Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lLdtsad5xCBBBLB4fsegxIzlF-M.roa
File: lLdtsad5xCBBBLB4fsegxIzlF-M.roa (raw, json)
Hash identifier: fqXm4/GKIC84BTc8lc1BaEnNkCgn4sRr4MNzr49O7qc=
Subject key identifier: 94:B7:6D:B1:A7:79:C4:20:41:04:B0:78:7E:C7:A0:C4:8C:E5:17:E3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lLdtsad5xCBBBLB4fsegxIzlF-M.roa
Signing time: Sun 14 Apr 2024 18:22:56 +0000
ROA not before: Sun 14 Apr 2024 18:22:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16547 (0x40a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 18:22:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=94B76DB1A779C4204104B0787EC7A0C48CE517E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:06:d1:f6:59:55:a2:1c:0e:9c:9e:f3:6f:
62:6d:21:d8:b2:1e:60:a8:06:bf:a5:83:4c:76:d8:
0a:eb:f5:b2:85:38:ac:15:50:62:32:ce:2d:42:59:
ad:43:5a:5b:17:5b:a0:57:d7:26:2a:92:b2:ca:1d:
7f:60:d1:90:57:1a:42:db:c3:78:b7:21:12:02:96:
0a:87:70:67:a8:c1:3e:8b:b9:dd:02:f5:a2:24:fa:
85:a0:a9:f1:85:b9:57:83:31:58:5c:e4:16:d3:21:
c6:c9:b3:ea:e7:96:d2:bf:41:25:20:9d:fa:41:fd:
c2:e5:6f:5b:c8:77:03:14:9f:c9:3f:2f:88:5d:03:
83:4f:4f:cb:55:b0:db:09:3c:0c:b8:75:1a:86:a1:
b4:a1:fc:8f:26:97:b3:df:61:79:91:00:47:a9:e3:
2e:c9:af:bf:9b:8c:5b:29:c1:19:45:c8:4f:74:3e:
80:df:19:84:f4:e9:fd:1f:64:30:d8:a0:bb:1b:0c:
6c:8b:22:94:81:ad:3c:17:83:1a:c7:d2:c0:64:7b:
27:3e:7c:b8:f0:8e:c2:5d:51:19:1e:74:78:d5:fd:
64:22:49:0d:3a:42:4f:96:41:63:99:45:0f:52:c6:
80:94:13:f2:b5:ab:ee:32:31:4b:e4:fb:f3:53:23:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B7:6D:B1:A7:79:C4:20:41:04:B0:78:7E:C7:A0:C4:8C:E5:17:E3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lLdtsad5xCBBBLB4fsegxIzlF-M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:5c:d8:ef:28:33:d7:42:4f:1f:22:b3:79:26:b5:18:23:d2:
6b:fa:50:85:91:18:4c:15:68:de:7b:8f:37:52:74:62:56:e6:
80:36:5d:85:d9:b2:c6:e2:7c:29:71:71:b1:73:7d:33:d4:22:
2b:7b:55:3b:2e:97:7b:6a:d2:a7:61:c4:3a:98:69:30:1c:6a:
69:2b:0c:a4:23:02:d6:28:2d:3d:d7:26:3e:73:18:c5:36:6b:
63:a2:eb:6a:50:06:d4:e9:f4:be:d0:d2:d4:9a:4a:06:d6:8e:
04:dd:ac:26:e9:23:1d:e9:39:68:13:c9:c9:59:f1:bb:58:76:
35:b3:0a:dd:b8:96:2b:e4:2c:f3:39:ed:4c:14:78:76:3e:17:
06:94:a2:bf:49:4f:2b:73:b8:5f:9b:34:e0:0e:01:32:93:a6:
78:36:5b:85:9d:a5:79:96:93:c6:13:59:2d:2b:30:8c:82:8c:
ff:00:de:c4:54:e3:5a:c0:4f:2b:ba:7b:f3:3c:f6:49:64:2b:
87:52:a1:ee:04:9a:20:5a:1e:9e:c0:ad:98:e1:91:0f:04:82:
8f:5e:ee:5d:9e:12:8d:ed:2b:29:4b:9e:49:34:bc:62:c5:80:
e8:88:d4:2f:b6:11:20:ea:f6:2f:ac:f5:cf:f8:c9:ba:a1:6a:
67:9a:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:06 2025 by rpki-client