Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CT1e57tZLt1jKZOa0h9Dpvzo_bE.roa
File: CT1e57tZLt1jKZOa0h9Dpvzo_bE.roa (raw, json)
Hash identifier: O90JzlZQU7Zhns1IKQAVw8/pjNNfwygU1srfOXYY1pM=
Subject key identifier: 09:3D:5E:E7:BB:59:2E:DD:63:29:93:9A:D2:1F:43:A6:FC:E8:FD:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4893
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CT1e57tZLt1jKZOa0h9Dpvzo_bE.roa
Signing time: Thu 25 Apr 2024 08:23:19 +0000
ROA not before: Thu 25 Apr 2024 08:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18579 (0x4893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 08:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=093D5EE7BB592EDD6329939AD21F43A6FCE8FDB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:e9:80:83:87:2e:85:57:41:49:35:7f:0c:
65:b1:23:02:4a:c8:17:46:04:d6:2b:03:c3:2e:37:
00:91:ae:57:a6:94:f4:02:94:f7:87:e7:15:a2:49:
36:6c:4f:ae:24:7e:e1:ab:aa:e6:a7:a6:9c:e4:21:
33:06:64:9f:4a:d2:18:a6:ce:a9:93:f7:8e:34:c3:
19:d0:ec:92:4f:eb:a9:f8:38:90:79:62:af:70:a8:
89:7d:d1:0a:42:dd:95:52:da:94:9f:84:08:d9:2a:
e4:70:d6:8b:35:dd:00:14:d0:0a:85:83:d6:63:72:
18:85:f2:c8:72:c8:53:c6:16:a3:1e:ce:6a:4e:6c:
39:f5:54:a6:83:c7:23:af:0a:8a:e3:41:c8:52:d0:
22:79:09:f6:36:dc:15:93:99:c7:dc:9b:03:43:df:
24:2f:c7:0f:fc:fc:4a:b6:07:7b:c1:ea:a4:14:70:
f1:f0:cc:d4:7f:1c:cc:f8:99:95:b8:29:e2:d8:79:
e8:11:1e:5a:df:a3:88:ab:dc:11:fc:d8:f8:39:6d:
93:d2:97:6c:8b:c0:15:46:1c:95:f6:2b:40:63:5b:
2a:7d:41:75:8c:38:7c:e3:45:07:60:c8:6d:1e:bd:
e4:84:9f:98:ae:a8:1c:83:38:92:e1:97:de:cf:fd:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:5E:E7:BB:59:2E:DD:63:29:93:9A:D2:1F:43:A6:FC:E8:FD:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CT1e57tZLt1jKZOa0h9Dpvzo_bE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
40:f3:b0:32:cd:02:14:83:12:79:52:80:5a:9a:d1:d9:2b:db:
bc:a2:51:8b:9d:93:e6:49:9a:73:9e:8c:3a:61:80:3a:41:f0:
76:76:a7:71:82:d8:6c:92:9e:f1:9d:6a:2c:65:5f:8b:e3:ae:
41:b8:46:bc:df:d8:7c:43:ae:a3:47:b4:f6:03:6c:07:65:49:
66:b6:df:82:1e:b7:85:65:72:50:a3:4d:6b:6f:c3:36:ce:d5:
41:af:4e:62:9c:af:b7:14:b7:dd:dc:f3:b3:21:30:22:ac:b6:
fa:4e:35:27:31:7f:4f:0e:06:96:a2:b3:9e:45:f4:30:07:d4:
1a:e5:12:09:f4:2b:da:bd:51:56:d0:06:43:c1:3d:5b:e2:68:
ec:50:2b:5c:b8:bd:65:14:9f:e4:25:9e:38:7c:8f:04:52:8f:
ff:a0:38:d7:f4:ec:ea:a7:1b:83:70:73:30:41:67:90:69:5e:
46:44:88:f8:78:ae:91:37:1c:78:3a:f7:e1:a6:2e:39:36:a7:
de:5f:18:29:ab:9c:24:d4:ee:50:d1:b4:7c:e0:18:13:ee:8c:
a5:30:50:81:06:eb:95:66:4e:55:35:a6:46:87:c5:eb:b7:d8:
da:21:95:79:e6:c8:d0:84:1b:51:4a:5c:c0:fe:2a:16:20:c6:
2a:ff:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:24 2025 by rpki-client