Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/j3MPTrMAakq90Vx9uHAb4SKgw8s.roa
File: j3MPTrMAakq90Vx9uHAb4SKgw8s.roa (raw, json)
Hash identifier: aim+gVi35MEZlCty+xPeX7GlZ5+vvCFf1x31ENf2zpQ=
Subject key identifier: 8F:73:0F:4E:B3:00:6A:4A:BD:D1:5C:7D:B8:70:1B:E1:22:A0:C3:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5763
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j3MPTrMAakq90Vx9uHAb4SKgw8s.roa
Signing time: Wed 15 May 2024 02:24:11 +0000
ROA not before: Wed 15 May 2024 02:24:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22371 (0x5763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 02:24:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8F730F4EB3006A4ABDD15C7DB8701BE122A0C3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:cb:7e:46:ed:a9:97:cb:56:8f:aa:91:ea:
54:08:64:42:54:99:32:9d:e1:aa:8e:29:5f:70:93:
d5:27:39:7a:18:bc:62:b9:44:4c:81:0a:6c:f6:75:
74:b4:03:fa:86:90:f5:fb:58:2e:51:cd:15:88:67:
c7:15:47:2c:52:3d:d6:6e:94:90:d3:cf:a2:a4:26:
1c:e2:70:1d:96:d3:0e:62:6b:6a:28:71:36:d9:9d:
c9:3d:f8:01:d2:93:9c:38:cf:af:4e:b3:fe:36:c8:
5a:95:1b:b7:f8:9d:e1:29:83:7a:e0:80:47:05:d4:
3e:29:e3:52:92:79:00:a9:d7:7a:c2:4a:c7:ec:51:
c7:05:30:c1:be:f8:98:0e:58:02:d6:17:20:73:92:
a7:01:6f:28:ca:b2:12:ea:ac:20:a3:90:81:d6:cb:
3b:af:72:03:c2:f1:ee:00:eb:32:c5:fd:ba:a3:b7:
f0:d8:75:16:ec:37:4d:76:12:35:47:37:cd:f5:76:
c2:09:f8:9d:5f:cf:7e:8b:6f:4a:a9:f8:12:5a:ea:
a7:1e:a9:a2:09:ac:d8:79:cb:66:70:52:17:c4:e9:
4b:48:d0:a5:12:e7:97:21:2a:9d:08:46:a3:f7:64:
21:6b:dc:97:9c:39:68:ff:01:45:37:0c:9a:6e:7c:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:0F:4E:B3:00:6A:4A:BD:D1:5C:7D:B8:70:1B:E1:22:A0:C3:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/j3MPTrMAakq90Vx9uHAb4SKgw8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:31:55:4e:fa:8a:06:d8:31:25:b0:2d:43:e5:9e:11:da:db:
3e:65:1e:c4:aa:44:51:39:cc:87:1c:24:61:14:15:67:2b:85:
ba:1e:d2:74:c2:4f:fe:02:0a:c1:b1:8a:95:26:01:10:85:91:
66:81:4b:ce:b3:b1:ca:06:2f:68:84:ca:8a:a7:dd:58:7b:86:
1e:7d:0c:5e:10:28:0c:42:c0:56:57:35:fa:9e:81:b0:bb:16:
86:3f:47:f2:df:51:01:fa:eb:c7:3b:8f:d3:c4:6a:05:9c:cf:
a0:9d:16:b1:f5:49:00:95:ad:35:2a:8f:a4:19:32:72:37:33:
32:ba:43:0d:20:58:be:60:e4:e4:8d:5b:b5:ee:67:8d:c7:e2:
11:35:b1:dc:e4:63:17:a4:f9:1c:d2:4b:16:6b:58:eb:a8:f2:
ba:c2:97:17:7b:5d:a8:b6:ff:c0:41:4b:08:80:e5:1f:60:79:
a3:e3:63:58:57:cf:dc:3e:b5:a3:51:80:46:13:bb:a1:01:e7:
37:cf:c4:e8:ca:54:1a:af:f9:3b:8a:9c:2c:b1:c8:41:2e:7d:
25:ad:e5:93:b7:1e:b2:32:ab:c2:b6:82:df:14:02:81:2f:eb:
c5:7f:29:26:56:07:51:f6:63:6d:cd:51:2f:e9:e6:7b:70:c2:
8e:37:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:37 2025 by rpki-client