Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7_6k5K0T3MYUpMNRQugno1kuEZ8.roa
File: 7_6k5K0T3MYUpMNRQugno1kuEZ8.roa (raw, json)
Hash identifier: KT+I+8hrfiR6xK8ryNhv7qBU9b38DHwIlR4n2I2Xw9Q=
Subject key identifier: EF:FE:A4:E4:AD:13:DC:C6:14:A4:C3:51:42:E8:27:A3:59:2E:11:9F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 346B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7_6k5K0T3MYUpMNRQugno1kuEZ8.roa
Signing time: Fri 29 Mar 2024 11:22:33 +0000
ROA not before: Fri 29 Mar 2024 11:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13419 (0x346b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 11:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EFFEA4E4AD13DCC614A4C35142E827A3592E119F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:a7:11:ca:d9:76:16:93:70:98:7a:21:a6:
57:ae:ff:44:a5:91:66:0b:45:b0:86:63:e6:ac:5d:
f5:77:f6:3a:5a:69:97:33:3f:bb:b7:34:b8:35:df:
f7:3c:a3:e2:b0:d8:85:18:b7:16:cf:e1:09:9f:5c:
43:59:f2:8d:4d:89:81:d7:94:ac:b1:40:7e:58:02:
b6:0e:a7:a2:f7:1b:db:5b:13:fa:f1:e2:3c:e4:11:
05:cc:62:32:71:d3:7b:33:63:bf:cb:5f:25:bc:e4:
42:da:2e:30:d7:5e:88:30:74:ff:6f:a6:d7:b3:80:
72:3d:1e:50:aa:89:30:dd:b6:f1:dc:cd:e3:c8:35:
b2:e7:86:fc:c1:a7:dd:16:8c:91:c9:33:f4:e3:4c:
67:0f:d1:31:e7:65:ae:b2:cf:79:fc:47:63:22:7e:
7c:ff:89:7a:29:60:5a:ab:1a:eb:19:b7:e7:4d:51:
db:f2:18:51:23:0f:6b:2b:5d:61:2d:54:53:72:1e:
50:d5:00:58:7d:14:7a:39:cd:a9:f6:58:6e:f3:8c:
91:2a:52:94:13:6a:93:cb:07:5b:27:c6:44:01:dd:
e6:6f:83:da:b1:c4:65:46:98:2a:f8:c1:4b:2f:0c:
0f:9a:e4:45:08:81:f7:ee:70:ef:d9:b7:2d:82:bc:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:A4:E4:AD:13:DC:C6:14:A4:C3:51:42:E8:27:A3:59:2E:11:9F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7_6k5K0T3MYUpMNRQugno1kuEZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:aa:69:b6:c0:9c:f3:af:c8:8b:d6:8a:8a:ed:84:b8:13:ce:
51:d3:1a:36:b4:ba:b2:23:0e:90:96:07:01:fd:a6:8d:46:b6:
e0:a9:b2:68:71:1e:64:30:6d:9b:c4:40:a3:1e:3a:4b:e8:c5:
a3:80:9c:f9:91:9f:39:6b:28:92:1e:13:61:0c:e8:3f:6f:ac:
ef:b2:f0:15:f2:60:47:fc:97:ff:f0:90:aa:2c:fa:c5:55:13:
1e:17:8a:c8:76:cc:ce:05:b9:b2:e3:2e:c6:ed:e5:f5:15:c6:
e0:e3:aa:8b:51:69:ea:92:40:92:0c:85:65:9b:82:95:a9:8a:
65:ec:40:5c:fe:65:14:49:77:f6:37:98:81:20:28:10:35:5a:
2d:1c:77:de:e4:f5:b3:52:bb:74:23:0d:9e:af:b8:4c:87:f9:
17:92:d0:4b:b1:43:dd:5c:50:54:2b:07:18:5c:1b:83:08:42:
f5:0e:b0:ef:11:e9:fc:89:f0:30:c4:82:6a:93:ec:92:d6:c0:
d4:1e:ec:b9:6d:fc:b8:29:6e:61:42:9e:c4:f2:06:fa:cd:3d:
dc:0d:81:36:97:1a:ec:fc:9f:66:1b:24:a9:e6:12:d8:85:8b:
63:f2:81:96:d3:82:fc:01:aa:df:18:e1:bd:6c:da:15:2f:28:
52:7d:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 17:59:45 2024 by rpki-client on console.sobornost.net