Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/z-61XvdbCjDVqXXX8hilKsmKgy8.roa
File: z-61XvdbCjDVqXXX8hilKsmKgy8.roa (raw, json)
Hash identifier: IjwdDMeSp4eE0pJf+OHYsI+YjVc2Ns76MwJcMVzWBVk=
Subject key identifier: CF:EE:B5:5E:F7:5B:0A:30:D5:A9:75:D7:F2:18:A5:2A:C9:8A:83:2F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 476F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z-61XvdbCjDVqXXX8hilKsmKgy8.roa
Signing time: Tue 23 Apr 2024 19:53:13 +0000
ROA not before: Tue 23 Apr 2024 19:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18287 (0x476f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 19:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CFEEB55EF75B0A30D5A975D7F218A52AC98A832F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:10:92:8b:ef:6d:c5:6c:66:7c:ac:33:07:
78:fb:21:7a:9e:f8:65:00:ea:7e:f4:d8:8e:06:25:
c6:96:98:2a:15:68:12:4e:1b:c5:c1:1a:30:09:51:
09:7a:83:df:f9:c2:e8:2c:91:04:e9:d1:5a:35:9d:
36:a7:d8:ef:04:49:0f:f3:fe:db:c1:97:2c:94:6c:
51:22:1c:47:ec:e1:36:2c:96:60:06:b2:6c:8c:cf:
3d:5f:f8:23:23:1d:2f:ce:b0:0b:cb:8c:cf:f9:0b:
d3:7f:87:10:12:54:ba:27:14:b4:6b:d6:be:a5:00:
15:7f:40:fc:a6:3a:ab:75:17:38:75:f0:5c:0d:af:
88:75:3e:47:f4:2d:1b:05:c3:ce:12:7d:72:dd:7c:
5b:db:29:e9:c2:d8:f6:4f:94:1d:f3:16:43:cf:eb:
b3:c0:0e:62:d6:81:59:c9:c9:61:67:18:91:c4:2a:
cd:0a:4e:75:8b:77:cc:bd:42:35:c9:80:0c:53:4f:
c9:cb:f5:87:03:86:f2:6e:19:9c:7c:98:13:2b:f2:
6b:33:59:3c:0c:be:f8:40:d3:e8:f8:0d:3c:4f:0d:
f6:c6:05:21:48:f2:5c:7f:80:ec:fc:02:74:c0:4a:
36:4e:49:27:50:f0:b8:d0:27:f3:d8:a0:bd:14:7c:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:B5:5E:F7:5B:0A:30:D5:A9:75:D7:F2:18:A5:2A:C9:8A:83:2F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/z-61XvdbCjDVqXXX8hilKsmKgy8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:83:48:d5:59:f6:b4:83:a1:d2:5f:b3:60:ae:58:bc:70:ce:
a0:19:ed:f8:0d:3a:41:32:10:7c:97:b6:38:5a:ac:2d:28:75:
ea:02:a1:17:78:63:50:52:8b:e7:e7:71:ce:5b:f9:85:10:af:
5b:07:57:3e:43:7f:30:07:7c:eb:60:d4:e3:68:50:df:c7:76:
a6:46:4b:69:b2:7e:33:2f:a2:ea:9d:d0:16:06:dd:d7:9e:2c:
66:d1:fd:6d:c3:85:c7:03:71:12:a6:d5:fa:0c:2e:1f:5e:0a:
b2:b4:5a:7f:1c:e2:0f:8e:82:c8:84:52:28:40:06:69:3c:25:
b4:2b:23:31:d2:1b:4b:07:f3:89:f8:70:32:13:70:8a:22:51:
69:ab:47:c9:cb:0c:a6:ea:ec:eb:99:24:80:f2:87:83:d2:6c:
8a:8e:67:cd:43:43:38:9f:8e:fc:12:9e:d8:9d:e4:d6:e0:78:
5b:d1:7b:26:05:66:bc:8c:ba:c8:74:71:1c:18:99:82:fa:30:
b3:dd:64:bf:ce:69:98:68:93:e4:dc:94:d7:c9:77:64:ec:e6:
a2:db:9d:ed:60:19:49:d7:7c:25:2d:45:16:f5:e6:03:da:7d:
93:2d:ac:8b:20:70:fb:9b:e4:98:86:2b:49:8f:39:db:02:1c:
ba:c5:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:56 2024 by rpki-client on console-fra.rpki-client.org