Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/D9mBMD8h1QsT7I1p7FA13wSF_PM.roa
File: D9mBMD8h1QsT7I1p7FA13wSF_PM.roa (raw, json)
Hash identifier: rBt2fMUA16itoaXfdCDgUeZgcUKKevlof98IQz/7fpw=
Subject key identifier: 0F:D9:81:30:3F:21:D5:0B:13:EC:8D:69:EC:50:35:DF:04:85:FC:F3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B8F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/D9mBMD8h1QsT7I1p7FA13wSF_PM.roa
Signing time: Sun 07 Apr 2024 23:52:34 +0000
ROA not before: Sun 07 Apr 2024 23:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15247 (0x3b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 23:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0FD981303F21D50B13EC8D69EC5035DF0485FCF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:fc:ac:6a:74:34:62:df:a6:d3:58:04:4d:
79:25:e3:e5:c2:43:d0:c4:6d:84:18:0f:8c:b9:0a:
73:33:fe:e5:84:9f:eb:2e:d0:a5:6f:bc:9a:74:86:
f9:e2:a9:73:df:4c:32:a5:a5:9b:e0:eb:cc:a9:f1:
e4:b9:76:cd:b8:da:80:d2:48:94:f5:43:81:e9:5e:
18:ac:c2:e5:6e:05:e6:af:14:17:ea:ae:e2:44:15:
f7:cf:8c:f8:5b:5a:8b:d1:62:94:1d:2e:3e:f1:a1:
92:18:83:3e:bd:78:9d:4c:02:70:5f:0e:f4:b2:e6:
51:27:4f:8e:39:45:6a:fd:e0:db:61:92:b6:82:64:
16:a8:95:d6:36:35:c2:b2:bf:41:d7:b5:32:c6:27:
8e:07:c0:f0:ff:62:ab:37:76:10:3a:4a:28:e4:39:
66:e7:cb:85:8d:27:5d:5a:c2:df:20:f8:33:69:f1:
11:5e:1d:cb:34:0e:47:df:99:cd:b3:f0:29:d2:32:
5a:6f:ff:d8:90:54:07:f8:75:74:5b:64:44:34:d3:
f2:2e:18:93:6b:bc:a7:de:00:f2:09:bc:4b:d2:a2:
2f:d6:00:84:22:fa:07:b4:9d:32:b4:4f:e9:ae:e3:
bd:fc:98:6d:91:d5:44:4f:d0:66:df:ac:65:cf:69:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:81:30:3F:21:D5:0B:13:EC:8D:69:EC:50:35:DF:04:85:FC:F3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/D9mBMD8h1QsT7I1p7FA13wSF_PM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:8f:b5:6f:9e:5d:64:4d:2e:0b:af:e6:64:f3:21:b5:01:6d:
e1:12:dd:83:36:52:3d:e4:d3:bd:40:45:6a:98:8b:a4:6e:d0:
cb:95:b5:fb:ef:56:04:1c:46:ab:98:cd:0b:14:91:54:42:b1:
4f:0f:8c:6c:a4:94:ba:2b:f5:75:13:60:80:85:77:d2:16:ae:
de:74:e5:77:5c:0e:af:12:c2:ec:83:72:c7:4f:08:9d:e3:eb:
85:06:47:66:61:c5:4b:22:b4:7f:0a:96:50:f4:a7:75:c8:2d:
c7:76:29:35:ab:0d:72:92:ad:59:e0:0d:8d:2b:55:e8:c6:78:
2d:8d:78:91:13:86:f2:b9:df:0f:5f:73:e0:5d:1e:79:7d:6d:
74:33:8e:b4:70:e0:0f:2e:cb:5c:2c:b4:da:30:2e:4f:08:a5:
78:34:60:80:5f:33:2a:12:19:fb:1a:3e:cb:f9:48:2e:bf:8d:
20:10:d1:ae:65:e7:95:98:66:86:bf:96:e8:53:49:66:68:1c:
a0:26:11:67:79:e2:39:b1:12:5f:58:b3:7a:36:25:81:a0:e3:
cd:00:5d:5e:34:44:08:8d:01:bd:2f:7e:92:48:f8:86:5d:04:
de:6e:57:66:a7:7f:df:c3:2c:7c:91:45:09:38:4e:69:f2:d6:
a0:30:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:03 2025 by rpki-client