Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U5ZZ2zcCOsexjipTc4013Y3e3lM.roa
File: U5ZZ2zcCOsexjipTc4013Y3e3lM.roa (raw, json)
Hash identifier: U/KwLXiO0siKhPQ1Hkluz7Jfd2WVVCA/5dAe9FVzBwo=
Subject key identifier: 53:96:59:DB:37:02:3A:C7:B1:8E:2A:53:73:8D:35:DD:8D:DE:DE:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 542F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U5ZZ2zcCOsexjipTc4013Y3e3lM.roa
Signing time: Fri 10 May 2024 19:54:01 +0000
ROA not before: Fri 10 May 2024 19:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21551 (0x542f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 19:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=539659DB37023AC7B18E2A53738D35DD8DDEDE53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:a5:a8:bf:83:77:68:52:fb:ca:e5:f8:ff:
25:17:fe:5d:bf:00:64:8a:2c:47:a0:68:dd:72:81:
4f:e7:62:91:3a:7b:18:59:34:0d:f0:9c:76:15:24:
cb:3c:ad:15:82:0a:c8:34:a6:01:16:d5:6d:f5:9f:
77:68:2d:4b:6a:7e:36:29:65:52:92:0f:40:48:ef:
a2:e0:d2:74:85:b0:4a:a2:e8:9b:ac:7a:7c:ba:f6:
de:20:c5:b9:44:02:e6:29:94:b2:65:ff:e4:ae:5c:
56:d7:2e:11:8f:fb:e9:67:f1:fa:e7:53:60:bf:33:
dc:2a:fc:08:b9:df:ba:0a:4a:7a:d7:8d:89:93:9b:
c3:5d:d7:f4:61:6a:d5:31:c4:6e:50:3f:4c:86:55:
7e:7b:92:7c:b1:0e:33:93:c2:51:f6:22:58:e4:b3:
e8:9c:44:b4:f0:a4:fa:9a:bb:b8:84:85:f5:bc:d3:
06:05:be:94:12:1e:02:3b:80:e3:0b:f8:7a:c0:86:
2b:ff:53:56:f4:81:2f:ba:a5:da:9a:46:97:d1:ac:
2a:f6:d5:e9:9f:21:e4:35:5a:22:01:27:d0:ed:3f:
0e:11:b2:13:8f:a6:55:b3:2f:23:47:9f:5e:ad:d9:
a4:68:05:0f:f0:ae:59:98:6d:84:2e:5d:94:69:7c:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:59:DB:37:02:3A:C7:B1:8E:2A:53:73:8D:35:DD:8D:DE:DE:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U5ZZ2zcCOsexjipTc4013Y3e3lM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:7a:67:8c:91:c8:96:7a:ba:71:a1:71:db:67:39:13:f2:b4:
d5:90:62:dd:e6:66:7c:97:b5:2d:f9:77:9a:be:6b:be:12:55:
cb:e3:c7:05:ea:ee:14:db:19:3a:0a:55:a4:3f:52:9b:fc:05:
a7:d5:f3:88:fd:16:16:96:37:1b:89:24:b5:1e:db:c7:b7:7a:
04:60:ad:eb:d9:29:be:62:d5:76:62:54:f2:2a:7e:37:8d:93:
81:50:c7:dc:65:76:f1:26:12:1f:ae:33:d3:06:48:b9:88:d5:
b1:15:bb:c0:69:ef:1b:64:b3:e9:16:67:11:89:c4:a0:e9:99:
62:a1:25:d2:ef:03:e9:19:cd:34:e2:d6:f5:44:d2:d9:c3:68:
df:27:90:54:3a:73:d3:d2:90:3e:f9:d2:ee:d6:41:a2:e3:76:
1d:e1:3b:6b:cf:7d:ca:2d:fb:7d:04:32:cd:a1:53:a2:12:9f:
3e:26:e4:49:a4:05:70:34:22:68:b1:52:de:91:bf:bc:63:54:
be:43:d1:8f:90:a3:a4:74:e9:04:06:f3:35:0d:a4:c5:3b:77:
5f:f3:eb:04:c8:87:cb:50:11:18:f9:9a:aa:27:bd:94:8c:aa:
12:fd:92:80:c5:8e:e6:3b:71:70:dd:21:0c:84:7c:20:42:5c:
3e:7e:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:05:41 2025 by rpki-client