Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xAwvOywCQE4oumB50lftpu4-L8U.roa
File: xAwvOywCQE4oumB50lftpu4-L8U.roa (raw, json)
Hash identifier: tC/AJYhGpdUsnrunSa/T0/IeSLIiUbsaxEeUbASH6CE=
Subject key identifier: C4:0C:2F:3B:2C:02:40:4E:28:BA:60:79:D2:57:ED:A6:EE:3E:2F:C5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xAwvOywCQE4oumB50lftpu4-L8U.roa
Signing time: Sun 12 May 2024 23:54:06 +0000
ROA not before: Sun 12 May 2024 23:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21967 (0x55cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 23:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C40C2F3B2C02404E28BA6079D257EDA6EE3E2FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:f5:50:a9:bc:e3:02:23:d4:0e:6d:78:5e:
4b:ab:4c:5e:a1:94:9d:9c:5f:6c:c5:a4:a6:f8:09:
40:d8:75:bb:09:59:fe:1b:72:83:ff:d7:37:e9:6e:
77:22:c8:1a:4c:07:e5:cc:81:a9:b0:72:3b:ec:5f:
98:1d:d1:81:eb:5f:40:8b:de:b1:63:96:73:56:d4:
ef:91:8e:bc:f2:82:1a:41:95:ec:9b:8e:b5:eb:d4:
fd:9f:d4:24:75:87:e5:16:e8:76:fc:c1:3c:ae:de:
a5:7d:9d:f7:aa:45:95:a7:36:e5:bc:04:ce:fa:0a:
ac:30:e5:18:77:c8:5c:72:d3:ab:7c:07:ae:60:f3:
ce:2a:cb:1e:8f:f6:0d:cd:60:9c:fb:b5:35:26:4e:
f4:8c:31:9f:7e:80:49:5c:37:6f:12:32:97:60:79:
88:20:66:1c:4a:6a:24:0e:25:3a:05:7b:1e:f5:e9:
f6:c1:dd:87:19:8c:55:ce:b3:c5:d4:7d:c2:f9:47:
f6:f1:2f:a3:ff:05:73:95:72:b0:f9:5e:14:3f:4e:
02:22:19:63:fa:a2:d0:3f:c0:bd:73:cf:35:00:de:
0b:3b:d0:e4:7a:cb:56:e2:78:7c:b8:34:ee:1d:9a:
fb:e7:b0:b5:9a:1d:99:0d:20:4f:c8:d1:cf:a9:74:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:2F:3B:2C:02:40:4E:28:BA:60:79:D2:57:ED:A6:EE:3E:2F:C5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xAwvOywCQE4oumB50lftpu4-L8U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
07:38:5f:a5:0d:c1:73:46:1d:9c:f0:0d:f6:7f:5c:cd:65:d8:
0b:03:ab:5c:55:0a:1c:cf:02:28:58:a6:b0:ff:1b:39:21:b7:
88:39:a5:95:08:31:fe:1e:5b:e6:8d:38:4e:5a:91:a5:60:08:
9c:a8:9c:c6:73:30:f8:ff:61:a4:94:12:5e:08:8d:93:0b:34:
62:82:1f:0d:dc:71:d1:35:8a:7c:a2:20:93:58:15:fd:83:8b:
de:f8:73:67:b7:05:27:f3:ad:88:5f:cd:4b:bf:dc:4d:49:3a:
c1:f5:f5:67:0e:04:21:d6:24:67:10:94:2d:6f:44:d9:c3:f4:
12:0a:62:ca:95:cb:f2:b0:35:ab:46:c7:76:a5:cb:c7:90:d7:
60:52:b0:cd:24:f9:8f:b2:3e:1c:98:9a:2f:fa:f9:3d:32:a0:
14:86:db:d3:4b:15:be:ff:3f:7d:92:ea:01:bb:85:4d:07:a6:
a5:31:06:a8:8a:f2:bd:86:3b:ec:86:5f:84:d4:08:50:b4:01:
69:41:03:85:f9:6e:43:ba:c9:fe:6d:4d:9d:a8:b8:bb:d5:71:
90:66:10:79:d3:c4:f1:62:33:a0:00:f7:9a:4c:67:15:3c:1b:
94:ba:93:08:e1:26:85:96:bd:0c:42:21:ee:0e:85:38:e4:c2:
fb:fc:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:55 2024 by rpki-client on console-fra.rpki-client.org