Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-BRqUslJ8o_xHK5khaPr_ECiBJc.roa
File: -BRqUslJ8o_xHK5khaPr_ECiBJc.roa (raw, json)
Hash identifier: VDbgB+GIWg8imYixMHENETcPtinfItcrpclyg9YSgEM=
Subject key identifier: F8:14:6A:52:C9:49:F2:8F:F1:1C:AE:64:85:A3:EB:FC:40:A2:04:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5513
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-BRqUslJ8o_xHK5khaPr_ECiBJc.roa
Signing time: Sun 12 May 2024 00:24:04 +0000
ROA not before: Sun 12 May 2024 00:24:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21779 (0x5513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 00:24:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F8146A52C949F28FF11CAE6485A3EBFC40A20497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:31:ad:9b:83:4f:22:71:46:0a:17:de:35:
67:53:ce:4a:e5:22:49:07:3c:f5:d2:b9:4a:3a:3e:
40:a3:4e:a5:d4:17:e3:24:c5:a3:23:31:6b:62:c1:
81:83:9e:af:d5:dd:5c:66:e0:a5:38:16:a8:a5:84:
40:30:c8:38:93:21:a5:62:64:70:c4:6c:60:36:31:
67:72:b7:2d:7b:c5:19:10:5a:c9:fd:05:f4:49:4b:
eb:a7:16:f5:d6:5a:64:0a:44:d6:79:39:ab:6f:02:
b8:32:a6:b4:89:07:36:ec:62:9d:6b:8c:73:b7:3f:
8e:35:79:43:80:93:bf:a7:29:ab:6f:9e:7a:00:91:
0a:86:d1:04:02:e4:2f:4d:f8:ff:1a:99:58:8d:46:
fc:68:8a:c6:b2:26:f7:90:b3:b6:bb:6d:f5:ef:89:
8e:77:66:bf:ea:eb:61:b9:85:e6:01:10:6d:fa:0a:
44:55:ba:09:b8:f9:b7:d2:94:65:67:24:c2:20:19:
97:ac:c5:fd:41:4b:fc:a1:83:16:7f:91:eb:ae:7d:
54:2d:c7:91:a9:c8:2e:09:03:41:72:98:2c:25:a8:
9e:51:ce:87:10:c3:4f:a9:1a:cc:9b:fc:c6:f4:26:
e5:50:58:a0:b1:f0:1d:e7:fa:b8:1b:e5:01:9b:9b:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:6A:52:C9:49:F2:8F:F1:1C:AE:64:85:A3:EB:FC:40:A2:04:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-BRqUslJ8o_xHK5khaPr_ECiBJc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
71:c9:88:05:41:d5:08:ae:ee:61:03:82:99:8b:41:ac:1a:c4:
6c:f8:da:9a:24:f0:c9:eb:68:63:aa:72:15:21:09:be:3c:0b:
57:e5:ae:e8:3b:8f:7b:23:ca:25:48:3e:f8:79:2b:3e:d7:c7:
e4:8e:88:d4:70:66:b3:65:ae:6c:1d:c2:a2:7d:b0:02:72:c5:
bc:f5:56:be:63:d5:6d:59:ae:57:78:57:6a:c7:96:06:7b:34:
47:12:52:71:90:ac:22:24:7d:dd:3f:a4:af:e3:fd:80:5a:20:
97:e7:76:50:8b:f7:00:39:4a:47:fc:6a:5c:9e:21:f6:ba:23:
a7:08:aa:72:aa:24:f3:52:81:d6:62:a5:80:4c:31:2a:67:59:
1e:3b:ec:70:36:fe:43:7d:d0:b0:50:32:26:3c:7d:fe:f3:a0:
40:a7:d4:e9:cf:81:c3:58:79:e8:de:30:1d:d6:0b:26:8b:0a:
75:7a:26:15:2f:14:54:1f:e7:fd:17:ee:53:90:8c:ce:5d:93:
18:1f:10:54:83:60:24:3f:3a:08:ec:9f:d7:9b:c4:51:b7:c4:
78:ae:8f:89:e8:e8:ce:0c:46:4c:c1:15:b3:99:07:48:66:aa:
33:be:a3:8a:b1:b1:6d:30:7b:3d:ba:0a:a3:02:9c:99:55:7f:
e8:68:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:46 2025 by rpki-client