Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A5qrSMWhz0GH6E8d0_qhVZdGGVw.roa
File: A5qrSMWhz0GH6E8d0_qhVZdGGVw.roa (raw, json)
Hash identifier: ZIQzPnm/FNUFtX0zumW8RVo9MQGFK7P5kgSFUeFg4eM=
Subject key identifier: 03:9A:AB:48:C5:A1:CF:41:87:E8:4F:1D:D3:FA:A1:55:97:46:19:5C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3CB7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A5qrSMWhz0GH6E8d0_qhVZdGGVw.roa
Signing time: Tue 09 Apr 2024 12:52:41 +0000
ROA not before: Tue 09 Apr 2024 12:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15543 (0x3cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 12:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=039AAB48C5A1CF4187E84F1DD3FAA1559746195C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:5c:c3:0f:5c:fa:ef:55:90:d8:34:ba:3d:
c2:74:13:b1:b6:10:7f:8b:23:81:ce:d2:0d:ca:23:
ce:bf:47:0a:c5:24:15:68:c9:47:42:04:3c:c7:e3:
fd:ff:f4:3d:c2:27:c1:07:a9:2f:9c:be:28:93:02:
5b:55:f3:f9:2b:51:1a:62:4b:df:63:39:64:00:59:
1b:0e:0e:fa:2a:5a:83:f2:8e:5c:ea:4d:f8:e0:dc:
e9:5c:23:99:09:26:7a:79:1c:f3:ac:de:47:8e:f7:
1b:aa:99:8f:91:c2:6e:88:8b:6c:ff:e1:d4:31:47:
78:71:6f:25:71:13:b6:f5:45:0d:92:d5:41:f6:2e:
c6:78:a3:86:3f:ba:d6:47:9a:c9:c2:96:a0:5e:9d:
d0:6f:78:db:3c:37:8f:fb:d8:c3:96:31:4b:5a:c8:
c1:ff:ef:49:12:b1:65:7a:12:de:53:a8:26:a6:e4:
c3:3e:c7:ad:11:e0:51:c7:b8:d5:cf:6f:9f:25:08:
2e:a4:12:48:10:8e:86:7e:e3:74:3f:79:6f:4f:95:
30:f8:9f:30:79:cb:8b:d9:56:79:64:3b:55:33:69:
01:51:a1:83:12:a8:61:63:f7:98:50:22:19:03:57:
bf:72:a1:7c:88:18:dd:b4:aa:f7:dc:39:4a:53:d3:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:AB:48:C5:A1:CF:41:87:E8:4F:1D:D3:FA:A1:55:97:46:19:5C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A5qrSMWhz0GH6E8d0_qhVZdGGVw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:0f:25:6f:2b:94:11:73:aa:f5:ae:4a:a3:1b:b4:fe:5d:a0:
68:0c:6a:0e:00:fa:06:dd:47:f3:45:72:62:f4:f2:6d:70:7b:
1f:69:f7:67:5e:18:85:1d:df:a6:40:ef:cb:a1:d2:a3:10:7d:
bc:df:6f:01:08:32:ba:da:2a:7a:06:09:05:9d:0a:5c:13:2a:
3d:6f:fa:d4:7d:44:90:a9:4b:ec:01:1c:4f:4f:fb:c8:e3:59:
c1:b8:ad:3a:c4:10:9c:40:fe:c8:0c:b7:8e:4b:85:c6:a7:17:
3d:67:52:d9:eb:ae:50:5e:67:87:d8:6c:52:8e:f1:3f:04:0b:
4d:3a:3d:0c:ac:ce:b2:42:31:9d:f5:bb:3b:c7:b5:51:87:78:
77:f5:c4:fd:8a:f5:0b:4d:fd:88:e1:62:0e:90:6c:89:ac:d7:
b4:4b:ee:da:63:87:f3:bd:a3:f1:c5:84:1d:f3:09:a7:a6:00:
14:0f:9a:01:ce:46:29:f4:04:4d:5e:cc:47:1b:46:1b:f7:5d:
52:61:13:9d:38:86:c2:b0:0c:f6:b4:51:b0:89:31:50:eb:eb:
39:49:80:79:ee:9e:24:21:fe:33:91:6c:86:ee:14:97:0e:97:
3b:69:f3:45:ff:a3:8b:1b:f8:0c:29:81:ab:9a:2b:d4:22:f8:
85:f6:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:17 2025 by rpki-client