb:10:ad:fb:0b:07:51:88:50:b2:00:15:33:7f:0a:
9a:7f:ce:38:53:4c:63:81:a9:b8:bc:f1:80:5a:bc:b5:63:f3:
62:0d:cd:e5:19:aa:7a:d8:9f:66:00:b2:61:1a:b1:00:5a:82:
e4:a0:10:d4:11:9c:94:4e:cb:05:b5:88:f6:6f:c8:f9:be:e1:
dc:79:c3:e7:ec:10:96:05:b8:fd:41:5c:26:89:59:4c:dd:9b:
b2:d4:28:41:6b:89:07:60:d6:89:e6:83:df:a9:36:72:38:de:
6e:b9:5b:c3:a9:ac:07:c7:2e:cb:81:eb:de:98:7d:ba:f4:1d:
71:d8:89:ca:63:49:c3:ed:32:2a:37:38:36:76:12:24:9b:75:
7d:88:1b:c2:06:4d:e8:90:3d:99:10:a3:c0:a1:7a:ef:ba:64:
ab:13:bd:b8:79:50:98:70:85:47:72:73:04:19:63:ca:94:58:
8b:5c:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org