Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/t81lkk8ydIyK3jCkBhmqwrOv-NY.roa
File: t81lkk8ydIyK3jCkBhmqwrOv-NY.roa (raw, json)
Hash identifier: DB7/7hL/RCP8hmcTnoJe3HcaFX/0oGxnyfwDhU+8KGw=
Subject key identifier: B7:CD:65:92:4F:32:74:8C:8A:DE:30:A4:06:19:AA:C2:B3:AF:F8:D6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5537
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t81lkk8ydIyK3jCkBhmqwrOv-NY.roa
Signing time: Sun 12 May 2024 04:54:11 +0000
ROA not before: Sun 12 May 2024 04:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21815 (0x5537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 04:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B7CD65924F32748C8ADE30A40619AAC2B3AFF8D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:5b:db:13:3c:09:7d:ee:28:6e:d2:da:b4:
b7:24:72:db:69:bd:3d:ac:b7:1a:f8:6c:8a:35:9d:
b9:28:0a:26:eb:ca:d1:be:21:5f:b8:b1:0f:a1:af:
89:93:e6:32:89:cd:1f:b1:14:63:b8:da:98:93:08:
7f:ca:36:ad:56:7c:f7:76:93:2c:83:ca:57:cb:20:
1b:56:85:e1:f6:6e:1e:f0:8c:d1:ed:57:a4:bb:b5:
6f:df:0d:39:7a:73:c8:c0:c8:8f:1d:fa:41:3f:58:
68:4c:16:39:0b:e6:b1:f3:cf:31:8f:db:12:53:b5:
0f:fb:a4:9a:2c:3a:9b:e1:9a:f5:b2:de:e8:18:ac:
45:8c:87:ac:2e:63:de:9c:57:58:68:f7:66:a1:e6:
90:ad:82:8c:a4:86:09:93:40:c9:37:03:18:b9:37:
11:af:7b:2b:63:13:de:de:12:40:42:a8:dc:34:fb:
6a:8d:83:d6:8d:79:dc:1c:3b:a3:48:f7:cb:bf:50:
0b:45:b5:d1:5c:8d:c5:f8:29:82:0b:1a:5b:83:de:
9a:41:b6:5f:71:87:82:14:bb:b6:1c:d3:89:6e:e9:
7d:ab:16:16:0a:54:88:16:4a:87:9f:e1:09:4f:45:
79:8b:a7:fe:9d:a6:ff:ab:3d:33:18:c3:7b:a8:3a:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:65:92:4F:32:74:8C:8A:DE:30:A4:06:19:AA:C2:B3:AF:F8:D6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t81lkk8ydIyK3jCkBhmqwrOv-NY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:95:9f:15:bc:b7:8d:e4:32:e6:78:2c:62:28:e4:0d:d0:06:
c2:cc:31:dd:95:b3:36:36:9a:0a:94:41:c3:d6:e7:16:67:8e:
85:e7:ab:7b:30:2d:67:c9:89:ff:41:1b:8d:20:5f:aa:63:36:
3a:97:3f:7f:61:fa:7c:60:0e:ca:55:36:d4:d8:d4:b0:ea:77:
7a:4f:bf:d6:26:c0:76:54:20:6d:61:17:a9:10:da:82:3b:11:
d8:db:74:02:cb:6c:f1:89:55:10:45:54:c4:6a:af:6a:b0:3f:
8a:9b:f0:7c:5d:72:08:15:85:98:f6:83:e0:bd:b5:70:c0:a5:
2b:37:96:9a:9f:d4:e4:e2:f9:97:31:4b:ba:34:0d:89:0e:ba:
76:a4:89:8b:b4:55:db:87:cf:98:96:bd:59:10:0f:3c:fa:5d:
07:df:71:9b:ee:a0:f6:1a:01:c9:5e:96:2b:eb:e9:d2:5f:9d:
43:70:fe:74:b0:04:2a:ec:c1:c0:5d:2d:ed:df:34:40:e0:ff:
e2:cd:51:d2:0d:66:f2:bf:5a:c0:f1:0b:6c:55:ab:cf:e1:54:
ff:4d:74:de:68:bf:bb:df:fb:bf:81:57:44:dc:a7:8c:f1:22:
8a:ae:cc:39:2c:40:32:b5:54:8b:ba:bc:cf:e8:5a:a6:ab:25:
e0:73:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:09 2025 by rpki-client