Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/O5gM08OVsP_xCH-PmahuzjPWqEc.roa
File: O5gM08OVsP_xCH-PmahuzjPWqEc.roa (raw, json)
Hash identifier: j2ypooEvVxIjwCSyvFDhWukgWJeJGrMflJP8ywZGaHE=
Subject key identifier: 3B:98:0C:D3:C3:95:B0:FF:F1:08:7F:8F:99:A8:6E:CE:33:D6:A8:47
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3FEB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O5gM08OVsP_xCH-PmahuzjPWqEc.roa
Signing time: Sat 13 Apr 2024 19:22:55 +0000
ROA not before: Sat 13 Apr 2024 19:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16363 (0x3feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 19:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B980CD3C395B0FFF1087F8F99A86ECE33D6A847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:af:f3:e5:ee:86:6d:72:d6:2f:d8:ed:6c:
77:3a:38:92:96:3c:f3:a5:aa:2e:ae:18:df:e4:fa:
80:1b:27:4d:9a:0c:bf:1c:15:f8:a5:0c:c7:dc:fd:
e6:a5:d8:00:26:72:30:b6:c8:ce:97:9e:8b:a2:90:
2c:6f:54:61:af:b6:4e:83:08:e0:18:f7:26:bc:19:
c8:67:ab:3e:d4:37:9a:03:da:42:78:41:d7:0a:df:
e4:f8:f1:1f:29:97:2a:15:b8:03:96:0f:10:c0:2d:
cd:72:fa:06:90:51:92:be:3d:80:19:3d:c3:dc:62:
ce:7d:54:92:60:0f:fb:c9:fd:46:cc:c1:36:d9:23:
9e:35:ab:af:93:f8:32:de:f3:c7:39:43:8b:82:c4:
66:09:0b:ff:95:63:13:6e:ba:a0:13:96:c2:9e:71:
27:d8:53:84:64:07:94:4d:94:c3:37:80:c4:5e:69:
f8:61:1b:83:e2:cb:34:6b:0b:47:61:53:6f:d5:37:
63:dc:6b:0d:a1:c8:ee:d9:03:2d:48:17:7d:93:01:
f8:7b:2f:77:e0:85:f3:b3:0d:6c:76:92:d1:d8:04:
8a:ce:ff:97:d0:bd:e2:a2:1f:68:69:cc:b2:05:39:
c1:78:2b:f7:b4:42:16:76:7e:c3:6b:bb:7d:e3:f7:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:0C:D3:C3:95:B0:FF:F1:08:7F:8F:99:A8:6E:CE:33:D6:A8:47
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/O5gM08OVsP_xCH-PmahuzjPWqEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:e1:c6:85:29:34:02:e8:56:dc:4c:f8:aa:a1:eb:ea:fe:1d:
3a:3f:f5:05:3c:26:d4:a3:40:04:f5:9b:d9:88:27:45:5f:7a:
1d:55:9e:8d:45:29:77:06:90:8f:83:40:b8:0e:6f:53:38:58:
0a:2a:04:c2:6b:a3:62:cd:80:ea:d5:bf:bd:66:f3:1d:a6:bc:
d2:23:22:82:d4:4f:6b:43:8b:f8:2e:52:98:e8:19:af:b9:69:
f5:15:84:f2:63:16:33:a9:29:12:ae:a6:09:11:ae:1f:26:02:
ce:88:15:35:9f:a8:76:06:bc:6d:63:1d:f7:10:80:a2:f7:8a:
ff:69:f5:ae:50:0f:12:12:e8:fb:9a:3a:dd:1c:fc:d0:99:02:
6b:90:c3:11:f0:54:10:df:64:1f:fa:39:e9:21:34:14:5e:5e:
12:56:e8:28:f1:7a:00:e3:f1:31:3b:b9:9b:a1:9c:66:31:a7:
7d:6c:84:92:40:56:45:d3:4b:e5:ea:b6:2e:f7:00:c1:fd:46:
36:cc:f1:79:35:1a:42:68:1b:1c:ec:e1:81:2f:f1:38:7a:3f:
a7:63:bf:b0:55:cb:47:d4:d7:2e:6e:6b:28:94:2c:48:54:0e:
7b:df:a5:4d:28:77:81:9b:dd:c4:01:f4:6f:25:f5:77:ba:3e:
b5:bf:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:23 2025 by rpki-client