Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vX6Dejz3s_Hwy3xFEmlktHdd5y8.roa
File: vX6Dejz3s_Hwy3xFEmlktHdd5y8.roa (raw, json)
Hash identifier: XBtJXf2f0XFAhKhzHNMqhopt/a0tLUL3rA9XqO2zQ6s=
Subject key identifier: BD:7E:83:7A:3C:F7:B3:F1:F0:CB:7C:45:12:69:64:B4:77:5D:E7:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 2C5B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vX6Dejz3s_Hwy3xFEmlktHdd5y8.roa
Signing time: Wed 24 May 2023 03:54:12 +0000
ROA not before: Wed 24 May 2023 03:54:12 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11355 (0x2c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 03:54:12 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=BD7E837A3CF7B3F1F0CB7C45126964B4775DE72F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:74:98:ea:b0:c0:a0:9f:e4:b5:b4:46:77:
cc:30:60:55:ff:35:73:7c:2c:4d:0c:a0:cd:92:08:
e4:31:dd:65:c7:6b:f2:24:cd:e9:cd:5b:19:83:53:
ae:0c:5d:8c:1f:b4:16:24:c7:f5:23:c9:29:71:d8:
49:f9:a2:22:43:d9:d4:a2:a7:48:39:94:18:d9:1b:
c9:ae:f6:dd:d6:25:0c:5c:77:5e:02:c1:e0:5d:17:
60:54:8a:46:db:cb:c1:5c:1c:2a:69:73:a9:ad:90:
58:7f:a5:aa:96:90:4f:e1:4d:07:65:30:04:f0:47:
57:64:5b:6b:a7:2e:f6:5f:f8:2d:c3:8d:74:b1:6c:
1f:d3:9d:85:49:e8:38:81:c3:6c:6e:46:3f:c2:3d:
75:02:27:51:e6:6c:a7:22:c7:ae:82:72:c1:a9:7f:
8c:5d:52:bd:af:9b:19:59:46:63:a1:31:6e:43:df:
c2:14:7e:ed:1c:69:bc:77:02:a9:8b:08:3c:a4:37:
20:e7:cf:d0:32:cd:67:25:8d:11:2e:77:58:28:35:
04:6d:fd:b3:5d:a9:e8:e3:62:4b:9f:95:93:3c:9d:
2e:9d:e2:c1:04:44:7f:c1:1c:66:fc:e0:7a:bd:3a:
ec:31:67:5c:e7:1d:fa:bc:19:b5:24:2b:03:97:9f:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:83:7A:3C:F7:B3:F1:F0:CB:7C:45:12:69:64:B4:77:5D:E7:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vX6Dejz3s_Hwy3xFEmlktHdd5y8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:2d:4b:c7:91:5a:f9:7b:ca:f6:b8:39:a1:fe:2a:9c:83:2a:
04:30:45:84:62:56:7b:99:ee:a1:85:04:df:53:5b:88:81:d3:
96:fd:aa:bb:bc:b1:1f:c4:03:e9:4f:e3:d5:20:29:4f:a3:e7:
8a:6c:88:99:61:5c:18:21:53:7a:1d:19:3b:f4:c7:0c:9f:2b:
78:f6:ea:1d:f0:cc:f3:c3:8d:c8:03:25:b1:03:ba:47:48:b5:
1a:d0:28:8d:7e:12:7c:c3:cd:a4:db:4c:20:a7:d8:4f:29:a2:
57:5b:11:63:ef:9f:16:0a:f7:4e:3b:a7:15:41:06:1e:ab:89:
6f:c4:d4:8f:0e:42:b8:5e:58:b8:68:68:f7:f2:8c:61:2b:ad:
6a:f2:df:8a:9f:80:f3:df:0a:21:4d:63:99:19:76:46:61:18:
88:0a:08:e2:6d:19:51:5f:8b:c7:5f:d7:38:58:6b:a7:2d:8c:
28:7f:ad:fb:72:f0:66:9c:a3:dd:37:d4:be:e9:aa:86:ca:84:
cd:59:10:e8:d3:30:39:0e:10:b0:d3:16:10:92:b6:89:c6:60:
48:86:b4:33:d8:e3:e0:47:a5:59:04:bf:cf:c8:c1:17:da:4d:
14:81:41:41:7d:ff:1a:01:27:b3:f2:a0:52:94:44:99:9d:74:
02:2c:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:53 2024 by rpki-client on console-fra.rpki-client.org