Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DZD-ekJNnJHdOxHWtgWazCqgQWQ.roa
File: DZD-ekJNnJHdOxHWtgWazCqgQWQ.roa (raw, json)
Hash identifier: SJbd48FkP6e5UEi3nPT177J8jL05wZa4Xz28waxAcvc=
Subject key identifier: 0D:90:FE:7A:42:4D:9C:91:DD:3B:11:D6:B6:05:9A:CC:2A:A0:41:64
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F03
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DZD-ekJNnJHdOxHWtgWazCqgQWQ.roa
Signing time: Fri 03 May 2024 22:23:58 +0000
ROA not before: Fri 03 May 2024 22:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20227 (0x4f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 22:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0D90FE7A424D9C91DD3B11D6B6059ACC2AA04164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:2a:0d:1a:a5:5d:83:e4:a4:f9:e5:fe:d0:
cf:42:49:84:a5:6f:cc:fa:e0:53:a5:17:38:10:00:
8f:8a:53:c3:a7:bb:65:86:88:aa:a7:f8:b6:60:eb:
17:b5:c1:e9:cf:6c:bc:86:91:3f:02:76:ed:76:e2:
ef:80:a3:57:39:04:ba:c3:59:6e:d7:c4:46:34:98:
84:23:fd:9d:66:bd:a6:af:d8:48:7a:dd:70:a2:1e:
4e:bf:a0:42:3c:c1:8a:df:b6:b5:41:c8:20:21:1f:
77:56:ba:98:43:63:69:9f:49:cc:0b:49:16:fd:9c:
79:e7:9d:16:ca:98:d4:41:41:83:49:8f:85:02:92:
5c:d6:0e:ad:a5:e0:63:84:99:27:3e:09:d1:a8:d8:
e2:b9:cf:70:7f:ec:39:50:cf:6b:4f:13:20:fc:ca:
93:de:f4:45:1a:57:73:70:60:6c:65:b8:bc:e0:88:
c8:6f:4f:c5:bb:52:d1:21:4d:4f:60:62:85:35:c6:
42:f4:11:f7:ff:d5:62:86:0b:56:0b:cf:22:5b:e3:
03:1e:da:68:2f:14:94:98:66:0e:b4:9c:f9:8d:d7:
98:b5:cd:fd:b0:c2:d2:38:fe:5c:f0:9b:aa:ec:9f:
9c:11:be:fb:c9:39:f9:d8:d4:11:40:aa:a2:0e:0d:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:FE:7A:42:4D:9C:91:DD:3B:11:D6:B6:05:9A:CC:2A:A0:41:64
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DZD-ekJNnJHdOxHWtgWazCqgQWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
25:5e:8a:a6:f2:27:92:53:4a:3e:e5:26:12:8a:da:d5:b7:ee:
65:3a:8c:d0:91:57:91:89:d0:d1:0c:c7:26:2a:b7:32:80:db:
79:37:bc:51:fb:15:78:cd:5b:70:4e:37:9d:6b:46:8b:7b:92:
b0:5d:d2:6d:e3:0a:fa:6c:ea:4d:12:83:66:4b:14:c8:60:c0:
12:9b:40:ce:2f:8d:c3:45:9a:83:a7:72:d5:b0:12:06:fd:f8:
23:b5:41:ca:54:d6:f6:8f:13:c0:4a:c7:47:22:94:dc:58:b7:
cc:2c:fe:81:ec:40:9f:8a:6b:4c:eb:fb:d2:9f:7a:f0:99:23:
49:d5:9f:e9:46:06:d6:9d:7d:48:5e:9d:8f:20:fc:a0:a4:6d:
12:66:51:62:d6:19:29:75:83:9b:2c:29:21:a2:10:e1:5e:58:
71:58:b4:17:0f:41:de:9e:c1:ec:9c:54:ec:81:48:48:60:b5:
e0:ab:e1:28:ce:4a:aa:db:5c:ea:f3:46:76:37:85:36:a3:ad:
5a:9c:75:e7:27:3a:6c:0f:a4:ca:b0:66:63:0e:38:39:1f:15:
30:f0:de:b4:3c:13:c9:0d:9e:c1:a9:66:a3:75:49:6b:06:0c:
6c:74:e0:0b:79:d7:18:c3:f0:65:68:10:02:63:c5:9c:33:07:
be:2e:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:36 2025 by rpki-client