Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BJ46lEy50b-zKDh92sM4CQ_cDHw.roa
File: BJ46lEy50b-zKDh92sM4CQ_cDHw.roa (raw, json)
Hash identifier: kk6Don3tWonVagmio1yer2lAh7EBfIfgmz/tUPQXfTc=
Subject key identifier: 04:9E:3A:94:4C:B9:D1:BF:B3:28:38:7D:DA:C3:38:09:0F:DC:0C:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37E3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BJ46lEy50b-zKDh92sM4CQ_cDHw.roa
Signing time: Wed 03 Apr 2024 02:22:18 +0000
ROA not before: Wed 03 Apr 2024 02:22:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14307 (0x37e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 02:22:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=049E3A944CB9D1BFB328387DDAC338090FDC0C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:60:25:46:8c:2a:66:36:b6:30:74:bb:7f:
73:6a:23:c8:a2:89:98:8e:a8:6b:a0:70:db:8e:80:
b5:10:f2:c7:3f:7f:44:e0:97:89:7c:a5:67:11:7f:
4b:0e:03:a4:f2:4b:49:40:3c:41:b8:81:75:b6:54:
b5:11:b0:76:4f:e0:69:94:72:56:00:e5:ca:9b:00:
d8:66:78:ef:b9:ce:fb:83:4b:54:9e:87:35:25:4f:
6c:ac:f0:42:0a:b0:32:12:51:18:b1:01:0d:82:ca:
06:d6:fe:9e:1d:2a:43:85:d3:f6:58:6b:07:4e:69:
6a:10:dd:7f:16:17:c0:a4:e7:89:33:38:3d:43:38:
91:d5:5a:62:1d:1b:df:27:12:fa:f6:64:11:43:8c:
c2:b1:5c:20:3c:b2:62:b3:6d:9a:db:31:12:74:6b:
ae:10:f6:da:c1:8b:e2:4a:ab:ab:43:2c:b9:61:4b:
38:09:16:9c:c2:37:58:ce:04:cc:f0:ee:51:10:3c:
24:b0:3d:96:f8:3c:fd:92:7b:b2:6f:fc:a2:af:fb:
90:15:7b:4e:c3:2f:7f:4e:f2:4c:7a:17:b8:0b:61:
e7:78:91:87:db:06:6f:51:ca:d0:8e:7a:42:0d:80:
a1:50:fe:b6:cc:07:f9:b1:b7:52:c0:60:35:0e:3d:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:3A:94:4C:B9:D1:BF:B3:28:38:7D:DA:C3:38:09:0F:DC:0C:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BJ46lEy50b-zKDh92sM4CQ_cDHw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
71:8b:99:1c:0a:6d:96:47:8d:ce:b1:7d:78:2c:3b:61:da:f2:
d0:37:e1:a2:45:c8:7f:76:5c:5f:a2:2f:90:72:fc:55:c9:0e:
53:ab:14:1a:e1:47:1d:54:09:80:7f:17:21:0f:25:ec:12:0a:
a4:5c:67:03:19:91:71:86:5f:0c:99:17:06:7a:00:dd:1a:ff:
e7:e3:bc:5c:50:6d:57:f8:2c:97:dc:85:fd:b3:c2:49:fe:01:
4f:58:e9:8b:ef:d3:d9:6c:b1:b3:71:44:ec:a8:bc:22:8c:3f:
95:3a:b1:5a:36:95:fe:f7:f6:04:1d:fa:47:71:93:15:13:16:
e8:d6:69:0f:cf:0f:a3:af:fd:0e:c8:f0:37:14:95:25:2e:f1:
ce:07:56:50:dc:e4:64:40:56:d1:65:8c:71:19:f7:13:18:e7:
3c:e8:ea:1e:54:4a:44:09:c1:83:77:44:98:07:d4:c4:fc:4d:
62:a5:87:ba:95:d6:13:74:1b:fc:34:e2:95:b9:d5:6b:ad:4a:
7b:28:6c:fd:9b:1b:4c:55:07:5c:20:a6:21:d1:83:e7:d2:14:
e3:82:2c:65:75:65:50:23:1b:9e:d2:8f:1c:a9:a5:da:bf:59:
a6:02:57:c5:2a:cf:49:a7:a6:81:91:bd:93:f4:58:ee:0e:fd:
aa:5e:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 09:43:25 2024 by rpki-client on console.sobornost.net