Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WWF6NUsx4ZmgK2UWe-u38J-vIrc.roa
File: WWF6NUsx4ZmgK2UWe-u38J-vIrc.roa (raw, json)
Hash identifier: 3aq6v1kRJ2t+3eT2G9AE0T6N98+uAa3eZ1H5asDGwhQ=
Subject key identifier: 59:61:7A:35:4B:31:E1:99:A0:2B:65:16:7B:EB:B7:F0:9F:AF:22:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CA3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WWF6NUsx4ZmgK2UWe-u38J-vIrc.roa
Signing time: Tue 09 Apr 2024 10:22:37 +0000
ROA not before: Tue 09 Apr 2024 10:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15523 (0x3ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 10:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=59617A354B31E199A02B65167BEBB7F09FAF22B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:97:8f:c3:35:55:86:d1:24:44:15:38:3f:
ff:0c:8a:74:01:49:3b:1a:01:88:67:8a:80:c3:ab:
14:5c:aa:7a:06:8a:71:0e:ac:f8:8b:1f:22:d1:6d:
fd:27:f5:1a:a4:b1:9f:25:56:e4:ca:c9:d1:ab:d1:
14:38:7b:f7:87:df:eb:f9:8c:01:72:20:de:ee:9c:
b2:d5:cb:ff:78:33:d2:20:97:8e:90:e5:38:bb:d1:
92:f2:b9:5d:18:b1:89:58:e3:24:d3:24:a7:2d:5f:
05:9a:c2:9b:a7:4a:8f:bc:a3:73:c2:89:db:f6:c7:
b0:ad:81:bd:db:27:a5:5f:8f:a0:ab:a3:a3:f8:12:
ba:df:aa:67:97:e6:5b:cc:8b:3c:7b:a9:ac:2e:23:
3a:71:fa:f7:3f:e3:3b:9a:2b:30:00:0b:fe:8b:89:
9b:10:9f:aa:c6:ee:9d:2b:f7:23:74:5d:41:34:45:
a8:7a:7f:98:62:9f:a9:6f:00:9a:58:85:ea:1c:13:
65:ca:33:5a:1d:34:22:a4:a2:1d:56:5d:98:9a:55:
69:c0:98:9a:bb:94:f6:76:11:13:cc:fb:fe:01:24:
5f:ab:65:02:73:84:16:2d:7d:b7:80:af:55:e4:49:
99:74:ef:b7:95:e9:10:ec:f5:5e:53:6b:a3:5e:15:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:7A:35:4B:31:E1:99:A0:2B:65:16:7B:EB:B7:F0:9F:AF:22:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WWF6NUsx4ZmgK2UWe-u38J-vIrc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:8c:2e:36:15:f4:5f:05:8b:92:a6:e7:02:88:1e:03:5a:22:
58:0e:a2:fa:35:0b:52:86:62:42:ca:1d:53:b7:7e:32:93:ba:
56:2e:cf:92:f2:b9:3b:53:ea:cf:11:59:b8:d7:6b:62:b2:31:
86:6b:69:d7:c3:68:8d:6c:f4:37:25:44:b1:db:fd:c1:c4:28:
cb:cd:af:03:e1:78:38:64:74:e8:f1:d5:f2:38:52:97:e3:58:
77:39:44:27:fe:29:08:27:e0:1d:32:b9:bc:58:36:a8:3f:22:
51:89:5b:22:d2:4d:13:59:45:8b:3c:ef:76:92:9b:d5:14:5b:
21:4a:e5:e6:39:23:1c:57:c2:a0:dc:2c:51:39:82:fb:d2:a3:
ca:4a:28:a3:5e:3f:f2:90:07:8d:5a:c7:a8:f9:93:b1:fc:95:
57:98:a0:16:40:00:c9:c0:ec:56:67:95:fc:58:f5:5f:84:ad:
0f:63:10:0c:7f:8a:8f:65:85:56:6e:86:d1:53:d3:f3:38:11:
eb:6e:83:61:4b:ce:2f:28:1f:2e:17:18:a8:a0:86:74:fa:49:
a2:6e:46:c4:2e:40:19:7b:91:9e:db:7c:fc:e7:ed:3e:1a:99:
c0:53:18:12:ad:13:db:fd:74:9a:b2:38:c2:ea:13:15:f6:10:
c0:1a:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 16:59:43 2024 by rpki-client on console.sobornost.net