Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PUECk6REUrF1qoZcu2sT7DP1VHg.roa
File: PUECk6REUrF1qoZcu2sT7DP1VHg.roa (raw, json)
Hash identifier: D/KQ1x8/w6mMv4ckP8ZkESAmZ4AgylvAB/eCUqRwhYg=
Subject key identifier: 3D:41:02:93:A4:44:52:B1:75:AA:86:5C:BB:6B:13:EC:33:F5:54:78
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 399B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PUECk6REUrF1qoZcu2sT7DP1VHg.roa
Signing time: Fri 05 Apr 2024 09:22:31 +0000
ROA not before: Fri 05 Apr 2024 09:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14747 (0x399b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 09:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D410293A44452B175AA865CBB6B13EC33F55478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:46:84:62:7b:44:70:2f:dd:06:cc:19:bf:
fe:f5:8f:9a:70:b6:f0:f1:8b:d9:3c:3e:ea:df:bf:
e7:ae:d1:56:e2:19:f2:7b:81:5c:43:28:30:c5:8e:
07:d2:b5:d4:73:28:86:89:30:00:f7:5d:01:20:51:
f3:03:58:8f:2b:cf:4a:2e:1b:ec:1b:3e:51:75:d9:
2b:ad:e6:0c:26:a1:60:6a:7e:2c:f1:5d:fc:8f:48:
f3:e1:bc:d5:cd:99:fa:d1:ad:58:05:38:e3:85:c2:
64:13:04:99:ba:cb:1f:b8:3f:3b:c1:ff:52:74:7e:
fb:eb:f6:ed:29:d0:e5:44:23:bd:8f:a3:58:29:2d:
65:52:4e:25:9a:a9:45:c1:78:64:cf:ad:a3:1c:c1:
2e:51:4f:87:7c:67:dd:c8:b6:eb:6b:5c:74:32:bd:
c7:97:c1:d7:4d:cb:c9:ef:07:ab:05:a3:b4:94:d7:
cc:e4:2a:94:3b:c7:33:97:3b:b5:97:b1:be:c9:bc:
1b:0c:73:53:8c:2c:b9:4b:eb:68:09:0a:a5:88:56:
e3:e5:94:bf:04:97:c8:a8:bc:5b:d9:1f:2a:e1:49:
fb:74:cd:73:06:d6:86:81:05:c1:d8:d3:7d:69:20:
e8:be:01:86:5c:32:f4:29:d9:6d:37:6d:bb:27:4e:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:02:93:A4:44:52:B1:75:AA:86:5C:BB:6B:13:EC:33:F5:54:78
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PUECk6REUrF1qoZcu2sT7DP1VHg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:34:7b:6b:53:d3:53:de:3d:d0:ab:46:be:08:a9:d8:67:83:
00:3b:4e:60:d4:65:3d:1f:df:fa:cf:0a:18:90:ad:46:60:ab:
b9:af:06:86:a5:ee:e6:4d:e2:70:ec:1d:34:79:d9:aa:fc:4e:
7f:57:1a:2d:0b:f7:e6:e0:11:73:bd:71:b8:41:c9:b2:fa:e8:
cd:aa:8d:f2:0a:3d:2a:9b:67:67:74:69:bc:7d:e5:b8:b3:3a:
f4:73:29:5f:89:37:45:18:a6:cf:d1:03:68:c5:c3:c2:ed:26:
20:6a:7e:34:33:e6:a2:89:74:53:2b:bc:57:74:ec:24:37:2f:
d8:b3:6f:cd:38:32:14:cf:b8:a9:b9:cb:77:98:d5:01:b4:16:
00:1a:00:3a:90:7a:cd:bd:b2:2e:30:e2:c4:ac:a8:25:bb:e1:
57:69:49:5c:39:04:4b:87:bb:64:7c:0e:5f:c7:8b:2a:97:33:
df:04:de:4f:f9:53:dc:4f:7a:63:87:f8:62:f8:bf:47:0f:07:
3e:38:e1:63:59:ca:7d:5a:f6:ac:b9:9e:c7:2e:44:be:22:69:
de:58:c6:95:4f:40:50:5c:1b:84:ca:4a:65:22:c7:95:88:2f:
12:3c:34:8e:eb:17:05:75:87:a5:c1:ee:9c:d8:cc:c3:90:28:
de:b7:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:53:53 2024 by rpki-client on console.sobornost.net