Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/iMP3SaahquOudPAK4PSkXGKTP4M.roa
File: iMP3SaahquOudPAK4PSkXGKTP4M.roa (raw, json)
Hash identifier: 4+wAh8BuOLjjvxT5tZluKMsf2+UFtmA4k5lGOd9qffk=
Subject key identifier: 88:C3:F7:49:A6:A1:AA:E3:AE:74:F0:0A:E0:F4:A4:5C:62:93:3F:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C47
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iMP3SaahquOudPAK4PSkXGKTP4M.roa
Signing time: Tue 30 Apr 2024 06:53:35 +0000
ROA not before: Tue 30 Apr 2024 06:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19527 (0x4c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 06:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=88C3F749A6A1AAE3AE74F00AE0F4A45C62933F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:71:fe:3c:ee:22:1c:ab:9c:f7:d0:d8:10:
78:2b:ae:bd:0a:76:c0:f7:a6:c2:b0:97:7d:f1:b6:
50:99:b2:40:da:ad:cf:f0:c3:39:b2:b4:8f:6c:c6:
2c:1b:7a:2d:fb:92:7d:6b:7c:27:b7:ec:83:52:76:
df:ff:40:c4:47:88:6e:d2:54:1c:ce:18:d3:dc:f9:
0d:84:16:06:94:9f:a3:00:9f:04:1e:a5:ca:fb:ff:
e1:c2:c0:4b:3a:8e:ec:06:6c:54:eb:51:9c:cd:a1:
c9:72:6b:c0:f7:52:3a:dc:1f:c6:38:29:4e:44:a6:
38:c5:c5:5b:8c:14:b7:8a:e0:ab:bb:3e:a5:ec:c2:
d1:92:68:13:95:38:a2:67:c1:99:4c:c5:20:ad:9c:
74:a4:92:65:4c:a3:95:a9:8f:99:f2:c9:05:74:e9:
56:50:44:b4:f8:82:20:e4:3e:f6:45:4d:be:2f:7e:
0f:88:68:2f:28:54:7a:03:e0:4f:0e:87:a4:c6:1b:
90:dd:01:e2:99:95:0a:8c:26:91:39:60:6c:96:46:
21:76:39:34:11:66:d9:72:d9:01:82:b6:f5:f9:6e:
35:a0:f2:c6:d2:ce:58:a6:41:05:90:ae:25:16:4e:
cd:46:5a:19:06:35:c2:e6:28:7b:8f:37:b6:e4:a9:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:F7:49:A6:A1:AA:E3:AE:74:F0:0A:E0:F4:A4:5C:62:93:3F:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/iMP3SaahquOudPAK4PSkXGKTP4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
82:34:7a:fa:2c:61:91:b6:bc:9d:ee:48:fc:bf:54:71:79:a5:
40:d0:e4:8e:ce:24:1b:39:90:b0:47:a9:2c:f7:f5:eb:87:c2:
89:a6:25:b8:e1:73:60:f0:cd:98:79:64:72:77:9f:03:eb:ca:
4b:c9:6e:90:1e:61:8e:6c:9b:ad:9e:2e:cd:fb:5f:3f:f4:44:
0e:47:fa:67:99:93:49:87:ad:0d:8a:e7:5f:f1:80:65:bd:10:
08:78:87:65:81:0d:28:d3:7d:ae:fa:22:6b:f5:3c:a4:da:d3:
75:07:ae:49:7f:17:7e:6a:a7:bf:a9:50:32:02:d6:40:04:e8:
df:91:71:c9:1d:40:0c:5b:e8:1f:97:f5:8b:43:6e:33:c5:9e:
e7:cb:47:80:81:eb:5e:97:ee:9a:2c:e1:ba:c4:b7:6c:30:95:
c9:cf:7b:ab:1f:67:28:b9:8c:b0:8e:a9:69:e0:fd:a5:04:47:
a3:72:74:6d:7d:31:0a:32:e8:1b:33:d8:14:fa:b1:a6:3c:61:
8d:ba:15:35:ae:30:5c:6a:55:d4:6c:9a:2a:f0:b4:62:06:74:
c0:d1:3f:f3:7f:1b:45:d9:fb:d6:16:f3:87:3e:27:25:5d:db:
f4:77:db:73:72:f8:91:54:31:86:17:c4:8f:4d:58:a2:c3:12:
c7:15:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:00 2025 by rpki-client