Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w4mkkwOB_k6uVX4ZaNu-yvL_mm4.roa
File: w4mkkwOB_k6uVX4ZaNu-yvL_mm4.roa (raw, json)
Hash identifier: OVLG58idQ+CHRC33EnPVf1/5RYAF2C4OQUynMmzxZbo=
Subject key identifier: C3:89:A4:93:03:81:FE:4E:AE:55:7E:19:68:DB:BE:CA:F2:FF:9A:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3527
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w4mkkwOB_k6uVX4ZaNu-yvL_mm4.roa
Signing time: Sat 30 Mar 2024 10:52:08 +0000
ROA not before: Sat 30 Mar 2024 10:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607 (0x3527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 10:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C389A4930381FE4EAE557E1968DBBECAF2FF9A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:7e:89:3a:22:1a:ce:e1:85:c3:6c:27:c7:
04:5d:4f:53:a6:7a:92:b1:ab:13:e2:56:a7:d1:99:
51:44:02:09:09:81:c8:06:64:b1:0c:c6:b0:4c:6f:
ff:d8:64:38:8a:ff:dd:76:9a:76:44:61:d8:cc:80:
fd:7d:cf:78:21:37:de:35:f0:fa:bf:5e:3e:1e:43:
c5:9c:4b:67:10:38:be:da:49:91:d4:96:5e:5b:45:
28:4e:30:6a:3b:96:4d:b3:ad:86:e5:fb:2d:c1:c7:
13:bd:83:e8:40:59:53:d4:b7:69:ef:4e:21:b6:36:
a6:b6:86:fa:ba:6c:87:96:66:62:a6:61:0f:48:51:
62:df:d1:99:27:4c:8f:41:a8:b8:05:c6:f3:74:55:
42:81:82:93:cb:82:f6:3a:94:29:68:40:51:ba:92:
44:ac:cb:e9:10:be:09:21:21:cb:d2:80:5b:37:ea:
aa:6f:1c:a8:d4:c4:a6:aa:21:c5:22:21:b1:9f:77:
87:ad:a0:4f:c1:a0:d7:c0:20:e6:9f:60:99:95:78:
50:b4:66:1c:58:17:48:45:ee:a4:75:8c:eb:67:1f:
4a:b0:31:d4:25:9d:02:3c:10:be:71:5d:1a:6c:31:
94:12:33:37:01:f6:8f:84:70:e5:00:f1:f7:de:a5:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:A4:93:03:81:FE:4E:AE:55:7E:19:68:DB:BE:CA:F2:FF:9A:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w4mkkwOB_k6uVX4ZaNu-yvL_mm4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:06:32:de:d9:25:c7:4b:07:4e:95:16:da:a3:3e:7b:f6:51:
ec:73:9b:f0:b0:c8:c5:de:c8:0b:15:3d:fb:7c:49:ec:d9:57:
f9:12:63:86:b9:78:a0:c7:63:b6:63:f4:f6:7a:8e:62:a7:e4:
4e:55:42:78:60:b9:bb:a1:ea:a4:9e:e9:c8:28:aa:29:82:c9:
63:80:5d:b4:7e:dd:8b:86:5e:b2:17:74:5e:8a:36:c3:da:8c:
84:e0:f6:6f:de:6e:68:7f:ee:a5:1e:14:36:bd:b0:3b:85:87:
c3:54:fe:f8:b5:0f:48:32:ab:85:55:38:43:6c:eb:c7:9b:54:
ee:fe:c5:ed:e9:c1:26:e6:21:17:b0:a6:c0:66:25:6d:a4:86:
aa:ef:2c:6c:88:3b:5c:6c:05:2a:d8:90:d9:b8:d8:70:b6:82:
14:2e:bb:fd:c5:d5:f4:1d:30:90:5a:f2:e7:8f:d0:be:91:ea:
55:c3:0b:68:04:78:ca:3d:1d:40:e8:19:db:30:f6:69:36:ef:
53:dd:1a:82:2d:7b:fa:e1:82:9b:69:28:31:5e:4d:e6:d0:48:
5e:df:51:c5:38:03:69:11:57:25:90:32:8c:ea:b5:59:0e:29:
59:f9:53:bd:4e:07:67:f3:08:9a:8e:ab:26:38:98:65:2d:ad:
66:dd:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org