Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/7eHtFPcbcLpICMAPU4YIIPRpKzg.roa
File: 7eHtFPcbcLpICMAPU4YIIPRpKzg.roa (raw, json)
Hash identifier: SkTVOO37BK6HRY+HA6i/ZGWFO7HumibhU2CW9XZNViY=
Subject key identifier: ED:E1:ED:14:F7:1B:70:BA:48:08:C0:0F:53:86:08:20:F4:69:2B:38
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4033
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7eHtFPcbcLpICMAPU4YIIPRpKzg.roa
Signing time: Sun 14 Apr 2024 04:22:52 +0000
ROA not before: Sun 14 Apr 2024 04:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16435 (0x4033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 04:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EDE1ED14F71B70BA4808C00F53860820F4692B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:15:43:7e:69:4d:15:ae:26:e1:46:b9:03:
1b:fc:5a:b6:05:57:56:d5:b2:d4:f1:83:bd:b9:6d:
c1:15:6c:9b:80:7a:c9:d9:cd:0e:e3:67:d1:66:2f:
63:db:1f:83:72:5e:f1:71:44:32:25:2f:42:26:10:
1c:99:9f:35:00:0e:d9:aa:15:fc:6a:57:85:07:9e:
6d:57:48:9e:75:54:2b:29:6b:3d:dc:d0:9e:df:10:
56:a4:e2:07:e3:e6:94:c8:3e:4c:18:0a:09:2c:87:
12:59:1a:a8:de:da:1a:e3:c7:9a:b6:75:92:c5:1f:
c6:40:ba:2a:6d:22:ce:ea:29:91:5c:13:b8:81:11:
58:12:89:05:d1:52:0b:eb:c9:67:80:23:5e:e3:61:
9b:c4:83:76:0a:81:8d:bf:c5:12:d8:5d:06:ac:a7:
47:fe:95:ff:5b:df:32:a1:7d:c0:c6:6c:78:28:c4:
47:7b:cd:07:0e:0a:2c:c1:95:ec:c0:6b:83:d9:89:
38:8c:e8:7c:f8:73:de:27:43:4b:61:c6:65:f3:a7:
77:ab:cd:ec:5b:29:49:5b:02:44:9e:8d:ea:75:24:
c7:2f:47:a2:08:63:97:9f:c4:f5:4d:a4:c1:2c:c6:
d8:c1:d4:cd:cc:47:7d:07:b8:14:27:33:98:60:31:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:ED:14:F7:1B:70:BA:48:08:C0:0F:53:86:08:20:F4:69:2B:38
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/7eHtFPcbcLpICMAPU4YIIPRpKzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
93:93:20:e2:02:cf:62:58:87:41:b0:90:74:01:3c:24:e7:8f:
df:28:a6:1d:f6:98:60:24:9d:b7:d2:fc:46:66:f4:c2:09:d6:
07:74:77:d2:1d:21:e1:23:bc:07:d8:c2:0d:81:88:06:29:6b:
b4:b1:3f:b5:7d:3f:6d:96:0d:ca:df:c3:7d:bd:cd:76:30:4e:
c0:5f:ba:46:ba:53:04:60:ca:1c:42:27:2b:90:21:a3:ce:b4:
ff:99:1c:f4:c2:ae:bd:f5:f3:46:0a:e8:6d:28:ce:27:4d:1f:
bc:cd:c2:9f:6a:13:89:79:37:54:0f:23:6d:fe:57:53:a0:71:
af:96:f0:b3:4b:85:52:fc:84:12:98:66:a8:bf:de:f5:56:e1:
72:5b:f0:03:ce:a1:0d:9c:0e:79:05:cb:fc:a4:9d:ed:d5:3a:
1a:45:e0:38:44:0f:d3:9c:e7:d1:0c:17:40:4e:52:b4:a3:77:
b3:92:cd:68:3e:f1:08:dd:7f:bc:db:61:2a:81:95:b9:e1:0a:
8a:03:6b:29:d3:4c:7e:ba:b3:83:31:53:fa:51:ef:a1:92:d2:
91:c2:ab:e2:1a:a7:69:fa:31:17:41:24:a4:84:57:d7:d7:bc:
c7:b3:12:c9:67:2d:c8:89:fb:0a:46:bf:50:2b:58:f5:e3:77:
92:2c:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:02 2025 by rpki-client