Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yHTjz39GsvCLb0bPgas7gBbLLdM.roa
File: yHTjz39GsvCLb0bPgas7gBbLLdM.roa (raw, json)
Hash identifier: CZBCa5PFZMDNeTuS6xwogDZrrb5PP7woN31Up68+KNk=
Subject key identifier: C8:74:E3:CF:7F:46:B2:F0:8B:6F:46:CF:81:AB:3B:80:16:CB:2D:D3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55A7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yHTjz39GsvCLb0bPgas7gBbLLdM.roa
Signing time: Sun 12 May 2024 18:54:05 +0000
ROA not before: Sun 12 May 2024 18:54:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21927 (0x55a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 18:54:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C874E3CF7F46B2F08B6F46CF81AB3B8016CB2DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:50:71:06:a5:34:b4:f7:dc:e1:fc:f7:99:
17:29:33:bc:d1:48:d5:4f:6d:78:85:a5:ce:93:c4:
31:46:8d:b9:36:95:02:7c:e6:a0:54:a6:77:5b:63:
de:56:5b:55:bd:19:f5:29:bf:ea:37:55:b0:a1:38:
99:c1:9e:16:e4:fd:56:64:e7:7e:0e:2f:e2:9a:7f:
d0:f3:c5:8b:5c:f5:d6:0c:17:95:09:4e:cd:ce:1c:
67:d8:1e:0d:3b:ee:eb:ae:19:dd:43:f1:8e:49:4c:
80:9b:1a:7f:9d:10:68:88:72:b4:b0:57:f5:44:61:
33:7e:23:82:cb:57:5f:2f:5a:cd:4f:7d:c8:26:b7:
09:a0:9f:b3:45:42:cf:53:da:d5:83:d9:89:ff:f9:
b8:b3:03:fa:0c:5e:98:55:03:9f:af:bd:b7:65:bb:
5f:75:89:28:c2:2f:7d:ba:09:f3:15:ae:41:6e:56:
8f:a0:be:a8:0b:53:22:33:ae:53:d0:08:91:e8:51:
2c:20:2f:20:0d:cb:92:ff:49:cb:e8:41:e7:12:6d:
8c:5a:13:6a:57:0f:2d:ff:10:fd:ac:3f:d0:94:5c:
f0:40:db:72:0c:22:d5:30:29:15:8f:d1:f3:f2:54:
65:fd:e8:00:c6:9f:1e:25:f5:ef:5a:2a:9c:93:2f:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:E3:CF:7F:46:B2:F0:8B:6F:46:CF:81:AB:3B:80:16:CB:2D:D3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yHTjz39GsvCLb0bPgas7gBbLLdM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:ed:39:49:a4:83:97:70:18:77:6b:2e:7e:95:29:25:2c:06:
b8:87:8c:5b:21:f0:ea:c9:a9:41:93:ff:4b:de:0e:93:5d:b4:
de:57:28:b8:78:ef:3d:c9:aa:98:42:0e:fb:49:77:ef:86:04:
a7:2a:e7:9d:02:5b:1e:10:4c:fe:c1:b5:a0:62:a8:6f:90:45:
5a:ee:03:b0:85:4d:86:01:30:88:54:d5:5d:dd:32:c9:bb:4c:
bc:17:5a:70:14:f5:ba:2c:87:ed:5a:0d:14:e2:e7:11:47:60:
b6:a9:79:ee:40:9d:51:ac:a5:66:e4:7c:f1:96:53:cd:43:cb:
7b:3f:aa:20:b7:02:e7:8d:4a:bd:29:04:2f:36:93:f3:c5:f1:
31:0c:2b:d9:96:c6:09:bb:06:f9:d3:26:4f:9f:31:0e:5d:91:
bf:fd:8f:1e:dd:56:9e:c6:71:5f:f5:ca:5e:d2:5b:2e:36:a2:
5b:17:18:a7:20:33:ac:64:54:6f:d0:83:92:df:7f:83:fa:6b:
bf:e9:69:b7:79:4c:92:e1:9b:92:c9:81:0c:f2:a5:8f:b1:bb:
90:7f:3a:3c:6e:25:57:78:a1:0e:c6:e2:1f:f6:1d:8f:fc:e4:
b2:b2:23:9e:d5:91:65:e9:bc:14:99:30:13:2b:7b:7d:5b:d6:
ef:ca:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org