Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/s-3vj5xjLUuc2Zy4NXXyak_228U.roa
File: s-3vj5xjLUuc2Zy4NXXyak_228U.roa (raw, json)
Hash identifier: U2YjLtbWperFfvbwwXyO+RtUxFjGlXbCsrcRqVutyCY=
Subject key identifier: B3:ED:EF:8F:9C:63:2D:4B:9C:D9:9C:B8:35:75:F2:6A:4F:F6:DB:C5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 494F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s-3vj5xjLUuc2Zy4NXXyak_228U.roa
Signing time: Fri 26 Apr 2024 07:53:37 +0000
ROA not before: Fri 26 Apr 2024 07:53:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18767 (0x494f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 07:53:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B3EDEF8F9C632D4B9CD99CB83575F26A4FF6DBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:17:86:4d:0b:d2:f5:33:34:8f:35:e3:ae:
f5:10:ad:a0:0c:f9:82:7f:84:45:6c:9b:2b:54:05:
18:95:68:b3:c5:b2:a2:b8:69:c5:fc:d7:a7:14:ea:
58:ec:7b:75:42:99:fc:73:71:98:63:56:7d:ec:c3:
27:f9:e2:1e:8c:d7:80:a1:b8:79:7d:fd:c4:36:79:
31:d2:50:15:cc:7a:0b:bf:af:7f:d9:cc:2f:0c:a8:
89:d1:76:03:a0:93:6d:77:db:c6:d8:23:d5:7e:bd:
b1:7f:16:38:9f:e6:39:e9:76:5c:60:4a:6d:0b:f7:
96:61:ea:0d:64:ae:df:ad:5b:be:bb:1d:eb:ca:8e:
02:8c:67:78:cf:11:bf:e6:b2:da:a8:73:b6:61:59:
26:c0:31:29:ad:82:1d:48:49:f8:31:14:66:2b:56:
21:73:fa:3e:20:24:99:f6:4f:c0:49:74:72:a4:a6:
22:64:c3:a8:4c:2c:ad:c8:02:61:8a:a8:cd:96:da:
52:06:04:8b:ff:6e:49:b1:5a:ce:73:8f:59:64:bb:
9c:28:a6:ef:6b:1b:e3:4e:1d:7b:5f:74:4b:1b:7c:
63:0b:45:b3:82:57:42:dd:7d:41:8a:50:a8:96:3d:
57:d3:71:68:50:95:9d:2f:dc:79:ec:39:71:a8:fd:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:EF:8F:9C:63:2D:4B:9C:D9:9C:B8:35:75:F2:6A:4F:F6:DB:C5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s-3vj5xjLUuc2Zy4NXXyak_228U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:e6:56:28:ff:f6:76:5a:bc:da:4a:1f:75:d0:93:83:ef:4f:
76:5c:02:30:ab:68:62:91:83:e3:fb:b8:b0:2d:40:0d:74:23:
b9:c4:5d:65:3e:76:29:9d:6d:8d:cc:6c:73:26:4c:ec:81:1b:
55:00:1d:f0:63:25:04:ca:40:54:50:44:fe:0c:a9:3c:c8:9c:
3b:35:04:5e:fb:fb:48:4e:3b:80:e9:34:d0:10:ca:90:47:9d:
ae:d1:ea:99:12:1e:d7:c0:b3:fc:90:56:3e:70:05:b3:c9:78:
2a:db:14:3a:5a:fb:57:23:09:87:90:b5:61:3e:c6:a7:a6:25:
3b:0b:a1:9d:e7:ee:18:6a:c0:89:d7:a5:12:2f:7c:c5:19:c1:
40:1f:04:14:5d:50:13:a3:cc:d8:e7:c8:fe:03:ad:21:14:00:
82:6f:e9:f7:d0:f4:d0:f8:93:f9:66:85:72:43:f7:50:6f:26:
71:3e:8d:88:ef:f6:49:e7:da:5a:f9:a7:99:8c:ac:29:4b:76:
80:88:b1:a6:60:53:8e:3b:bc:26:f4:e0:f0:8a:fc:1b:f1:4a:
7e:69:68:8c:2f:6c:2c:8c:73:1d:e6:f8:e2:bc:5e:16:50:93:
f0:a5:76:2a:00:df:4f:b3:ad:28:97:56:ab:53:14:4c:ef:22:
97:23:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:50 2025 by rpki-client