Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BEN77eghUxK2IXLdZD4RV7rRI4Q.roa
File: BEN77eghUxK2IXLdZD4RV7rRI4Q.roa (raw, json)
Hash identifier: 1x1rCENu2N7FND7Gpq/d+D2rWcFED+ajUHzUED+dbdY=
Subject key identifier: 04:43:7B:ED:E8:21:53:12:B6:21:72:DD:64:3E:11:57:BA:D1:23:84
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54F7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BEN77eghUxK2IXLdZD4RV7rRI4Q.roa
Signing time: Sat 11 May 2024 20:54:12 +0000
ROA not before: Sat 11 May 2024 20:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21751 (0x54f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 20:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=04437BEDE8215312B62172DD643E1157BAD12384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:4b:55:e3:4e:6c:22:09:f0:b5:5c:f8:b7:
25:14:5e:1d:8e:5f:77:43:bf:21:ad:30:83:e7:80:
a3:81:f5:bf:9c:93:19:7c:6c:c6:0e:93:3c:56:68:
58:e5:6f:19:46:2f:74:65:67:a8:c0:f5:29:e9:f6:
00:9f:95:cb:b9:a4:e7:d2:96:3a:6e:89:58:4f:74:
e2:60:be:54:9b:51:a1:8c:ef:0e:3a:74:95:70:2c:
78:af:34:07:a8:9b:39:01:c3:60:95:72:77:d0:43:
2b:91:de:d6:f4:0f:0d:59:0d:e2:58:71:a8:c2:c2:
3a:12:20:0f:a4:ce:2b:b8:89:52:fc:6a:bc:a8:8f:
c7:57:ea:39:0c:5f:56:f6:a7:da:5f:a8:d3:23:d4:
0d:11:03:08:85:5a:61:55:28:b5:22:a1:77:c3:b5:
18:81:4c:35:ab:4f:a1:b1:53:90:1e:34:01:d8:08:
e1:d9:27:1d:cd:eb:ab:e7:25:b8:9c:c7:4e:2d:27:
90:3a:36:74:6d:78:a2:aa:ee:09:fd:a0:76:38:09:
d4:81:4f:2b:28:d1:2c:9e:8a:32:32:b2:4d:25:8c:
36:c7:d4:b0:ed:0c:84:c5:0b:12:96:b0:a3:f0:96:
98:25:67:8c:c9:82:d2:43:78:f8:d1:fc:ba:61:73:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:7B:ED:E8:21:53:12:B6:21:72:DD:64:3E:11:57:BA:D1:23:84
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BEN77eghUxK2IXLdZD4RV7rRI4Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:e6:9f:19:25:d5:e6:04:1b:ad:e1:3b:3e:d4:b2:64:52:32:
a7:35:2b:2f:c6:ac:eb:47:10:e9:28:54:86:fe:96:63:6a:ab:
6c:14:70:28:3c:91:98:56:17:a6:f3:a3:bc:ba:01:a7:9e:6d:
79:8b:dd:c9:28:a4:9d:73:58:41:bf:85:e4:9e:c7:26:c6:24:
70:a3:53:a6:f0:f9:2b:8f:f3:47:18:d6:73:f0:e1:6a:74:32:
43:73:67:e3:15:53:94:68:89:cc:bb:e4:bd:aa:1c:ca:d6:f8:
ed:7e:96:d9:7c:be:4b:97:df:06:f7:44:7f:66:06:10:a8:40:
85:8e:7c:bd:ca:41:75:a5:2a:03:b1:d4:87:0e:21:e8:56:c1:
20:67:da:a1:3f:95:3e:c2:ec:52:be:b2:1d:49:b2:b2:72:a7:
f7:d4:64:ef:08:7a:dc:75:53:8e:a1:b5:fe:67:40:77:52:2c:
95:a6:58:70:42:bb:21:4c:63:cd:29:e6:84:0b:1c:24:67:dd:
84:d5:8d:57:56:02:8c:21:13:79:60:aa:34:90:ba:48:56:29:
94:95:46:e1:74:8a:94:33:3f:22:88:da:61:51:84:85:b8:19:
fb:31:19:4d:d3:ac:9c:03:fb:7b:b0:0d:90:a0:d3:38:02:1c:
a4:66:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:27 2025 by rpki-client