Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/LPYBy-tCS879j2a7pRWbyI0zp3E.roa
File: LPYBy-tCS879j2a7pRWbyI0zp3E.roa (raw, json)
Hash identifier: 5drBdUlD7cijmm4QotiTOmsE7HZxmOLusjs5vUZoOko=
Subject key identifier: 2C:F6:01:CB:EB:42:4B:CE:FD:8F:66:BB:A5:15:9B:C8:8D:33:A7:71
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53CB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LPYBy-tCS879j2a7pRWbyI0zp3E.roa
Signing time: Fri 10 May 2024 07:24:02 +0000
ROA not before: Fri 10 May 2024 07:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21451 (0x53cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 07:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2CF601CBEB424BCEFD8F66BBA5159BC88D33A771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:58:af:94:79:1b:f4:e9:ed:4e:7c:db:1f:
32:61:c1:e8:86:14:b3:5f:06:64:b3:50:29:2a:b7:
5c:9d:80:8c:15:3c:49:2f:40:97:1f:4a:25:47:c8:
63:b7:10:4d:1a:87:5d:cc:a3:a6:a6:dc:93:0a:18:
dd:41:28:80:7a:49:47:28:a8:85:fd:fe:90:e9:57:
fe:c5:84:5a:1e:dc:3e:b5:db:d5:80:6e:fb:10:01:
fc:6f:2c:fc:09:7e:e3:d8:c7:44:b0:6a:fa:6e:03:
7d:7a:aa:11:d4:a0:a9:ee:9f:42:2a:99:cf:2e:d3:
b2:71:cf:7c:c3:9b:2f:f9:1d:11:80:09:d8:91:15:
30:73:87:f8:a5:c5:69:ce:be:5b:71:f6:16:ec:85:
ce:bf:d1:d2:59:ec:a2:7f:64:02:dd:0b:e6:39:01:
3e:d6:18:46:08:54:b7:91:84:4d:94:64:ec:e7:c6:
99:12:33:62:42:93:35:85:a0:57:3b:4c:db:68:95:
73:a2:12:a9:76:c7:d4:24:50:8e:16:4a:78:f6:99:
ef:25:db:05:d9:9d:79:ee:b4:15:e4:47:86:e2:5f:
88:b1:9c:7c:04:53:28:eb:9c:ca:d1:e9:a2:a6:48:
2b:95:d8:7c:f4:92:19:a5:20:38:ba:03:62:94:14:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:01:CB:EB:42:4B:CE:FD:8F:66:BB:A5:15:9B:C8:8D:33:A7:71
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/LPYBy-tCS879j2a7pRWbyI0zp3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:77:6b:7a:90:de:bc:3a:f9:4e:2b:15:ec:52:24:47:34:e1:
97:41:70:ac:b5:4c:46:f5:1a:a3:47:48:57:55:5c:1c:6a:34:
64:d8:7c:0a:54:e2:ea:70:a1:82:3b:10:da:47:9b:c9:ee:f4:
db:29:d6:a2:9f:e9:4e:aa:d0:1b:17:37:5d:99:84:5f:ff:1f:
b2:ad:51:af:e8:68:48:fd:42:5b:f3:9d:b6:17:eb:68:a6:57:
75:4f:96:1d:8f:2a:b9:43:67:95:b7:92:e7:53:65:37:7b:13:
42:cc:41:70:76:06:5d:ce:b2:62:51:ee:c4:78:be:12:cf:54:
37:cd:b0:e4:3c:5b:f7:74:d2:41:fa:28:ea:eb:49:b7:4e:cb:
83:83:b8:53:50:fe:dc:d6:7c:15:74:eb:f9:c0:3d:2d:01:ba:
e8:ae:3d:23:20:f6:d6:d2:84:bd:a4:f9:5a:4a:84:f7:aa:84:
6a:68:eb:57:9b:8f:b0:c0:d2:24:76:0e:b7:2d:84:bf:5f:bc:
ac:52:c5:f7:68:98:20:3f:8b:d7:fa:65:0f:a6:51:b8:9f:8f:
53:b7:8b:f2:c8:2c:39:32:71:1d:19:85:1e:12:80:9e:3b:0b:
a8:4c:62:0e:6b:6d:4c:4f:03:00:95:40:8b:ea:f3:68:e8:02:
f5:12:39:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:36 2025 by rpki-client