Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l4P-SRo01lvoMU9jMHof_Ar-XDc.roa
File: l4P-SRo01lvoMU9jMHof_Ar-XDc.roa (raw, json)
Hash identifier: Yz2YUBvns3f5LqJjaAaQ5SkCyNaOZp3obUgHsfVpAGI=
Subject key identifier: 97:83:FE:49:1A:34:D6:5B:E8:31:4F:63:30:7A:1F:FC:0A:FE:5C:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E63
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l4P-SRo01lvoMU9jMHof_Ar-XDc.roa
Signing time: Fri 03 May 2024 02:23:42 +0000
ROA not before: Fri 03 May 2024 02:23:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20067 (0x4e63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 02:23:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9783FE491A34D65BE8314F63307A1FFC0AFE5C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:ce:59:1a:e9:ab:a0:22:79:8c:37:de:be:
5d:84:13:07:78:d1:87:83:09:26:e1:50:44:c8:74:
c2:11:c8:8e:ed:4b:93:f4:dd:16:72:21:20:54:97:
9d:f8:7d:b3:97:e6:ca:24:bc:d2:71:f6:86:c8:c1:
79:67:bd:8c:c4:88:20:3a:15:21:5e:36:ed:05:7b:
4e:b0:10:54:9b:20:29:75:ff:f5:3c:50:6e:b2:46:
2f:0f:42:4a:b7:08:eb:92:a0:1f:54:c7:5e:57:92:
fd:57:cd:a6:da:4a:97:4b:fe:bd:a6:d9:62:26:b7:
d4:b8:6f:08:c5:4c:a2:5f:45:81:32:92:a3:71:2b:
cb:43:9d:67:9c:14:27:26:d0:67:b5:3d:9f:0d:ed:
fc:cc:5d:7f:bd:55:8b:29:d1:70:aa:a0:78:d8:e1:
a1:0a:53:2e:89:b9:25:0c:ea:f6:7e:c2:cd:02:3f:
80:a4:2e:a0:6d:71:39:8c:06:40:c3:22:29:81:90:
19:f2:c7:d1:88:20:5e:08:2b:dc:40:1b:47:e0:89:
63:a9:1a:90:8b:b2:c6:d5:93:69:18:12:54:ca:08:
6a:bc:82:6c:eb:d4:11:c1:b4:5d:b3:3c:4c:d2:0b:
b6:5a:a3:a1:5f:ce:9d:fe:54:9b:0d:f5:50:7e:ac:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:FE:49:1A:34:D6:5B:E8:31:4F:63:30:7A:1F:FC:0A:FE:5C:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l4P-SRo01lvoMU9jMHof_Ar-XDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:11:72:20:7e:ff:5a:01:ae:bd:d0:65:91:9a:c1:f4:a0:22:
6e:bf:e4:61:18:70:30:73:4c:94:91:25:48:15:22:d3:a0:0c:
94:c5:b3:1d:62:34:6d:81:31:0e:97:8e:7a:09:63:e3:c6:76:
93:8b:4c:85:ed:33:26:75:df:62:97:27:af:70:fc:2c:10:f2:
9a:c9:eb:c4:90:6a:40:80:be:15:ae:7a:8d:0a:fa:78:d6:87:
b7:9f:dc:b1:1a:91:4c:b5:10:0e:0d:67:70:26:db:df:ea:e6:
3a:77:7a:78:2a:5d:30:0f:63:39:5d:bb:74:0a:a5:df:21:ad:
19:44:fb:f8:5c:02:2d:f0:cf:bc:74:5d:21:cc:50:29:88:9a:
ce:90:96:5c:8e:c8:59:45:fa:ef:01:2d:16:43:cd:e3:cd:49:
d5:37:d9:76:ac:35:b3:99:d7:76:72:41:24:55:73:39:f8:28:
03:7a:b6:af:1d:c6:2b:ad:21:54:be:27:74:c6:8d:e5:f1:2f:
4b:9a:06:32:2c:7c:0d:2d:bd:0d:0e:b1:19:db:fa:30:83:80:
b5:aa:07:dc:fa:59:6b:ff:76:33:37:d2:3f:31:c3:62:ec:c0:
99:a4:bc:e6:ea:52:ef:ab:ce:67:9e:01:97:94:e7:10:a0:07:
1a:2b:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:10 2025 by rpki-client