Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ropCBWh9Feq7JBEmL9Bumy0V6zc.roa
File: ropCBWh9Feq7JBEmL9Bumy0V6zc.roa (raw, json)
Hash identifier: uOgv0iV8Qptc9+GM0CnCicNITGWc3abHn91i7Mc8yfc=
Subject key identifier: AE:8A:42:05:68:7D:15:EA:BB:24:11:26:2F:D0:6E:9B:2D:15:EB:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ropCBWh9Feq7JBEmL9Bumy0V6zc.roa
Signing time: Wed 17 Apr 2024 11:23:00 +0000
ROA not before: Wed 17 Apr 2024 11:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17067 (0x42ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 11:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AE8A4205687D15EABB2411262FD06E9B2D15EB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:f0:f3:d7:e6:81:d2:a5:9d:0e:64:a8:53:
f0:d8:a8:ff:a5:2f:c7:38:e6:03:0a:f8:4e:44:0d:
5b:91:25:94:22:e3:c9:44:3c:6b:61:f7:bb:c3:68:
b1:d7:f8:b9:4e:f2:b2:84:03:e5:97:06:b5:75:69:
7f:cb:2d:0b:d5:1e:dd:62:4e:39:42:c1:89:62:4b:
94:59:41:77:c3:67:db:5e:4d:f4:77:fa:e9:df:8e:
61:23:db:1e:27:8f:df:0d:7e:f4:b5:ce:dc:f7:10:
fd:c2:4a:19:d9:ef:4b:c4:80:5e:21:82:f7:c6:05:
ae:39:5a:a1:72:7e:fc:90:92:22:03:94:0c:3c:28:
d4:21:3a:cd:82:ef:51:6f:8a:5b:39:09:d6:31:5d:
3e:70:3a:cd:c0:42:af:9e:86:04:b5:87:d6:aa:51:
b7:a7:8d:87:6d:88:f1:dc:cf:28:f5:c4:a4:6d:21:
a8:6c:ce:a5:1e:31:1d:df:3c:07:19:ec:de:69:c9:
83:33:12:6f:9c:4d:6f:dd:a2:1a:b2:f0:39:5a:47:
bd:db:04:a9:23:ae:96:84:15:89:2f:99:1e:6d:a1:
26:3f:18:3c:6a:4e:b6:c1:be:58:6c:61:d3:04:eb:
78:4d:a1:c8:7f:da:26:84:81:55:9a:42:c4:16:fa:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:42:05:68:7D:15:EA:BB:24:11:26:2F:D0:6E:9B:2D:15:EB:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ropCBWh9Feq7JBEmL9Bumy0V6zc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:ba:fc:f7:b9:96:e2:78:57:77:67:6a:9f:db:11:02:7c:88:
c2:f0:93:98:f3:0c:50:5e:df:64:1d:35:e7:2a:7d:1a:26:63:
bd:bd:2f:fd:a6:c4:f2:30:20:fd:73:2e:30:77:dd:8f:56:c0:
06:68:24:00:9b:f9:41:c1:ef:e0:40:44:85:32:6b:b6:0f:20:
71:e8:95:59:80:08:89:2f:23:cc:4b:58:dc:33:32:03:46:71:
d6:52:94:75:8c:a3:1a:ea:f3:25:9d:84:77:68:5a:07:db:bb:
c5:e4:f1:bb:ae:85:e3:cc:8f:c5:2b:6c:37:50:e6:a1:2d:da:
2a:eb:1c:71:16:6b:f8:2a:6c:9d:e3:21:0a:90:c7:76:84:f7:
08:02:e9:5c:1a:53:7e:bc:1a:2b:40:72:f7:cd:b0:7a:88:df:
c9:02:63:60:85:d3:d2:f0:91:0c:65:66:a2:09:55:cc:6c:96:
0c:83:fa:ea:9b:27:19:de:71:19:73:b6:78:9b:16:3c:f5:61:
26:94:de:51:15:fc:34:81:5e:52:71:2f:db:7e:56:32:2d:3d:
78:fb:59:d1:11:57:da:31:03:54:a6:74:88:9c:cf:39:ca:f3:
7a:4a:9f:7b:5c:8c:67:55:b5:c3:27:01:d2:2d:e6:b6:b5:ec:
27:64:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:49:38 2024 by rpki-client on console.sobornost.net