Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oUvluUaNt6RFYfN18Twp8XbGrRc.roa
File: oUvluUaNt6RFYfN18Twp8XbGrRc.roa (raw, json)
Hash identifier: +K8AonHX3OVLASGwCB2wdG/M/DOUQrdhI4oZQvoeTy8=
Subject key identifier: A1:4B:E5:B9:46:8D:B7:A4:45:61:F3:75:F1:3C:29:F1:76:C6:AD:17
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EA3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oUvluUaNt6RFYfN18Twp8XbGrRc.roa
Signing time: Fri 12 Apr 2024 02:22:50 +0000
ROA not before: Fri 12 Apr 2024 02:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16035 (0x3ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 02:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A14BE5B9468DB7A44561F375F13C29F176C6AD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:e4:4c:28:36:63:19:ca:a7:04:bf:ff:95:
f4:68:18:88:7b:de:7c:ee:a6:60:8b:c5:6c:4f:ca:
ae:fe:e5:09:49:27:fd:7c:c1:53:e7:c1:21:c0:ed:
b0:8a:46:74:46:dd:45:2a:dd:09:15:40:5c:4a:a9:
d4:f9:32:00:fc:7f:37:93:6c:7c:01:41:8b:2f:e9:
81:09:44:14:18:f1:09:bd:59:43:c2:b0:b5:48:9c:
f3:b9:44:7b:1b:8c:c6:0e:9b:0f:65:9e:60:0d:19:
8f:ec:4b:33:33:c7:45:4a:48:c2:1f:bd:bd:0f:4a:
96:68:7a:c7:32:c6:a0:ec:3b:1f:c0:0b:1c:53:18:
ae:2a:c1:89:07:6e:76:bc:c0:a6:16:a9:d1:b4:0a:
49:38:61:f4:32:91:8c:8d:5f:2f:51:0d:66:ed:65:
40:28:76:3e:ec:70:42:a2:98:e5:df:8f:c6:03:f5:
a8:9f:f1:d0:e1:39:02:44:52:55:d7:c5:34:29:b2:
02:d5:d7:c1:15:8d:5f:26:0b:c4:f9:1b:c7:68:14:
b1:bf:7f:7b:6f:da:c7:27:18:60:89:9a:a6:ba:20:
09:ab:3a:94:c5:69:27:6f:3b:f0:91:57:89:01:0c:
9e:04:71:0a:53:80:7d:5c:e3:4a:bc:24:f7:42:b7:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:E5:B9:46:8D:B7:A4:45:61:F3:75:F1:3C:29:F1:76:C6:AD:17
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oUvluUaNt6RFYfN18Twp8XbGrRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:62:59:07:8d:75:72:7a:c5:c0:83:06:22:cc:9d:45:bd:83:
21:27:2c:f9:5c:9d:ef:d2:ce:e3:09:fd:88:b7:74:83:f5:9a:
34:d7:ce:4f:5a:7b:5b:b9:1e:42:2b:be:12:b1:4f:37:ef:ac:
a9:7c:d5:e5:cf:8c:20:e4:db:e6:02:c2:31:51:a2:e2:30:9c:
f5:9c:1f:ab:b2:ea:d8:fc:30:35:8f:f4:fc:14:e3:8d:ce:11:
a0:49:d3:2c:54:b1:e6:fe:03:62:8d:85:03:f5:e2:d6:b1:90:
61:33:ab:0c:4a:a3:4e:e8:65:cf:fb:0a:2e:92:1f:da:86:71:
1a:87:a0:74:71:49:7a:c9:f7:16:16:43:bd:e9:9d:9d:34:5b:
f9:bd:64:75:1c:38:4a:88:2d:32:d7:57:40:ce:0a:03:ba:e8:
8f:57:c5:18:c8:c2:22:df:af:28:d0:44:21:b2:5f:ed:6f:09:
93:60:be:5b:12:7b:1b:91:f3:b3:f7:b8:97:4c:91:35:52:84:
5e:d6:19:8f:9d:ce:62:64:a4:e7:99:a3:78:a0:10:25:d1:dc:
f3:9f:c3:95:5e:02:86:51:25:f5:68:db:eb:3c:ef:c4:8c:66:
d1:91:a2:af:67:53:ec:0f:48:5c:9e:d4:65:fd:ab:f6:35:65:
ce:d5:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:08 2025 by rpki-client