Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lDtxUfQb9OB5FRADEJ1PSvfGaW4.roa
File: lDtxUfQb9OB5FRADEJ1PSvfGaW4.roa (raw, json)
Hash identifier: DCfNUAgE5AhUxPvkH9naKwl45DmS4qIicEOAXpVZq5A=
Subject key identifier: 94:3B:71:51:F4:1B:F4:E0:79:15:10:03:10:9D:4F:4A:F7:C6:69:6E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4907
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDtxUfQb9OB5FRADEJ1PSvfGaW4.roa
Signing time: Thu 25 Apr 2024 22:53:21 +0000
ROA not before: Thu 25 Apr 2024 22:53:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18695 (0x4907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 22:53:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=943B7151F41BF4E079151003109D4F4AF7C6696E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:39:b5:1c:41:33:b0:1f:e0:52:18:e9:e7:
e2:5e:ba:67:b9:cc:0f:5a:24:8a:da:58:ab:c8:f9:
62:fd:1d:f6:a2:5b:87:12:bc:2f:9d:19:33:96:54:
63:ab:b8:5a:9e:3d:e6:70:44:5e:f7:49:e2:10:a6:
68:2c:85:f8:c8:60:d4:85:75:fd:a9:30:8d:4c:07:
b2:e2:16:8e:53:db:bc:90:fe:94:c0:5c:8b:2f:b5:
68:99:a5:42:3b:bb:f3:bf:50:13:d4:ed:de:b8:97:
f2:ba:df:5c:f6:ce:28:f0:0d:c6:b2:6f:e4:51:0d:
0b:d3:32:8e:54:90:30:bf:e6:0d:1d:07:08:61:96:
3c:35:2a:c4:08:31:d2:15:93:73:25:76:fe:45:64:
e2:75:e9:b0:67:49:36:4e:4b:83:f2:59:e3:46:3f:
94:ec:32:05:b4:0e:af:c4:6e:71:bf:48:fa:c7:c5:
af:c0:7a:3f:4b:f7:e6:b6:72:4a:ad:a3:45:4e:84:
e9:6d:45:8b:98:90:7f:ca:c1:5b:d4:90:5e:18:38:
65:e4:31:ac:09:2f:3d:31:43:01:17:f9:af:70:e3:
5f:24:ee:44:4c:c0:1e:c8:bf:76:17:68:cb:3e:37:
54:80:59:31:ae:4a:4c:45:3c:df:d3:4f:da:da:e9:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:71:51:F4:1B:F4:E0:79:15:10:03:10:9D:4F:4A:F7:C6:69:6E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDtxUfQb9OB5FRADEJ1PSvfGaW4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:c6:89:c8:a9:57:52:38:67:e0:af:ef:85:43:95:fa:56:a4:
84:07:c7:5e:72:83:bd:96:8e:08:78:7c:d9:d1:2e:8b:32:5c:
3f:e5:c4:b6:24:45:0c:91:37:ef:3e:75:07:cb:51:24:11:37:
ab:3a:b7:59:f5:ad:16:20:c2:d9:ec:a9:02:ae:5f:d7:0f:b7:
16:c4:dc:18:11:b9:91:e8:fe:9a:09:a0:69:42:e9:01:03:74:
a5:7a:dc:a8:b9:95:cc:34:7c:51:96:2e:a3:dc:78:aa:20:7f:
fd:b3:c0:49:ce:29:d5:07:8a:4f:e8:b5:c7:38:ec:76:48:40:
ef:49:67:2c:3a:8c:59:eb:cb:61:31:95:d1:35:6b:0d:37:29:
80:56:e2:0b:ea:f4:a2:34:6b:aa:f7:7b:78:ab:6d:49:82:88:
88:ac:42:dc:75:27:4c:b0:9c:e7:ee:30:db:00:c5:87:7f:49:
15:3e:43:e3:b8:49:50:9f:c7:f3:3b:ca:db:4e:c3:7e:84:ec:
37:54:1e:af:d5:2c:1a:89:d8:b7:39:c7:27:f5:9b:8d:8a:09:
89:52:ec:85:8f:9a:02:8c:01:86:e4:67:94:7e:8e:8e:b7:12:
02:82:a2:58:1e:f9:84:de:90:a6:02:90:58:0c:e6:e2:3b:f0:
39:1d:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:59 2025 by rpki-client