Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-3uQjvMvUq1KWrw1b8qxeUHEm5Y.roa
File: -3uQjvMvUq1KWrw1b8qxeUHEm5Y.roa (raw, json)
Hash identifier: e88EbcOYbN15tsp6GeuXpE7WUYudF9MXRHPK655RS4w=
Subject key identifier: FB:7B:90:8E:F3:2F:52:AD:4A:5A:BC:35:6F:CA:B1:79:41:C4:9B:96
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F17
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-3uQjvMvUq1KWrw1b8qxeUHEm5Y.roa
Signing time: Fri 12 Apr 2024 16:52:51 +0000
ROA not before: Fri 12 Apr 2024 16:52:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16151 (0x3f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 16:52:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB7B908EF32F52AD4A5ABC356FCAB17941C49B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:63:c6:f9:05:eb:79:fd:77:87:05:55:41:
2d:ea:8a:f7:91:0f:a4:31:f4:24:b7:72:8e:53:ee:
e7:fc:94:de:f4:27:fc:05:5d:d7:fa:bf:a7:2b:45:
9a:e6:a0:0c:d0:a2:fe:d0:61:7b:7a:a9:d1:6e:32:
89:ad:30:6b:2d:33:7d:4d:cf:19:e3:03:c6:ac:01:
2d:90:83:01:f2:05:6d:27:1e:4b:d4:6f:46:d5:00:
f5:43:fd:f2:9f:98:17:ca:92:b3:ec:c7:65:08:7a:
1c:10:d6:5e:b4:67:70:97:b8:61:b1:30:63:0b:c2:
10:2a:05:af:db:0e:b8:8c:e1:73:09:99:24:6b:17:
19:0c:8b:4d:0d:7d:01:90:cf:74:a6:ce:88:b2:66:
f4:d9:86:0f:d4:a8:d8:23:13:37:78:b3:f4:ff:1d:
83:ac:d7:89:35:70:0a:d6:72:cc:b9:b2:cc:5c:b7:
1c:a9:ec:cc:1e:68:57:0f:9b:a3:b6:73:35:f3:c2:
25:d6:dc:7c:17:d1:52:63:6f:9c:33:03:55:04:13:
2d:8d:98:e8:5e:c3:be:3a:94:e1:ba:29:f3:2b:1e:
6b:5c:c0:6a:c2:a5:5f:60:d3:b1:25:58:03:84:1a:
17:3e:7d:e1:ba:33:ef:00:1d:ad:4b:83:c0:7b:5a:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:90:8E:F3:2F:52:AD:4A:5A:BC:35:6F:CA:B1:79:41:C4:9B:96
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-3uQjvMvUq1KWrw1b8qxeUHEm5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:03:08:5b:be:be:9f:05:35:d8:d2:eb:42:66:b7:1d:2b:8b:
69:a4:38:3a:12:e3:e8:d6:a6:bd:87:9c:0a:e9:5d:21:0b:99:
f8:a3:12:f6:52:55:db:0b:9f:4f:4d:3b:f1:35:6a:13:e1:cf:
71:b7:dc:83:b3:ab:06:c2:a9:9c:76:28:41:cd:d3:0f:20:cb:
62:a5:96:e0:75:b7:d7:6b:ee:0b:f9:73:a3:ca:46:5f:ad:56:
dc:82:7b:c2:17:d3:d3:c9:6b:5b:10:cc:e1:3c:d9:1a:49:0c:
b5:d7:42:a8:c5:13:7e:db:8b:7f:c3:bc:0b:e2:c4:80:9d:65:
67:67:54:a6:01:9f:6d:7c:92:77:58:c8:7b:9f:fb:21:85:eb:
08:ca:e1:64:e6:23:e2:0c:94:d5:e3:e7:a8:ae:79:63:3c:05:
c2:92:75:18:94:00:8a:5e:0e:8f:39:aa:78:ab:d5:4b:40:63:
41:89:73:9a:98:27:6e:15:16:e6:56:61:7d:5e:c0:bb:c4:5c:
d4:6f:87:58:7c:d5:f5:ad:bc:15:d0:01:79:36:01:fe:1d:b8:
8c:f7:f9:c8:1d:27:96:f9:3c:ce:2c:a5:c9:c3:b3:62:bf:e2:
ba:6b:16:7e:af:2e:f4:18:13:81:dd:5d:28:a0:54:a8:a9:bc:
11:cf:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:07:29 2025 by rpki-client