Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/P3UlxYSWcBzTZN_sve9luJyocbQ.roa
File: P3UlxYSWcBzTZN_sve9luJyocbQ.roa (raw, json)
Hash identifier: 68B7jx77twdJRdpIVrfoDgmN49hCeoUgfW2/Kbv0Thc=
Subject key identifier: 3F:75:25:C5:84:96:70:1C:D3:64:DF:EC:BD:EF:65:B8:9C:A8:71:B4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B0F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P3UlxYSWcBzTZN_sve9luJyocbQ.roa
Signing time: Sun 07 Apr 2024 07:52:29 +0000
ROA not before: Sun 07 Apr 2024 07:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15119 (0x3b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 07:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3F7525C58496701CD364DFECBDEF65B89CA871B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:10:1e:91:d8:4b:f2:ce:2c:1b:2f:33:19:
d8:44:d8:20:6c:0b:ff:f3:0f:02:ff:5b:00:01:9a:
b2:fc:61:8f:36:6e:dc:54:f0:34:c2:51:22:90:da:
88:6b:22:45:0c:6a:55:09:93:2a:f4:39:eb:9d:af:
5a:79:16:15:b1:15:27:d9:06:71:89:aa:1e:40:2d:
1b:80:6a:d4:7f:96:61:4c:35:36:68:7a:ef:c2:ce:
c8:69:70:83:e6:56:e0:3c:ad:78:f1:07:a0:d9:a8:
23:06:43:9b:d3:66:83:a0:4b:d8:f5:46:ec:8c:76:
a6:af:5a:1c:53:a1:d5:75:95:a0:86:49:ed:a1:10:
67:4c:3c:d7:ae:c7:c5:71:33:bf:2d:42:4a:ab:26:
b2:d6:59:3e:dc:46:c3:05:93:0c:c3:0a:07:ef:b6:
d1:7e:f2:cd:6b:5f:27:0d:58:22:a3:24:74:e0:bf:
1b:a5:d6:3e:a7:e4:b2:a4:15:7e:95:28:c8:de:54:
f3:de:5e:5c:3e:67:5e:ba:b6:c2:42:6b:31:96:6a:
ef:2d:3f:95:d5:bd:50:e0:49:ad:6b:b2:64:ce:47:
c6:01:51:9c:25:cc:fd:0f:46:2c:01:79:c8:79:b5:
c0:c2:31:31:82:50:40:c8:b1:7c:dc:be:a5:a6:d4:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:25:C5:84:96:70:1C:D3:64:DF:EC:BD:EF:65:B8:9C:A8:71:B4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P3UlxYSWcBzTZN_sve9luJyocbQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:83:18:11:21:43:d4:15:18:0e:7d:e5:09:81:db:80:55:7f:
36:12:ec:ca:52:b9:4e:64:e5:ae:34:52:5c:65:6c:75:70:39:
26:c3:e8:1f:6b:f5:f2:90:b7:39:4c:5b:85:13:3a:60:bf:b6:
c5:c9:4f:b6:ae:65:90:59:13:ef:11:ea:d1:b9:9c:d1:65:38:
f9:ef:22:9d:7c:9c:af:01:c2:cc:e7:d4:5f:20:2b:60:a6:34:
19:d6:db:56:c0:6d:7c:ad:76:70:3b:c9:1b:3c:27:ea:07:c5:
1c:90:83:c2:4f:64:30:ef:22:63:1b:a9:ae:0a:d8:fc:4d:31:
7c:c7:0f:6a:19:35:91:9f:0f:da:cd:92:d3:d0:bb:0e:39:9f:
2a:0d:ca:81:3d:93:49:9b:e8:0b:58:db:ad:4b:8f:2d:56:73:
07:66:ea:3a:9e:27:9d:fe:e7:96:97:69:39:a1:6d:c1:fc:85:
a2:e7:bc:d9:4f:1a:04:71:08:2b:80:1a:c0:55:fe:c1:95:ad:
2c:69:79:52:ba:17:81:dd:f7:e3:1e:2a:fc:58:69:82:b8:cd:
cc:de:b0:55:3e:a1:62:18:62:31:f1:67:15:1c:a7:71:19:f6:
a3:d3:83:fb:32:f1:d9:9c:63:67:95:73:5f:5a:5e:fe:fd:44:
11:b0:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:57 2025 by rpki-client