Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U6Hegph-RKEcpMlFOSZlpCuTmwo.roa
File: U6Hegph-RKEcpMlFOSZlpCuTmwo.roa (raw, json)
Hash identifier: NzOVk3Emnco+iEo5xCV9PAnExFwkXVubYtj2MPiu53c=
Subject key identifier: 53:A1:DE:82:98:7E:44:A1:1C:A4:C9:45:39:26:65:A4:2B:93:9B:0A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BA3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U6Hegph-RKEcpMlFOSZlpCuTmwo.roa
Signing time: Mon 08 Apr 2024 02:22:33 +0000
ROA not before: Mon 08 Apr 2024 02:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15267 (0x3ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 02:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53A1DE82987E44A11CA4C945392665A42B939B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:12:67:a3:ec:59:7d:ff:be:1c:f5:2d:d5:
3b:23:37:22:ee:f1:57:26:ea:da:f0:76:a8:1e:88:
93:ee:92:15:16:4c:e3:92:af:09:3a:04:a5:9c:0e:
03:68:d0:84:ef:a3:64:4b:c5:2b:b8:bb:81:1d:da:
6b:d2:0a:11:c3:9e:e1:a3:f4:67:57:12:94:da:2d:
6d:ec:20:15:30:bd:37:e5:d8:e4:fe:b5:99:96:c6:
33:7b:81:04:ea:7e:4a:fe:fc:b1:a3:e5:c5:2f:e1:
52:c7:8f:4f:05:57:4b:aa:d8:b4:3c:ef:0b:bc:67:
25:49:b5:00:b0:a8:01:98:c8:8c:09:53:49:08:00:
16:2c:74:d3:a5:7b:52:e9:69:c4:bb:7f:89:11:24:
05:ad:4e:51:ee:b4:3e:c5:b1:15:46:f3:0e:e4:56:
ee:06:3e:64:3b:65:ea:ab:8e:30:20:44:3f:29:f8:
ac:99:83:e2:3f:ba:04:68:4f:e4:3d:d5:4d:4a:da:
3b:4f:e6:ae:ec:7d:c6:a7:24:07:04:0d:bd:e9:3c:
5c:be:fb:88:0c:3b:f1:42:d4:e3:c1:58:d2:32:3c:
0b:e3:92:5e:90:c8:fe:b6:c9:9a:8a:8a:73:71:fc:
96:15:25:fa:32:88:8d:31:6c:0b:96:ac:54:e6:98:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A1:DE:82:98:7E:44:A1:1C:A4:C9:45:39:26:65:A4:2B:93:9B:0A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U6Hegph-RKEcpMlFOSZlpCuTmwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:5f:2d:98:4d:f6:91:99:27:46:ed:99:f1:8c:de:03:ce:12:
87:3f:66:f5:f9:e7:c6:c1:7e:4d:10:4a:15:d4:b9:f9:d3:f5:
6c:95:5a:ac:49:40:93:28:4e:f1:df:90:87:2e:7b:ba:96:b1:
41:7b:48:b7:de:33:27:34:ee:69:82:c1:af:ba:19:ef:cb:45:
cd:75:ec:fb:dd:81:db:8e:e6:78:65:0a:93:74:d4:d4:3d:1f:
2f:24:69:a4:47:33:93:71:af:b7:4a:97:1d:f0:a7:27:7e:92:
57:5f:cb:c4:0e:63:b1:e6:b3:69:dc:4a:c9:cf:b3:a6:92:3a:
a8:c9:8b:fd:c8:c0:ee:90:07:5b:b5:41:f0:60:1f:8c:94:25:
23:90:93:94:cc:76:ad:7a:e3:e5:af:60:c0:7d:6f:d0:e8:41:
f9:6a:b5:8c:b3:86:1f:85:a8:f6:d8:d0:4b:0e:6a:14:0e:ac:
2e:3c:7f:29:e6:96:a1:ce:a0:ea:d3:1f:e4:66:6d:97:1f:11:
55:d3:74:bf:0a:74:e7:fd:eb:2c:3c:7d:df:97:f6:63:b9:19:
9e:72:d6:a6:6c:58:e5:4b:da:0b:67:ac:12:b2:f8:c2:88:e1:
fe:92:fd:c4:4a:25:be:7c:a1:d6:a7:e0:37:1b:1a:86:76:3c:
aa:f1:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:35 2025 by rpki-client