Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LazJRZ6dp3ROJ9oJmrWzBevS7BY.roa
File: LazJRZ6dp3ROJ9oJmrWzBevS7BY.roa (raw, json)
Hash identifier: 3gDKqEz2Y3u39swmhKXXUqEhuTjcc8loIBHnvhMKHDY=
Subject key identifier: 2D:AC:C9:45:9E:9D:A7:74:4E:27:DA:09:9A:B5:B3:05:EB:D2:EC:16
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 559B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LazJRZ6dp3ROJ9oJmrWzBevS7BY.roa
Signing time: Sun 12 May 2024 17:24:13 +0000
ROA not before: Sun 12 May 2024 17:24:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21915 (0x559b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 17:24:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2DACC9459E9DA7744E27DA099AB5B305EBD2EC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:ec:f3:33:ab:af:97:01:56:ca:eb:22:4d:
38:55:90:2c:3e:29:0b:f4:41:e1:93:d9:80:52:2b:
b4:3d:88:de:f3:6c:4b:20:c2:48:78:16:c2:dd:9d:
50:72:5e:c4:c7:f5:e1:ba:f3:62:fb:8c:02:59:80:
af:55:56:ee:16:39:ea:1c:d4:a4:29:76:d4:36:a8:
7e:c7:d6:ec:d3:42:be:e4:0e:07:f0:e1:1e:5a:b0:
fd:e5:84:e6:50:56:fe:e2:e3:bf:7a:a5:7c:e6:f8:
6c:df:c3:72:ca:69:49:01:bf:6c:db:29:13:99:4d:
2d:c5:e1:2e:e0:47:08:3b:74:15:75:05:91:df:47:
2e:c5:ac:85:9d:0c:0e:91:e1:5f:89:c6:db:94:3d:
c5:04:1e:8a:9a:88:7e:8a:12:7a:db:a8:7f:24:39:
f5:7f:16:4c:c8:ea:03:2f:cb:3e:a9:cd:36:db:f9:
c7:85:26:e2:0f:73:8f:d4:80:6b:09:f9:24:c6:bc:
c6:59:17:10:6c:c3:bb:10:ea:67:0b:b5:d6:45:a4:
dd:93:3a:5a:b9:a0:16:63:c9:db:87:c8:2a:7a:b9:
7a:73:fb:40:1d:f2:4c:5d:97:ea:09:dc:76:15:ce:
77:27:ab:42:c5:f0:51:20:71:fc:cf:fb:c8:a4:01:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:C9:45:9E:9D:A7:74:4E:27:DA:09:9A:B5:B3:05:EB:D2:EC:16
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LazJRZ6dp3ROJ9oJmrWzBevS7BY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:73:8f:10:77:72:21:86:2f:0e:9c:eb:73:84:4f:00:09:73:
6f:03:fb:f8:f2:1f:dc:a9:f7:3e:a9:d2:54:6d:73:27:d7:87:
c5:a9:3f:e9:f3:1d:9c:ee:d4:bb:da:9f:a4:3a:c5:e5:52:dc:
4d:a7:dc:f7:10:2b:d1:d4:dd:e8:a0:fd:e3:87:34:12:77:0a:
58:25:42:bc:30:b7:44:95:b5:34:8a:b1:2e:b0:e6:d6:29:2e:
bc:58:87:39:1d:d8:b5:d7:a4:1d:9a:3e:be:ac:1c:48:3d:cc:
82:ff:30:94:76:83:e6:f9:af:10:02:00:89:bc:12:70:67:b9:
46:bb:b0:6c:7f:e4:13:28:7a:75:cd:a5:6e:36:ac:94:5c:88:
d6:3f:5c:d3:c7:ee:0c:eb:22:d8:52:f0:49:c3:7f:c5:7c:52:
8f:a2:af:e9:9b:07:59:ae:1e:5d:78:04:e5:15:49:56:78:82:
bd:d4:5a:67:a0:2e:e3:12:81:af:de:8e:eb:91:4c:e0:f3:41:
d7:45:53:b9:b5:54:91:ee:75:7c:99:65:0f:f8:ca:51:dd:a4:
e7:e1:c9:6a:ab:dc:fe:c0:ed:8e:40:6d:94:b8:10:99:62:25:
ac:84:67:dc:2b:98:93:c6:b8:9f:cc:de:f7:59:90:b4:b4:80:
62:8d:09:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:20:19 2024 by rpki-client on console.sobornost.net