Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ezoYET3e4vmVq8cko3msz6VIGF0.roa
File: ezoYET3e4vmVq8cko3msz6VIGF0.roa (raw, json)
Hash identifier: wt+npP8HShW00DjJFHb2UdLbKZqnQ6h6IbVQvzCDn58=
Subject key identifier: 7B:3A:18:11:3D:DE:E2:F9:95:AB:C7:24:A3:79:AC:CF:A5:48:18:5D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3503
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ezoYET3e4vmVq8cko3msz6VIGF0.roa
Signing time: Sat 30 Mar 2024 06:22:08 +0000
ROA not before: Sat 30 Mar 2024 06:22:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13571 (0x3503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 06:22:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7B3A18113DDEE2F995ABC724A379ACCFA548185D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:7a:dc:ca:69:0d:a4:fc:76:09:43:c5:44:
64:38:42:dc:1e:1d:57:c9:12:2c:1c:e2:4f:ad:f8:
90:97:e9:74:22:cf:2e:61:80:bd:8f:7c:29:ca:b9:
b5:ae:85:20:99:27:a1:73:b1:9f:61:7b:46:aa:75:
7b:01:92:ce:e8:e0:d0:05:48:3b:63:14:bd:95:44:
d0:7e:af:32:3f:c7:a4:56:7f:42:9c:21:80:ac:05:
88:f5:25:15:40:4b:7a:aa:10:69:4e:2c:44:96:37:
a0:2a:3a:24:25:be:a8:21:5b:97:e7:93:16:9c:56:
b5:5e:aa:2b:8d:0b:22:53:76:96:e3:ac:d3:3b:75:
9b:2e:15:08:aa:d6:ac:58:7d:26:4e:8f:5e:47:a3:
9b:da:f5:33:7f:cd:86:52:1c:b2:e4:2d:4b:36:eb:
7b:85:3a:e1:e6:f6:71:8e:1c:09:89:ab:9c:8e:f0:
be:6a:11:d4:e1:2d:4a:42:7c:af:49:66:d7:ae:a3:
18:32:08:84:9f:6f:bc:8f:c7:46:0b:e3:d0:b3:fe:
bf:b3:32:64:8d:4e:20:64:1e:3c:69:7d:4e:83:c2:
18:7e:ef:fd:45:0e:c7:c8:12:70:b3:b4:8b:d1:5a:
dd:91:0e:24:18:54:fe:13:1b:0e:39:41:ee:d6:cb:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3A:18:11:3D:DE:E2:F9:95:AB:C7:24:A3:79:AC:CF:A5:48:18:5D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ezoYET3e4vmVq8cko3msz6VIGF0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:50:d8:6c:f3:86:ba:4e:30:2d:56:77:c9:b6:f6:2f:84:51:
69:c9:23:c3:f7:fa:11:a3:8c:49:87:6f:13:6a:87:7c:dc:eb:
96:af:16:2e:2e:85:3c:d2:c1:a4:ac:08:f9:bc:f8:74:ac:5f:
b4:15:77:2e:f7:d1:77:e8:5e:ef:0b:d4:1d:14:11:17:14:da:
fa:5f:01:a9:6b:bd:f4:ca:ce:17:70:a6:4c:ff:b3:cc:d7:7b:
1a:a0:f4:72:7a:25:b9:f1:fb:08:9d:e3:2f:01:de:cb:9b:ac:
80:69:07:8c:d4:09:3b:77:4c:ea:32:ef:b5:55:d3:49:5f:b4:
1b:c2:51:9e:44:02:7f:69:43:85:b2:86:84:a3:0d:73:7c:50:
f4:3b:4f:d7:a8:bb:09:47:c7:05:9f:2d:1e:6c:c9:21:16:9f:
72:46:98:9e:e0:76:03:01:ca:8a:c0:c1:28:2b:0e:a0:4d:01:
fc:5e:68:a3:73:2d:db:6f:b3:93:d8:21:bd:d1:52:58:47:3a:
01:7c:df:b8:68:d4:51:09:e2:a5:97:f5:e9:ec:4a:af:3f:ce:
45:d2:ad:9e:bc:4c:bb:0e:53:df:b7:e5:89:8e:e8:a7:29:b8:
fa:f9:fe:38:5c:de:27:1c:35:cb:2c:8f:f3:33:09:f2:70:b6:
cf:25:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:39 2025 by rpki-client