Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Lvq28wVa4O5Nv-J7GkRWZX4xk9M.roa
File: Lvq28wVa4O5Nv-J7GkRWZX4xk9M.roa (raw, json)
Hash identifier: wHTezyb5VS/XcS1j2ozNAxDRD7WiUAs+6Z3KR274Fjo=
Subject key identifier: 2E:FA:B6:F3:05:5A:E0:EE:4D:BF:E2:7B:1A:44:56:65:7E:31:93:D3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DFF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lvq28wVa4O5Nv-J7GkRWZX4xk9M.roa
Signing time: Thu 11 Apr 2024 05:52:47 +0000
ROA not before: Thu 11 Apr 2024 05:52:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15871 (0x3dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 05:52:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2EFAB6F3055AE0EE4DBFE27B1A4456657E3193D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:6a:38:99:0f:dc:e8:fb:a6:b3:ff:db:10:
3d:2f:df:54:d1:57:5c:60:52:27:cd:b6:1b:00:7b:
fd:64:9d:f6:f4:ac:c9:6b:e0:bb:5d:5e:1b:bc:74:
c9:bc:e3:b8:95:eb:91:4c:39:53:a9:3d:02:f0:f7:
3c:62:8e:5a:9a:39:fc:49:82:48:38:fb:d5:23:f1:
f9:c1:ab:95:d7:1c:a8:96:31:68:b1:b2:ab:47:92:
11:af:b5:7d:7f:a3:c1:00:b4:6a:34:ca:62:22:7e:
f4:04:e4:85:fc:c8:ac:a6:cd:14:a3:5c:eb:ff:18:
02:dd:68:3c:d8:8d:a4:f8:af:41:e0:9e:25:b4:e0:
95:13:15:4f:1f:4f:08:62:f2:9e:55:61:97:10:83:
cc:f2:aa:98:68:95:0f:46:62:ac:58:6d:dc:7a:3f:
6e:93:42:6c:7d:9b:d0:f9:2b:c6:9f:09:3f:9e:20:
df:37:ba:6b:21:24:b4:a6:58:a6:b6:1e:b2:96:35:
06:2a:3a:90:df:c7:f1:6b:58:23:be:2e:1a:df:fb:
4a:02:48:ee:fb:37:5d:28:3f:6c:31:f2:67:15:de:
9c:a8:e2:3f:9e:56:6c:14:a1:87:d7:2f:b5:9b:f7:
d1:a9:d6:e7:32:50:e7:8e:fc:23:43:5b:f3:e1:f5:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:B6:F3:05:5A:E0:EE:4D:BF:E2:7B:1A:44:56:65:7E:31:93:D3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lvq28wVa4O5Nv-J7GkRWZX4xk9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
33:eb:b6:f7:8d:17:da:ae:ac:59:64:13:7d:a4:9c:55:47:df:
94:af:3a:4d:85:6d:5c:28:0d:1e:a0:5c:9e:aa:37:64:67:32:
f8:5f:50:c1:6f:8b:17:4c:6f:11:80:54:31:29:0a:90:f8:3d:
d6:4f:41:07:f6:71:b0:8d:cb:e3:97:d0:13:8b:94:b0:3c:a4:
35:fc:1c:53:b1:80:77:13:a4:cc:c8:90:42:a6:3b:6d:fb:dd:
ac:37:1e:5e:68:cd:11:6c:dc:73:cb:ac:eb:f4:e8:26:fa:f8:
93:10:ff:5e:10:fb:15:38:6d:ce:02:4d:17:75:b0:19:99:f5:
8e:7f:41:89:d1:19:42:42:8c:b3:60:d3:44:8f:45:bc:93:7a:
07:a8:fd:78:4d:62:e1:8c:34:4d:03:86:54:b4:3a:af:5c:ef:
43:66:5d:37:35:98:f8:6c:45:62:c3:b5:c0:98:e7:b5:50:67:
aa:61:13:9b:ab:62:16:84:8b:4e:03:1d:85:95:60:c6:0d:09:
b4:90:bb:22:f4:42:59:bf:a9:18:30:05:cd:bb:41:ac:4f:18:
e8:fd:40:dd:68:8c:60:6b:b9:a7:d1:cd:f1:72:6c:00:16:48:
7b:be:66:8d:34:73:c5:d9:60:1a:f9:5e:cc:09:b9:f5:88:db:
5b:64:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:35 2025 by rpki-client