Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LLAplBtS94IJh7yGfq_lKiCN1vI.roa
File: LLAplBtS94IJh7yGfq_lKiCN1vI.roa (raw, json)
Hash identifier: milADVNw2X0LbNJ3e4Ac0IdsLvMzE5EEbvI3AeGBvOU=
Subject key identifier: 2C:B0:29:94:1B:52:F7:82:09:87:BC:86:7E:AF:E5:2A:20:8D:D6:F2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3347
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LLAplBtS94IJh7yGfq_lKiCN1vI.roa
Signing time: Wed 27 Mar 2024 22:52:01 +0000
ROA not before: Wed 27 Mar 2024 22:52:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13127 (0x3347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 22:52:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CB029941B52F7820987BC867EAFE52A208DD6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:4b:0a:c6:21:58:ee:32:55:94:95:68:db:
2b:19:fd:4d:29:b7:ec:56:b6:0d:5d:62:14:ff:c8:
ac:ba:9f:fa:b9:38:99:e7:50:24:9b:3f:99:3b:69:
a0:34:37:ff:2e:00:ff:6c:df:2e:70:ee:9e:79:bb:
05:b6:f0:e1:d6:20:ae:20:d5:d3:c4:a6:38:50:c6:
a4:6c:10:a8:7e:18:79:32:7e:6a:bc:dc:de:09:ed:
82:c6:e9:0a:4d:f9:57:2f:40:44:6d:66:b3:30:89:
21:51:be:77:04:d9:d7:09:8c:48:90:66:dc:22:59:
4c:9a:0c:80:91:b6:05:3e:f8:f8:84:c5:72:99:af:
00:8b:ec:4d:61:de:d0:48:9c:0a:c0:45:f8:e5:fa:
c4:97:e8:a7:db:e9:17:7d:14:93:5f:69:4a:db:dc:
19:e4:0b:d6:08:50:e2:80:ab:25:d1:78:31:51:3a:
b0:3a:a0:32:38:b9:71:6d:37:e5:5a:05:3a:e4:26:
b7:a0:b7:50:1d:f6:c4:a2:8a:7e:b4:9f:d6:c9:3d:
74:6d:4e:4c:d9:00:44:79:24:f2:f6:bc:7a:8d:08:
0b:24:6b:db:bd:0f:aa:4e:9d:ba:b9:b1:12:91:d8:
8c:2c:5c:11:8f:e7:dc:e2:c5:fa:f1:53:e4:68:4c:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:29:94:1B:52:F7:82:09:87:BC:86:7E:AF:E5:2A:20:8D:D6:F2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LLAplBtS94IJh7yGfq_lKiCN1vI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
27:3f:32:b1:21:c1:7e:d9:8a:32:dc:75:94:1a:42:73:41:f2:
89:89:13:1b:12:0d:d2:a9:8a:17:51:c6:98:49:64:7e:41:57:
82:53:64:c4:c7:8a:fa:11:5b:97:58:8f:16:56:9b:41:2e:70:
df:18:8a:62:fc:7a:a0:07:6f:e8:b8:38:21:14:a6:f6:59:6e:
56:7d:9d:c1:c6:0a:4c:8c:b5:5f:76:38:2e:9f:41:f2:f9:6d:
99:84:ac:00:92:60:48:79:76:1e:1f:2d:50:62:16:9e:32:4c:
ef:b9:ef:41:b3:42:10:9e:b1:79:37:e0:f9:b2:6d:39:e2:05:
a9:6f:54:a3:22:df:e2:20:83:c6:dc:d1:e5:66:17:fc:50:03:
4f:41:23:3c:e1:3d:6a:85:0b:11:89:2a:de:5f:bd:df:6e:50:
f0:f6:af:a9:e7:56:1e:99:36:44:60:2c:bd:e5:24:c7:aa:5f:
cc:0c:81:e1:ed:35:35:4c:16:2a:9b:e6:ee:20:17:44:ba:3a:
e3:e1:71:a8:92:fd:6f:df:fc:6f:29:14:ec:6a:f3:0e:d9:06:
89:a8:f2:08:44:44:ce:26:0f:92:d6:09:07:0e:da:a0:96:46:
2c:91:78:75:b4:ed:d9:de:66:81:0e:0b:42:e9:86:c3:6b:3c:
ad:5e:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:55 2025 by rpki-client