Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CD5bwQW7wxlFkTKaoKuk0t_IURo.roa
File: CD5bwQW7wxlFkTKaoKuk0t_IURo.roa (raw, json)
Hash identifier: pDe+tLl/qz7Rz16AgIiFoANTpdOVj9prEBBGLnWsGYE=
Subject key identifier: 08:3E:5B:C1:05:BB:C3:19:45:91:32:9A:A0:AB:A4:D2:DF:C8:51:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B8B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CD5bwQW7wxlFkTKaoKuk0t_IURo.roa
Signing time: Mon 29 Apr 2024 07:23:39 +0000
ROA not before: Mon 29 Apr 2024 07:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19339 (0x4b8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 07:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=083E5BC105BBC3194591329AA0ABA4D2DFC8511A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:d2:0c:27:06:ea:4f:02:50:ed:33:6d:2f:
be:dc:6a:60:df:03:f1:21:8d:8f:1d:38:17:4e:44:
ae:1b:c0:2a:98:c9:57:55:36:da:36:d5:12:92:e6:
18:21:be:ca:01:c0:e8:31:a5:60:2e:54:7a:78:d5:
1c:ed:62:6f:c3:a1:cf:39:0b:bb:53:0f:db:bd:25:
1b:67:11:75:19:29:19:6e:38:04:d7:c4:b6:22:05:
40:db:29:05:0a:2f:ac:54:22:65:93:8b:e6:93:c1:
54:52:d3:d6:c8:07:96:f2:3e:cb:62:88:32:93:f3:
d7:2e:e7:f3:0d:f2:c1:cf:26:a3:f2:e4:7e:ad:33:
cb:01:df:35:c5:cf:8b:08:f3:50:4d:ae:da:7f:a5:
b7:e2:29:8f:dd:10:8c:0f:7e:7f:02:c2:00:8b:0e:
19:bc:5e:17:23:fd:25:63:03:e4:de:fa:53:52:98:
31:4d:23:a5:17:be:a1:ab:9d:2c:18:09:8a:27:8b:
50:c9:2b:7f:81:8e:02:43:38:08:d8:f9:cf:b9:c6:
e4:83:10:51:83:b8:bf:b3:48:14:6b:34:12:30:dc:
85:1f:ee:0b:89:58:c0:8c:9b:bd:dd:8e:35:26:46:
e0:c3:3b:de:83:9e:e0:f9:0f:b8:25:82:18:c3:5b:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:5B:C1:05:BB:C3:19:45:91:32:9A:A0:AB:A4:D2:DF:C8:51:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CD5bwQW7wxlFkTKaoKuk0t_IURo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:7e:70:6f:0f:8e:1b:97:b0:13:4c:60:0b:27:08:da:24:0a:
3e:b2:71:5f:22:a7:e5:e8:f0:b4:d8:61:0e:a0:13:8b:0e:07:
d4:21:52:08:06:01:7b:49:7c:16:12:fc:86:6e:ce:cc:69:4f:
e5:cc:12:b2:3f:14:06:bd:91:d3:e8:6f:41:53:db:4e:ff:a9:
91:80:de:c7:dd:93:e2:75:69:d9:33:4d:c1:0a:fd:14:92:39:
da:7c:3d:41:34:e1:84:77:de:4d:c1:83:14:b1:40:de:b8:28:
fc:9d:8f:15:3d:54:db:9d:57:93:1f:2f:c0:b7:e0:cc:77:f4:
a0:9d:f0:4b:21:58:45:a0:cd:f4:2a:41:86:4d:ba:0f:47:96:
0e:58:4c:c4:06:e8:9a:18:67:78:83:64:5c:1c:b4:4c:77:38:
12:fa:bc:a4:e2:09:c0:20:01:21:2f:70:d5:56:ac:4a:56:e4:
dd:ee:d3:e5:24:4a:b3:b6:0d:3c:18:cc:81:5d:35:11:07:c9:
f1:b5:06:0e:d9:06:47:f4:63:6e:87:d0:88:e2:eb:11:5a:6a:
75:6d:0f:6d:36:a4:cb:05:de:dd:6a:10:8b:69:2f:78:ec:f5:
a3:64:80:c4:aa:4d:98:4b:56:81:3d:12:15:d6:50:a5:16:9c:
c0:0f:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:50 2025 by rpki-client