Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yIuMQKtREOYi8xME2St1Lr8eUV8.roa
File: yIuMQKtREOYi8xME2St1Lr8eUV8.roa (raw, json)
Hash identifier: 95oJBngQ4Sjs8d6SEC19Kz2MPLbc5Bopi5FTvbUVozs=
Subject key identifier: C8:8B:8C:40:AB:51:10:E6:22:F3:13:04:D9:2B:75:2E:BF:1E:51:5F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53AF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yIuMQKtREOYi8xME2St1Lr8eUV8.roa
Signing time: Fri 10 May 2024 03:54:01 +0000
ROA not before: Fri 10 May 2024 03:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21423 (0x53af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 03:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C88B8C40AB5110E622F31304D92B752EBF1E515F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:ce:30:4e:1c:e4:58:d9:9e:0f:33:5b:92:
8f:75:18:9d:59:8d:fa:c7:35:c1:45:a9:12:15:26:
4f:87:81:57:d6:5a:9c:d1:f8:ec:ce:f3:e5:05:b2:
4c:6b:f5:4e:86:aa:3b:65:c5:8e:ff:93:0c:2c:b6:
3a:3f:03:95:f8:fe:d0:61:90:31:e4:3d:6d:b6:8d:
dd:33:a1:a3:ba:bd:b3:78:0a:20:ff:6a:2b:d2:a0:
ac:f3:a4:6a:00:42:4f:95:97:c2:69:87:fe:8f:cf:
bd:3b:5a:34:b9:12:5a:ac:d0:55:c6:25:77:1c:7b:
30:5c:5a:8c:9a:19:30:df:97:14:8c:8f:e2:6f:50:
9d:a4:24:eb:45:92:83:52:6d:0d:6e:a9:4d:85:7d:
53:f4:01:0a:64:4e:37:bd:2d:df:f8:71:f4:1d:be:
97:2e:9e:df:a2:4f:eb:c5:8f:82:ba:5d:90:56:bb:
8a:14:14:7b:dd:52:af:65:aa:df:1d:06:90:ac:59:
ef:59:5a:44:ab:12:60:d6:97:91:96:34:c4:da:08:
44:91:f5:aa:ef:0a:2a:9b:85:9f:17:04:69:0f:85:
32:89:3a:a2:4a:54:a8:1a:a9:d2:97:77:51:64:d9:
c9:0c:d3:c1:7b:82:03:08:12:61:16:f8:7b:12:18:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:8C:40:AB:51:10:E6:22:F3:13:04:D9:2B:75:2E:BF:1E:51:5F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yIuMQKtREOYi8xME2St1Lr8eUV8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:c6:64:c7:15:9b:ee:5a:31:6e:96:8b:6a:bc:81:9b:64:20:
11:aa:46:3f:a2:a3:23:52:54:cd:d0:51:f7:00:e5:96:14:4c:
e9:a4:cd:d6:4c:57:9e:01:61:78:ae:8b:71:2d:7b:7c:6e:c5:
b0:8e:27:dd:fc:f1:e6:45:78:b0:1f:70:78:e3:4d:a6:79:cf:
fd:4e:03:0b:c8:3a:60:9b:f2:70:20:e4:94:a0:12:28:43:81:
42:39:ba:a5:1b:7c:39:6b:c2:16:5b:e0:18:eb:cb:07:73:9a:
02:02:1e:1e:9a:06:20:39:77:8d:f5:d9:5a:2e:a7:8d:73:a4:
62:97:ca:da:6a:55:45:6e:a5:b0:22:60:9c:80:35:87:63:40:
20:c1:57:66:de:1c:8c:b4:92:11:92:66:bb:2b:05:c7:cc:df:
a1:ba:89:70:c0:34:00:9c:82:15:0d:09:7e:39:f8:68:49:b2:
24:de:96:6f:6d:cd:84:ae:3d:e0:a1:b1:09:93:6e:ba:28:3d:
b4:73:5e:8d:fc:82:c0:43:1d:46:3a:ea:28:d2:66:f8:01:0b:
e3:5f:df:b2:02:f3:d6:5b:2f:dd:8d:e1:58:c2:57:66:a1:b1:
2f:42:de:4e:8b:38:a2:50:31:6e:97:5b:b5:e0:89:fd:23:24:
0b:12:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org