Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AuVmG_AtQt6poQP0Sw07_Y-ZalE.roa
File: AuVmG_AtQt6poQP0Sw07_Y-ZalE.roa (raw, json)
Hash identifier: 2Gn/AchiWLf2VZZ8cHSXVzqiOeo6QVDANnfBgT2SKYQ=
Subject key identifier: 02:E5:66:1B:F0:2D:42:DE:A9:A1:03:F4:4B:0D:3B:FD:8F:99:6A:51
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50BB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AuVmG_AtQt6poQP0Sw07_Y-ZalE.roa
Signing time: Mon 06 May 2024 05:23:50 +0000
ROA not before: Mon 06 May 2024 05:23:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20667 (0x50bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 05:23:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=02E5661BF02D42DEA9A103F44B0D3BFD8F996A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:bc:0a:f3:bd:38:dd:65:22:d9:0a:56:5f:
07:69:bc:0a:81:a3:65:af:52:1f:c9:1d:69:ce:50:
d3:5f:22:0e:a7:8f:77:08:01:d7:2b:42:a3:16:ab:
22:42:ec:2b:99:c0:16:c7:6a:ea:e7:fb:ee:1b:85:
22:2a:98:41:5f:bf:ad:b5:3c:22:90:e4:77:6e:84:
f1:d7:08:09:3f:d2:42:35:0c:d0:ab:8f:3a:3c:74:
84:56:76:46:dd:d1:25:b8:aa:df:f7:9e:ff:8f:f1:
fa:ea:38:dc:57:67:b2:a3:76:3c:ac:bf:f9:1e:44:
16:b9:f4:ef:7d:a9:27:fc:42:7a:33:32:98:7e:4f:
03:a1:f7:6f:3c:2c:28:d4:12:af:73:03:e0:2c:5d:
67:be:9c:ff:77:99:d2:96:13:1f:7a:a9:23:17:c6:
11:ac:9c:aa:49:d9:2f:a0:10:8b:52:b2:34:d1:9d:
6e:32:76:fb:2f:48:3f:78:bc:26:5d:dd:e1:8b:39:
79:69:6b:01:a7:cd:79:e8:ab:48:4f:d2:07:5b:f3:
da:d2:b6:a4:df:c1:2b:af:c8:43:eb:f1:59:e3:c7:
1d:f2:25:36:09:74:b0:fd:bd:7e:b8:6f:42:81:c4:
cf:c1:b1:2f:dd:79:12:95:3a:29:89:59:90:f1:e0:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:66:1B:F0:2D:42:DE:A9:A1:03:F4:4B:0D:3B:FD:8F:99:6A:51
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AuVmG_AtQt6poQP0Sw07_Y-ZalE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:23:c7:c7:ee:67:30:a5:69:f6:40:f7:30:d2:98:d8:48:25:
8e:9b:de:e4:51:28:6d:83:bb:83:1d:22:86:82:85:e2:76:37:
c8:38:a8:32:62:03:fe:c3:9b:d4:08:75:fb:54:38:28:27:9e:
65:d2:d1:60:c0:d7:20:7d:cd:14:90:2a:b2:75:a6:aa:dc:e0:
11:97:e9:29:a1:cb:7a:36:e5:fc:f1:98:74:5d:b0:f0:19:a1:
20:68:4c:ea:b3:00:c9:00:05:51:d9:d3:fc:62:59:cb:c7:3b:
4a:07:ed:b8:5a:b8:81:0e:1e:70:a6:92:b9:60:0a:f7:ed:d3:
c6:92:78:74:58:be:81:9a:6d:d0:82:ed:51:04:24:0c:cc:0e:
7a:1b:96:ff:a8:72:5e:e4:d5:1d:9c:f0:8f:b6:d2:a1:67:dc:
57:23:5c:ff:22:3f:7c:2a:fd:c1:26:06:58:2b:e9:62:aa:40:
ca:1f:5d:4e:dc:98:ab:2d:7e:3b:71:aa:a9:b2:a9:2e:54:10:
85:d2:35:ff:7d:b9:36:40:ad:8c:b9:ae:14:41:d1:a1:4d:c0:
5d:f6:b0:a9:78:67:f1:7d:95:80:ec:04:15:78:cf:b7:9d:bc:
05:ce:83:00:68:41:fb:e6:b6:ca:41:9a:18:37:d5:8b:6e:17:
e1:49:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:38 2025 by rpki-client