Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zgxY0JSIV4OmCzHoC8ZkEHvsJsE.roa
File: zgxY0JSIV4OmCzHoC8ZkEHvsJsE.roa (raw, json)
Hash identifier: G9P+HMBbzOXejSePnafiOJdxDvQ6W9bu0K6dm4dhSmo=
Subject key identifier: CE:0C:58:D0:94:88:57:83:A6:0B:31:E8:0B:C6:64:10:7B:EC:26:C1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zgxY0JSIV4OmCzHoC8ZkEHvsJsE.roa
Signing time: Thu 25 Apr 2024 15:53:20 +0000
ROA not before: Thu 25 Apr 2024 15:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18639 (0x48cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 15:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CE0C58D094885783A60B31E80BC664107BEC26C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:a9:23:0d:f0:a3:21:22:35:46:40:8e:42:
0c:3e:42:fc:82:92:48:84:81:76:78:bf:e7:f5:06:
3b:fd:48:3e:00:d0:04:43:c0:1a:71:9a:77:b6:52:
7d:7a:f2:57:58:d6:e8:96:90:89:8f:94:a3:d2:09:
0d:fb:c4:13:3a:72:38:39:c9:db:22:44:0a:29:89:
c3:fb:02:51:51:b2:81:db:2f:ca:8d:2a:4a:e1:4d:
7d:3f:e6:bf:17:75:91:2a:ac:5b:de:cd:ac:98:d3:
6a:13:85:8d:e2:d4:d2:c5:9b:bc:23:54:f1:62:ac:
69:7c:a7:82:7a:f5:3a:1b:a6:d3:4d:b5:e3:3a:42:
e7:57:4e:16:61:fa:e5:ef:d4:22:68:20:ba:08:87:
b7:95:a8:00:d1:1e:90:c5:fa:e7:42:a2:ba:05:30:
56:21:f3:23:8c:e2:46:fb:a2:5d:0c:ed:3e:ba:0b:
31:2d:07:3b:a1:c0:44:de:97:5a:d2:7d:ba:7c:0b:
5d:14:16:bf:c3:06:dd:d1:c8:01:ee:d2:d9:ab:fa:
dc:23:ac:05:ff:c1:e4:a1:71:56:7c:46:03:20:5f:
a0:0f:47:22:24:8e:ba:0e:ed:39:fe:6e:d3:e6:6c:
2f:59:ea:91:b1:d1:9d:06:7f:42:66:d5:0a:ad:a8:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0C:58:D0:94:88:57:83:A6:0B:31:E8:0B:C6:64:10:7B:EC:26:C1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zgxY0JSIV4OmCzHoC8ZkEHvsJsE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
13:d5:18:c4:75:16:cd:23:a3:04:2e:10:24:08:52:5c:c4:4f:
6b:76:c3:cf:f3:f7:ad:59:51:65:34:c0:32:36:10:10:8a:35:
7b:d9:ef:68:05:f0:59:92:11:f4:b5:55:c0:53:dc:5a:41:8d:
0c:ad:6e:1f:41:b3:15:f3:b8:15:37:de:e8:b0:82:d6:b6:07:
fe:76:4a:08:17:de:5f:03:d6:b8:3c:d2:65:cf:dc:f8:22:7e:
3e:44:30:80:ac:7a:ab:ed:24:3a:4f:12:ed:97:7a:84:27:c3:
ac:a8:35:93:91:00:d6:49:c5:3f:ff:4a:b4:cc:f1:9c:7c:80:
8c:8e:2c:87:5e:d8:0d:3b:36:bb:e8:ae:38:d1:0c:67:a8:6b:
83:a5:b8:fb:48:d5:cc:a3:aa:2b:53:f4:5e:91:da:c5:66:36:
3e:0a:ae:be:8b:54:23:39:d4:63:68:b1:fa:42:7c:c9:ff:2f:
95:86:19:12:81:e2:2d:a0:5c:98:95:03:40:6c:80:18:f7:0a:
50:cc:e2:e3:68:bc:71:ef:69:d2:0e:c2:18:6c:cc:da:bc:68:
21:e5:1f:5f:2d:70:95:82:ea:13:6f:23:d3:96:c9:be:9d:60:
60:6f:fb:b0:59:3b:7d:26:52:57:5e:06:eb:96:a2:4b:b0:3d:
88:f4:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org