Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wVPfMYGt80Ci3pHoCVKgNmcLOCQ.roa
File: wVPfMYGt80Ci3pHoCVKgNmcLOCQ.roa (raw, json)
Hash identifier: bg5Ba8i/+tA2G9CrQkVcwafqbW036Y0rVs16e6puHaM=
Subject key identifier: C1:53:DF:31:81:AD:F3:40:A2:DE:91:E8:09:52:A0:36:67:0B:38:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 516B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wVPfMYGt80Ci3pHoCVKgNmcLOCQ.roa
Signing time: Tue 07 May 2024 03:24:01 +0000
ROA not before: Tue 07 May 2024 03:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20843 (0x516b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 03:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C153DF3181ADF340A2DE91E80952A036670B3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:75:31:b1:5c:1b:7e:cc:a7:03:d0:24:2d:
1a:d0:da:48:93:f8:26:40:32:0e:f2:61:39:e9:3e:
e9:dd:4d:18:06:51:28:3e:99:f2:33:4d:52:a1:ae:
03:34:2c:78:be:b4:de:31:6e:89:45:ad:80:58:47:
a1:04:a0:ce:ee:b3:ec:75:1f:87:37:e5:a0:3f:c9:
32:2b:28:36:db:cd:12:3e:8b:2c:47:bc:a8:a5:12:
17:b2:45:d4:b8:e7:5e:b6:22:fa:5d:48:72:c9:3e:
60:24:4f:11:cf:d6:f6:d8:9a:33:51:05:45:99:53:
1b:1e:e5:7f:61:c0:15:c7:90:30:a6:e0:e2:4c:d2:
d4:36:3b:73:48:aa:00:dc:21:70:5d:8b:1e:74:d6:
06:eb:0f:44:ac:b6:9c:24:3f:51:e2:e5:62:a4:44:
65:20:bb:a2:6b:33:7f:aa:90:9f:65:be:31:01:a0:
11:8b:4e:e0:eb:bb:48:02:dd:4e:f6:24:39:2f:f1:
07:61:00:24:41:9d:29:09:4e:ee:12:40:a6:6b:a1:
2f:25:19:c6:d1:53:ab:e3:89:a7:91:14:a7:66:e3:
01:a5:6c:1d:e9:90:e0:59:16:e9:4a:cb:3b:5d:fe:
59:51:34:76:48:8d:04:7e:f8:ec:cf:7c:07:83:f6:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:DF:31:81:AD:F3:40:A2:DE:91:E8:09:52:A0:36:67:0B:38:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wVPfMYGt80Ci3pHoCVKgNmcLOCQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:a4:a6:13:09:76:4f:92:6c:90:b1:15:01:de:21:14:eb:fa:
e3:7a:5c:db:c4:14:53:3d:f3:e4:75:15:95:f3:81:9f:84:8b:
30:47:fd:9d:b7:9e:dd:25:90:31:0f:db:ba:93:07:5c:ad:cf:
27:6d:f3:8a:f6:aa:bd:cc:3d:e4:a8:65:5f:20:b1:06:da:ba:
30:ce:02:7b:78:c5:10:f5:a6:86:99:2d:d7:14:4b:a9:88:4d:
0b:51:13:9c:71:82:2a:c6:05:32:cd:92:12:69:86:8b:5c:1f:
a3:a5:23:5d:f4:1f:8d:a3:2a:64:b9:01:50:61:bd:4e:0a:ef:
8d:39:5d:21:fb:93:76:4e:47:b6:e4:55:1f:4d:40:a3:35:bd:
4f:1f:0c:4a:80:69:65:dc:9d:4f:4d:e5:f8:a4:6e:34:b0:9f:
99:8b:0c:e3:aa:6d:18:75:64:2b:96:96:4f:10:91:a7:25:42:
09:d3:9e:6c:e3:14:9f:04:1d:fc:44:a4:45:ee:a3:9a:af:66:
de:0c:c9:c4:bd:86:1e:71:bf:2a:6f:55:45:72:ce:a7:d3:4a:
3b:e9:8a:9e:a5:8a:1b:48:9a:76:70:c5:dc:2e:d6:ef:ba:f5:
44:b6:e6:f8:c1:a9:57:21:8b:30:ee:30:8a:db:0f:7a:41:72:
d2:bb:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:54 2024 by rpki-client on console-fra.rpki-client.org