Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3HFhPzc_oD9W83_vnFq1Ut6E5gw.roa
File: 3HFhPzc_oD9W83_vnFq1Ut6E5gw.roa (raw, json)
Hash identifier: MCZxnvJAK5Skz8VDBn+VtHPegTtbxt73qUsNPYB07OU=
Subject key identifier: DC:71:61:3F:37:3F:A0:3F:56:F3:7F:EF:9C:5A:B5:52:DE:84:E6:0C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 42DF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3HFhPzc_oD9W83_vnFq1Ut6E5gw.roa
Signing time: Wed 17 Apr 2024 17:52:59 +0000
ROA not before: Wed 17 Apr 2024 17:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17119 (0x42df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 17:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC71613F373FA03F56F37FEF9C5AB552DE84E60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8b:1e:a8:4b:06:47:33:20:5e:98:90:aa:49:
20:84:d0:5b:e2:64:7b:06:33:72:ef:07:4e:3a:5a:
e2:97:64:7f:ff:0b:01:b8:75:17:10:89:4e:f2:59:
ed:45:8d:c2:dd:b5:05:37:48:df:f0:79:75:ca:b2:
3d:ab:a0:b8:bb:d3:3d:9d:37:9b:74:00:39:96:8d:
5d:20:71:3c:92:5b:90:fe:4d:65:94:75:1f:fa:4b:
d5:47:73:f5:5e:f6:2f:34:28:7c:0b:a9:87:b6:73:
bb:e8:56:39:cf:f5:73:0e:9d:e4:6f:b1:31:7e:09:
31:da:c0:d4:e5:1d:ed:c9:7e:a1:eb:9d:59:c0:54:
12:bd:55:d1:00:8d:a0:98:a5:99:d9:e3:02:58:b7:
78:ea:60:11:b2:2d:7e:0f:b2:be:70:72:e7:65:ea:
b8:48:72:98:ca:22:1b:7e:fe:9d:9d:03:de:e6:90:
14:88:6a:66:e0:09:49:cc:1f:52:a9:9d:6b:ee:44:
40:6a:9e:fd:81:70:4b:c7:18:20:0a:93:36:c2:76:
a1:1f:27:93:ab:11:d5:c3:4a:e0:83:c6:b7:b2:10:
c0:1a:db:fe:23:f9:0d:bb:ac:00:18:e5:d7:8b:71:
d4:c4:3b:be:e6:39:3c:3f:98:b4:7f:39:22:7f:03:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:61:3F:37:3F:A0:3F:56:F3:7F:EF:9C:5A:B5:52:DE:84:E6:0C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3HFhPzc_oD9W83_vnFq1Ut6E5gw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
58:3f:3e:b2:df:d8:17:56:f1:af:24:d6:dc:ce:18:c7:a6:50:
7b:8f:41:94:58:fe:2a:45:b8:5d:f0:69:32:01:db:fd:9b:f2:
25:ec:c3:83:bc:fd:80:37:c3:8a:0f:ff:4f:88:b2:dd:0e:67:
14:76:0d:bd:d6:ba:9e:b8:85:a8:cb:96:93:6e:fe:ab:56:30:
d1:a9:b2:45:ec:c4:d2:a5:6f:99:45:ad:cf:1d:88:36:84:3d:
65:ce:52:f3:d5:7c:75:4c:e5:b5:f4:13:4a:02:fd:58:74:2a:
d7:2f:af:44:2b:d1:81:53:92:67:a3:d2:77:76:a2:3b:f9:34:
0a:00:94:eb:5f:21:1e:20:94:86:71:2f:ed:c0:dc:5c:c2:14:
b4:b0:f6:c6:0f:31:60:9f:fb:14:89:bf:7f:dc:fa:f2:a5:81:
24:1a:58:5e:20:e9:c9:ab:02:7a:7c:02:b4:e0:97:21:52:39:
4f:13:16:77:1b:98:14:61:53:b5:3d:95:0e:10:26:6d:28:64:
e0:4e:cf:8d:39:82:6e:95:d1:b5:59:c1:7f:47:28:d1:47:11:
7c:35:a2:85:3d:ee:0d:19:2f:b6:e5:2d:6a:a5:e8:c6:f1:2e:
f4:b5:ce:e5:e0:77:3b:a8:f7:8c:d2:ff:96:74:c0:91:cb:81:
24:20:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:04 2025 by rpki-client