Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w5Ar93ewOgi6rZawou5LqkiImeo.roa
File: w5Ar93ewOgi6rZawou5LqkiImeo.roa (raw, json)
Hash identifier: XeES6WJ9iIVtk5xpyomYB3hgxXiKBNqJ8DaEp0pJBH8=
Subject key identifier: C3:90:2B:F7:77:B0:3A:08:BA:AD:96:B0:A2:EE:4B:AA:48:88:99:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 336B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w5Ar93ewOgi6rZawou5LqkiImeo.roa
Signing time: Thu 28 Mar 2024 03:22:01 +0000
ROA not before: Thu 28 Mar 2024 03:22:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13163 (0x336b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 03:22:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C3902BF777B03A08BAAD96B0A2EE4BAA488899EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:44:58:18:a6:cb:e2:99:eb:35:cd:c1:dd:
ff:95:a3:48:cf:43:df:69:a1:ab:2a:6c:24:8b:a1:
47:b3:9f:5b:be:bf:29:90:18:73:83:1b:e7:1e:ef:
f0:42:c2:6d:b0:c6:72:36:82:49:95:1d:0c:fa:81:
e4:5a:53:e3:37:63:67:0a:56:08:de:a4:0c:ed:4d:
a6:34:0b:c8:2c:5a:aa:52:79:0d:18:5b:fc:b5:33:
23:66:83:6f:04:34:36:c8:37:a6:5c:66:ea:5b:94:
d2:32:bf:55:87:31:4e:69:86:43:5e:db:52:3c:36:
58:0b:89:47:28:a5:61:9f:87:78:cf:fd:aa:59:00:
61:35:84:17:91:11:01:af:5b:64:1e:04:dc:bb:d1:
27:ef:28:e1:72:5c:f4:d6:2b:91:28:28:79:36:e9:
04:53:5e:a1:9e:78:09:64:29:92:0b:4d:3d:73:24:
82:67:e4:54:e7:5f:f9:84:24:3a:76:c9:52:4c:5c:
0a:3f:05:3b:d1:6f:ed:3f:bf:48:db:6c:16:47:80:
9f:3b:85:19:9c:aa:fc:03:33:33:02:50:9d:d1:c7:
9e:ec:a1:9a:f8:96:cd:6f:42:21:af:b7:bb:00:e4:
b4:a7:81:5f:2e:69:b0:b4:85:df:1f:b4:99:f1:66:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:2B:F7:77:B0:3A:08:BA:AD:96:B0:A2:EE:4B:AA:48:88:99:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w5Ar93ewOgi6rZawou5LqkiImeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:13:0a:bd:a7:2c:c4:07:c1:ef:26:d9:c8:ca:c8:2d:c0:07:
54:f3:41:84:ef:43:9f:75:62:aa:9b:86:8c:4f:6b:08:6a:b5:
79:c0:e4:d3:dc:57:9a:e2:6d:2a:43:ab:95:1f:35:40:f2:18:
a6:ec:af:a6:34:68:2e:f9:f1:77:d9:cf:0b:d0:ab:a1:fa:21:
9c:50:fe:2b:5c:5a:72:21:76:a1:20:bc:dd:12:a6:27:21:c5:
ce:d2:da:7e:0b:93:96:6f:c3:42:a6:ea:52:73:10:56:d1:0e:
85:b3:50:fc:b0:46:7f:80:ca:40:25:53:14:7f:c0:e7:2f:d9:
0a:d5:6c:95:7f:61:9b:2d:b7:d6:73:00:c1:0f:43:80:e4:cc:
7a:5c:29:cc:0d:6e:b0:43:d9:fc:51:c9:75:87:26:b0:b0:0e:
06:5f:ac:1d:61:95:7f:16:5d:e9:05:9b:04:e9:f4:9b:e2:e4:
89:a5:15:0d:09:72:52:5f:be:ea:6d:70:75:9a:9e:41:c1:a7:
94:6a:aa:a5:a5:48:ce:bc:db:e4:d5:62:cc:86:07:b1:00:a7:
db:78:a2:e6:1b:20:66:4a:a3:0c:0d:1c:fb:05:97:ff:7c:8b:
5b:b7:f5:7b:f2:85:9f:84:21:b9:5c:4b:af:9d:7e:6b:b3:9b:
a0:fd:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org