Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wNvUGsHQOoguCpd9KW8WgOMPG60.roa
File: wNvUGsHQOoguCpd9KW8WgOMPG60.roa (raw, json)
Hash identifier: 0Pg3nTadtCHayrHgOHZihH/1V9TTavJjQLGA77DJstk=
Subject key identifier: C0:DB:D4:1A:C1:D0:3A:88:2E:0A:97:7D:29:6F:16:80:E3:0F:1B:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5203
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wNvUGsHQOoguCpd9KW8WgOMPG60.roa
Signing time: Tue 07 May 2024 22:23:57 +0000
ROA not before: Tue 07 May 2024 22:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20995 (0x5203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 22:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C0DBD41AC1D03A882E0A977D296F1680E30F1BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:4e:f4:4b:ea:8b:fc:0f:38:30:16:87:0f:
0c:f8:91:45:64:92:7e:15:23:6f:ec:ea:fe:5d:d2:
88:63:57:2b:57:8f:d1:50:aa:3a:f6:9b:fd:de:9b:
71:7a:07:7d:66:8c:b5:d5:ff:7f:f0:7c:92:38:cf:
ef:86:4d:39:da:f7:13:e6:1a:aa:cf:43:c2:9f:30:
a5:a1:59:d4:09:81:66:43:15:c6:ca:20:3a:a7:a2:
cc:08:fa:cc:df:99:0a:5a:d3:1d:ca:01:bb:b7:1c:
9f:b3:4f:ff:c3:34:2b:40:aa:c3:c5:23:39:01:41:
4c:d6:7c:d7:23:66:24:26:b2:96:b9:f5:91:54:77:
8c:15:ee:be:7a:3a:ee:75:06:5c:dd:5a:a0:87:68:
43:2b:7c:87:77:3a:b9:93:31:5b:27:bf:ab:16:6c:
dc:2d:8d:6d:2c:e4:ae:86:9e:9f:76:94:1c:a2:5f:
9f:9d:fd:63:d4:74:b1:99:fa:a1:a6:a3:93:0e:29:
66:b1:74:b9:c5:97:82:28:bd:ef:c5:39:a7:6d:f1:
4f:70:a5:47:46:fd:68:8c:0b:5d:8c:d8:33:af:1c:
72:4f:09:b5:35:47:46:37:ed:8b:65:20:14:c2:65:
8c:d3:64:28:fa:26:63:78:f7:1e:9a:58:1d:7d:02:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:D4:1A:C1:D0:3A:88:2E:0A:97:7D:29:6F:16:80:E3:0F:1B:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wNvUGsHQOoguCpd9KW8WgOMPG60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:96:61:90:c7:a4:66:75:5b:1a:8c:58:18:30:9e:f8:b1:a2:
14:95:fe:ac:e5:17:5e:ee:79:27:7e:cd:5f:86:6f:a4:f9:1c:
2d:94:b5:99:8b:27:61:70:d3:ae:cb:73:c8:9a:cb:54:56:76:
e1:55:91:bb:aa:85:6e:5d:3b:4a:43:8e:e9:87:dc:9c:2a:06:
62:d0:96:3b:05:c6:8e:52:50:32:82:28:a6:0b:22:40:e5:a4:
67:a1:5e:b0:91:08:4b:d5:5f:be:b0:16:6b:fc:c0:5f:e4:93:
ea:2a:d8:3e:f5:c7:72:a3:e9:af:a1:5f:73:18:48:ae:24:f6:
8c:15:ac:33:1c:cc:29:ea:c6:58:67:71:93:3b:59:70:e1:4b:
67:94:bc:9b:f9:c8:3a:24:f1:5a:5b:bd:3a:2f:9a:ee:75:79:
ae:d1:8e:d4:fa:43:81:e2:d8:72:55:3e:1c:a7:7c:24:9c:e9:
33:45:c5:58:63:a2:c7:09:30:ae:3f:58:41:7f:a0:4b:ce:56:
8c:bb:d4:f8:a9:0a:aa:81:bb:22:41:d0:6b:13:a4:67:95:b4:
63:80:58:2d:08:b6:90:58:f2:54:98:dd:90:a1:0a:a0:da:b0:
09:9f:fe:a7:5d:01:51:b0:11:9f:e7:8f:95:11:bf:08:cb:53:
70:10:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org