Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kVt3Zeg6Tk5s-RD_OGP3ro9ii3o.roa
File: kVt3Zeg6Tk5s-RD_OGP3ro9ii3o.roa (raw, json)
Hash identifier: FRIrZWgQF/ANdIXHIuDNe3mkUKAb4TvPjLV7u4H1ME4=
Subject key identifier: 91:5B:77:65:E8:3A:4E:4E:6C:F9:10:FF:38:63:F7:AE:8F:62:8B:7A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4833
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kVt3Zeg6Tk5s-RD_OGP3ro9ii3o.roa
Signing time: Wed 24 Apr 2024 20:23:16 +0000
ROA not before: Wed 24 Apr 2024 20:23:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18483 (0x4833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 20:23:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=915B7765E83A4E4E6CF910FF3863F7AE8F628B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:16:b1:7c:8b:df:aa:be:9e:a5:b1:86:e2:
c7:f8:60:1a:3e:12:37:ee:e0:bd:56:40:7f:3b:11:
21:e2:62:68:c4:dd:5f:ed:18:de:c3:60:dc:ce:f8:
08:c5:0b:af:3d:79:b1:6d:6a:24:2c:c5:4c:91:fb:
3d:5f:05:cc:6a:12:eb:98:88:96:fd:21:25:4e:a9:
d3:7e:9d:6f:04:90:ab:af:cc:44:2b:1e:d8:18:d1:
18:90:07:df:9a:5d:2d:9e:73:6d:f7:ec:7c:48:0b:
d7:21:36:84:f9:61:fa:d1:a0:5c:0e:bd:99:c8:93:
7a:14:62:0f:ff:a8:42:17:f9:2e:bc:06:a6:e5:47:
99:d3:ba:1e:5e:fe:67:d5:5e:9f:63:73:a8:4d:8f:
3a:1b:4e:f5:aa:db:20:3c:25:be:e7:24:34:4c:2c:
c4:ee:5a:cf:ed:24:88:3f:f6:f4:5e:d5:a1:11:0f:
62:b1:00:f1:85:0d:fd:7d:75:8b:63:83:74:00:bd:
3d:d8:66:79:a4:c9:38:16:8b:90:b9:85:cf:a2:ef:
ed:5f:49:98:bc:71:08:15:b7:14:5f:c5:66:7c:b5:
73:10:00:3b:fd:68:0c:00:d2:d7:01:d0:06:98:d0:
41:9f:01:a9:04:ab:50:02:cc:76:63:f4:37:92:a3:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:77:65:E8:3A:4E:4E:6C:F9:10:FF:38:63:F7:AE:8F:62:8B:7A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kVt3Zeg6Tk5s-RD_OGP3ro9ii3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:b6:1a:97:59:97:b0:aa:d4:e6:34:00:18:bb:9d:d6:4a:28:
89:4b:b7:e5:24:d7:43:d3:2d:f0:71:2b:3e:48:5a:6c:02:6f:
a0:1a:75:35:a4:d7:d1:be:6b:23:38:29:56:28:42:dc:ba:7c:
3c:c6:0d:51:d8:8a:d4:62:d2:78:f1:57:7c:7d:28:f8:82:17:
f1:aa:f8:dd:11:1b:1c:2c:37:8e:26:31:7b:0c:0d:e7:e0:ee:
cb:6f:c6:8a:86:f2:ae:da:35:f9:13:40:16:6b:c9:eb:a6:7d:
de:7a:1c:63:fd:5c:a2:32:a6:e1:e2:88:f8:a9:f2:3e:5c:f7:
5f:e3:9e:27:51:7d:6a:2f:e4:d9:c8:bb:ce:ac:3f:80:1e:95:
87:4d:54:9f:6a:e0:b5:4d:e4:e8:ee:34:91:c6:e8:d4:2f:a4:
82:8d:f9:a4:be:2f:66:a4:ec:59:96:8f:da:31:1d:d8:83:c0:
88:62:1e:5f:f2:89:56:8f:eb:9e:b6:f0:4d:0d:0d:74:3c:1d:
88:1a:9c:9f:20:0d:78:fd:dd:ac:d4:fc:ed:64:f7:ff:48:ce:
d5:4e:1b:fd:6a:c0:5e:b4:19:cd:5d:e2:e2:ae:b3:9d:c4:97:
a6:fb:ab:2a:d3:26:ed:d4:80:50:93:8e:d0:70:69:4a:d0:e6:
f3:be:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:58 2025 by rpki-client