Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/N8b_aZaL5JW9JienkEv7zVtKfB0.roa
File: N8b_aZaL5JW9JienkEv7zVtKfB0.roa (raw, json)
Hash identifier: hLyjSDsnrY7NT4TnkPHuQ0510WOkEzCFxedkvWxsv3A=
Subject key identifier: 37:C6:FF:69:96:8B:E4:95:BD:26:27:A7:90:4B:FB:CD:5B:4A:7C:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4823
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N8b_aZaL5JW9JienkEv7zVtKfB0.roa
Signing time: Wed 24 Apr 2024 18:23:29 +0000
ROA not before: Wed 24 Apr 2024 18:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18467 (0x4823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 18:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37C6FF69968BE495BD2627A7904BFBCD5B4A7C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:67:87:ce:e7:42:0d:f8:c1:00:9d:a6:b5:64:
53:c3:44:97:30:1b:48:87:c0:36:2f:40:0e:0d:ac:
85:0e:9a:7b:4d:07:5a:82:77:01:c6:29:83:7d:05:
26:34:82:fe:bc:a5:2b:c6:78:7e:ac:32:44:44:ad:
44:0e:cf:f5:87:2a:ca:6a:db:cf:af:a0:8e:97:6f:
03:2a:a8:54:26:be:3d:33:ee:57:28:1d:2c:9d:b3:
05:64:ce:0f:dc:ab:b5:56:cb:16:98:8c:6f:7b:20:
92:fb:9c:17:cf:20:8a:89:2f:ed:26:c2:62:80:3f:
5e:02:4f:4c:d1:47:ce:ed:ed:8d:5b:7c:1f:5d:5c:
42:57:23:78:3e:27:d8:d8:14:b6:4c:20:bc:70:00:
29:ec:a7:5d:18:1a:a6:23:7d:84:39:e7:fb:2b:03:
a8:1a:61:10:32:db:ad:7f:96:7f:48:e2:e4:23:d4:
2d:18:ec:e5:55:09:0a:71:a6:fa:94:7b:b8:0e:2a:
4e:66:b2:ed:ed:c7:02:8c:e1:18:f0:6b:46:03:f3:
71:3e:1b:76:96:70:f1:26:42:bb:60:7b:97:a0:12:
cc:34:f8:d0:2f:f0:ae:39:b4:22:48:ab:ab:cd:0b:
a2:7e:08:6e:ad:13:57:d7:af:20:80:d4:bf:24:fb:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:FF:69:96:8B:E4:95:BD:26:27:A7:90:4B:FB:CD:5B:4A:7C:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N8b_aZaL5JW9JienkEv7zVtKfB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
13:9c:a9:ce:64:81:b3:5b:f9:15:f7:27:39:5d:8a:fa:46:9a:
04:17:a9:e0:24:45:ab:7a:ed:04:96:5e:55:09:04:8a:da:74:
aa:e1:12:2c:46:8f:a5:a3:f6:6a:d9:65:be:0e:a3:3f:ea:6f:
4c:65:f1:3e:40:13:58:a0:74:86:6c:f9:0a:b4:73:a4:3c:ee:
1e:69:65:ef:78:12:02:e9:b4:4e:6d:2a:65:98:b2:49:60:a4:
0b:98:4b:98:9c:6c:24:dd:2b:c8:87:3f:9e:27:f1:70:9d:bf:
a7:d2:56:9a:3e:78:c1:0f:06:25:f4:db:33:81:08:d3:89:a2:
dc:b6:31:fb:19:cf:2b:4f:fb:8c:ce:6c:b6:c4:0c:01:8d:85:
95:44:dd:d3:c3:81:ee:3a:66:82:f4:bc:14:f5:11:a8:ad:07:
2d:01:b3:df:20:9a:fa:95:16:cf:53:e9:5f:d4:24:be:88:bd:
4a:df:61:0a:d8:ad:ee:c8:ff:a8:54:7c:65:88:82:81:19:c7:
e7:bf:a0:d4:d6:52:66:b0:b3:d9:be:03:85:e1:60:c4:bb:8d:
65:ac:68:5a:ce:fc:36:1a:53:66:f4:7b:cc:b5:10:b2:ed:df:
d7:b6:8b:27:94:4f:d5:1b:33:df:19:6a:00:8e:29:02:f1:a9:
3f:25:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:29:22 2024 by rpki-client on console.sobornost.net