Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6Bku0nwhV_YoBPHseWXEZmDY5Bg.roa
File: 6Bku0nwhV_YoBPHseWXEZmDY5Bg.roa (raw, json)
Hash identifier: DwHQvxsseuiU7TKxlitKYDuY7+cD2TP22ybJoCvyqSE=
Subject key identifier: E8:19:2E:D2:7C:21:57:F6:28:04:F1:EC:79:65:C4:66:60:D8:E4:18
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ACB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Bku0nwhV_YoBPHseWXEZmDY5Bg.roa
Signing time: Sun 28 Apr 2024 07:23:32 +0000
ROA not before: Sun 28 Apr 2024 07:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19147 (0x4acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 07:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8192ED27C2157F62804F1EC7965C46660D8E418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:ce:b4:3a:5f:c6:6e:08:8f:d7:06:19:58:
17:fd:70:e6:c7:26:30:f2:56:7d:fb:2f:7c:21:0c:
ad:a4:44:c4:2f:43:38:88:07:9b:c1:dd:9b:ed:70:
7e:7d:05:1d:8f:66:01:a6:fb:9e:63:9f:59:4f:57:
f3:26:9d:01:7b:c4:96:a7:21:22:a0:4b:f9:77:b0:
1e:77:ae:46:49:f0:8e:ed:6f:fc:55:bc:01:fe:79:
e3:f5:d6:9f:26:95:28:5d:9f:1f:39:32:8a:e6:94:
8b:08:db:9f:5e:77:ad:d6:56:09:70:4f:6d:d7:bc:
89:30:52:5e:a6:0d:00:d8:af:aa:47:cf:5b:45:04:
49:d2:5e:70:84:c8:01:10:5e:12:8d:52:3f:b5:8e:
99:40:44:3a:15:de:48:59:85:8c:d0:a6:33:a0:0f:
90:e2:80:13:c2:e7:39:0a:77:b1:55:5a:fd:8c:2b:
63:6c:64:0a:2e:fb:49:6d:a1:49:83:d4:67:31:73:
97:7f:81:79:e8:b3:0c:eb:ef:a6:57:55:e1:a1:d3:
90:75:a7:52:be:e9:d5:3b:5f:12:84:47:23:65:43:
ab:04:95:76:cc:4e:67:26:8e:65:a9:93:2c:39:a1:
66:c7:b7:a9:14:e4:ca:16:7b:82:67:70:d3:ce:f6:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:2E:D2:7C:21:57:F6:28:04:F1:EC:79:65:C4:66:60:D8:E4:18
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6Bku0nwhV_YoBPHseWXEZmDY5Bg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
69:a1:ee:d8:e6:0d:38:7e:8d:d8:72:c2:95:fa:b9:38:8f:4a:
5b:9a:ca:d0:d2:60:7b:a5:2e:fc:e3:78:1f:24:c9:c8:70:99:
b4:a9:e7:5a:a7:9e:80:1c:a2:79:39:7b:de:b5:87:94:ad:87:
36:39:fd:01:2b:13:1c:e5:c5:bd:22:b6:f5:10:90:9f:5c:7d:
4b:75:35:c6:a0:1c:39:b5:2f:f3:7a:c5:53:5a:8a:f2:9d:51:
59:0b:ec:dc:bb:ed:7a:83:3f:1d:34:87:54:69:29:85:de:e2:
ae:f8:2a:11:7f:9e:eb:ac:67:7b:dc:1e:a8:14:48:20:48:8f:
de:a9:97:2d:bd:c2:db:89:e1:05:39:cf:8d:45:15:1e:a8:66:
62:51:3f:1b:43:ac:02:eb:4e:68:e5:58:53:65:a3:a5:5b:e9:
3d:b1:7f:d0:d9:6a:e6:a9:15:a7:69:f7:1f:dd:19:ff:37:74:
b7:79:ce:58:3b:fc:4f:cf:c3:96:e3:56:b2:d2:e9:fe:22:78:
6a:32:68:7a:79:46:74:ef:94:77:ba:a1:56:64:09:a9:e8:9b:
31:ab:64:0e:12:75:74:8b:7e:e2:c9:68:49:cf:bc:37:4a:62:
8a:b5:33:62:98:8f:df:8f:ad:25:c3:b0:11:13:11:3d:02:8f:
6a:c1:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:25 2025 by rpki-client