Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LHakxtT5pdcFipzi7IO3Rgr7ka8.roa
File: LHakxtT5pdcFipzi7IO3Rgr7ka8.roa (raw, json)
Hash identifier: hWe4GvC54OubTeP8z5atTem20e6K4zDrfJGWIWswn+w=
Subject key identifier: 2C:76:A4:C6:D4:F9:A5:D7:05:8A:9C:E2:EC:83:B7:46:0A:FB:91:AF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ADB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LHakxtT5pdcFipzi7IO3Rgr7ka8.roa
Signing time: Sun 07 Apr 2024 01:22:33 +0000
ROA not before: Sun 07 Apr 2024 01:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15067 (0x3adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 01:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2C76A4C6D4F9A5D7058A9CE2EC83B7460AFB91AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:41:9a:64:14:67:d8:50:51:f4:34:1f:19:
5d:20:f1:a1:f4:29:15:33:92:f2:ef:54:6d:fa:04:
ae:64:03:e6:26:9f:a2:0b:fc:88:20:b4:12:02:22:
af:75:cf:73:57:fa:67:2c:76:d1:bc:4e:ea:44:1c:
45:3e:8d:e3:11:b3:e3:bb:ee:5f:9a:f6:a1:e8:59:
8e:bf:22:0a:82:c7:be:c4:88:72:23:80:1c:6e:4b:
93:4a:9d:3a:1e:9a:72:15:22:93:f8:7b:ff:ba:73:
ff:28:fd:06:28:1d:82:75:c1:42:55:88:aa:ce:bc:
df:68:48:55:6a:2c:ca:ef:40:7a:e7:38:68:c2:e6:
a9:d9:d6:f9:29:dd:bf:aa:cd:ef:4b:6d:c7:ab:da:
9b:ac:17:6b:ec:7a:a4:48:81:e2:d9:73:3d:87:e0:
65:88:fa:0e:b4:21:19:50:39:59:16:a7:04:79:d7:
cf:be:d3:c1:47:1d:5a:29:81:c7:a6:78:03:ce:b0:
3c:80:05:df:b0:19:f2:a8:92:f2:9e:5f:bb:88:17:
2d:0a:d2:7e:e9:87:1f:d6:5c:ad:89:fc:03:41:e7:
8b:88:2f:1c:4c:e7:ec:8d:ec:97:eb:88:44:40:1c:
13:d2:06:f1:e5:82:fc:b8:d1:79:96:ce:ba:56:ff:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:A4:C6:D4:F9:A5:D7:05:8A:9C:E2:EC:83:B7:46:0A:FB:91:AF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LHakxtT5pdcFipzi7IO3Rgr7ka8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:77:9d:c3:0e:73:e5:34:1b:42:f0:8b:8a:8b:b0:24:49:ce:
07:df:97:0b:92:73:03:58:a1:63:c6:8a:62:37:90:3b:c5:0b:
b1:d1:38:72:40:5a:5e:c5:e3:e8:01:1c:70:7e:d8:6c:54:cb:
aa:4f:16:db:94:72:0c:79:16:ab:cc:74:7f:5d:08:44:9f:3a:
7d:c5:e6:be:2e:db:11:8b:c6:57:88:67:ff:d7:5b:8e:aa:a1:
b8:0e:f8:67:d2:dd:e5:43:aa:ac:05:1e:eb:18:b1:12:1a:28:
83:6a:07:64:26:c9:6a:55:04:cb:b4:47:e6:5c:41:ef:89:b5:
9f:bf:5c:89:d8:95:6e:ad:ea:eb:1e:aa:f5:7b:2d:ce:80:52:
8c:37:10:10:57:4e:a7:10:67:f6:67:ee:ea:7a:34:e0:ab:24:
14:ca:32:cd:22:ba:1a:46:b1:fd:e1:b0:6f:ea:e2:e8:a1:4d:
fa:0b:90:c2:ff:48:8e:c5:ad:9d:72:92:e4:b9:af:99:fa:83:
d5:30:7b:01:04:14:1c:6b:14:cb:f9:7a:e7:8a:70:94:2f:e7:
ff:db:e4:67:ea:0e:5c:9f:6e:4d:51:73:82:07:d1:24:1c:e5:
57:7d:ac:a7:79:df:42:15:22:b0:49:28:2a:67:b8:1a:3f:7b:
68:70:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:30 2025 by rpki-client