Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1LzNcajzHwb40cOuzStlkygZACw.roa
File: 1LzNcajzHwb40cOuzStlkygZACw.roa (raw, json)
Hash identifier: iG8HQy/py68465zEKgpTcImoWP9MvCObhcOzwin0t0M=
Subject key identifier: D4:BC:CD:71:A8:F3:1F:06:F8:D1:C3:AE:CD:2B:65:93:28:19:00:2C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CF7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1LzNcajzHwb40cOuzStlkygZACw.roa
Signing time: Tue 09 Apr 2024 20:52:40 +0000
ROA not before: Tue 09 Apr 2024 20:52:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15607 (0x3cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 20:52:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D4BCCD71A8F31F06F8D1C3AECD2B65932819002C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:f0:29:a2:50:4f:a7:40:82:51:56:b3:6e:
bc:31:f7:27:3a:ec:40:78:5e:05:83:8d:6e:c9:5c:
af:af:f9:73:87:3d:6d:77:14:25:f8:84:e7:11:f0:
ef:8e:cc:81:0b:ec:62:11:47:6d:01:62:33:89:1a:
17:b2:17:b8:ba:29:97:33:94:26:68:58:ea:bd:7b:
ff:ce:30:a0:90:4e:45:19:39:46:0b:e0:f8:f2:ea:
1b:83:1f:bd:18:64:7e:cb:ca:29:65:af:18:30:cd:
c4:d1:0b:59:b0:d5:db:98:68:98:30:2c:3e:1b:1c:
60:4c:f5:3d:ad:c1:03:91:44:6c:87:c6:4d:d2:47:
c2:0d:6d:e1:c9:48:bf:4c:ca:5c:9e:00:3e:84:3c:
5c:d9:c8:17:67:67:26:d5:8d:3a:3f:4b:16:1d:d1:
ca:13:b2:9c:b4:3e:34:43:80:9d:b9:5e:c4:6b:97:
ff:59:39:31:2c:41:63:97:43:28:a7:24:dc:9a:b8:
6d:58:b9:fd:93:88:19:64:1a:6f:bc:0c:b7:80:02:
8e:e7:73:71:12:09:ac:32:c0:11:c9:c3:23:9f:c2:
13:8a:fb:ca:17:46:b3:28:40:49:ef:c2:ea:9e:44:
47:fa:a7:ae:86:a1:fe:97:c6:58:6c:e0:4b:b5:68:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:CD:71:A8:F3:1F:06:F8:D1:C3:AE:CD:2B:65:93:28:19:00:2C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1LzNcajzHwb40cOuzStlkygZACw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:79:06:8e:d0:f5:4d:0d:70:ec:d0:ba:fe:ba:3e:5f:0c:c5:
10:21:eb:e3:78:3c:56:78:c8:c5:95:4e:d5:af:a8:cb:1b:cb:
f8:14:7b:67:55:70:59:52:5c:97:52:88:8f:6b:5d:49:43:63:
9d:47:61:ab:95:ab:2c:c9:de:8d:c7:6d:38:4d:46:f3:09:3f:
f3:33:64:ff:aa:0a:e2:66:ea:cb:93:ab:0e:bc:0a:0a:0a:dc:
22:93:6a:39:08:41:10:80:6c:82:2c:47:7c:32:2f:59:29:b0:
52:eb:e1:7c:91:09:b9:94:79:50:30:c5:f0:65:50:c7:db:d5:
99:8e:68:8e:13:01:51:2e:de:26:44:6c:6c:42:48:b2:89:62:
66:c7:b0:9f:81:c1:52:05:c9:98:e6:7b:e7:1e:19:64:c4:da:
72:15:91:39:db:a8:d2:d8:11:76:9d:44:d1:7b:07:c3:a6:11:
88:6f:c7:07:59:66:48:30:b1:67:13:b7:53:72:44:79:92:a1:
e1:9c:26:3c:03:ff:9f:34:1f:19:7a:7d:28:2b:8f:77:4b:a8:
8a:3f:ec:96:f3:a0:f3:17:83:77:60:27:46:4b:a1:9c:0e:7f:
87:0c:81:46:c5:22:ca:97:b4:33:95:9c:1c:ed:df:95:3e:d2:
63:bb:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:31 2025 by rpki-client