Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IEtjPIqVMZnj8Zbykziqo0qaL_8.roa
File: IEtjPIqVMZnj8Zbykziqo0qaL_8.roa (raw, json)
Hash identifier: AMn9I06nRx6H8a2mCpA70Twv8oZXphSENPUDoUbe6YM=
Subject key identifier: 20:4B:63:3C:8A:95:31:99:E3:F1:96:F2:93:38:AA:A3:4A:9A:2F:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 553F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IEtjPIqVMZnj8Zbykziqo0qaL_8.roa
Signing time: Sun 12 May 2024 05:54:04 +0000
ROA not before: Sun 12 May 2024 05:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21823 (0x553f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 05:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=204B633C8A953199E3F196F29338AAA34A9A2FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:42:de:a9:7b:7c:36:04:9b:53:7f:bc:63:
67:95:90:50:63:6a:65:6f:29:d9:da:0a:91:d3:bb:
5e:99:b0:55:9f:8f:ad:f0:f2:b4:8b:45:cc:af:6e:
ed:77:3b:66:86:76:4d:c2:71:75:24:77:80:c7:b3:
7c:f1:d5:50:4b:b5:67:36:6b:ed:c5:6a:6a:6e:9f:
c2:93:06:99:46:53:c8:2d:32:00:32:bd:86:5c:67:
91:e2:82:03:64:2c:4d:8d:47:fd:15:5e:3d:47:a3:
88:84:e6:0a:ba:7a:bb:df:14:36:14:86:fe:41:08:
b2:9b:0f:e1:68:2c:db:62:b7:8b:84:e8:30:05:86:
13:18:97:61:04:69:63:5e:f1:54:c9:b0:90:91:69:
c2:09:58:a6:f7:aa:1f:f2:b4:f7:78:e4:0f:20:37:
ee:1d:ee:20:7e:4a:2a:83:84:9e:a9:d0:18:e4:35:
e5:a1:80:3e:f9:33:0c:1f:7e:73:68:0e:87:0e:a4:
48:2d:b4:04:87:c2:f0:71:d2:45:67:2a:34:6a:8a:
e9:78:90:f3:05:84:ba:43:9a:9c:66:e2:4b:65:c1:
9d:d4:1a:ff:dd:cf:b8:c8:08:70:14:5a:2c:cd:22:
60:c8:40:f2:52:94:70:4b:1a:5e:35:29:2c:77:9c:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:63:3C:8A:95:31:99:E3:F1:96:F2:93:38:AA:A3:4A:9A:2F:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IEtjPIqVMZnj8Zbykziqo0qaL_8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:97:b3:69:1f:a0:4f:f2:f4:d1:20:8f:4c:97:a6:67:18:0b:
be:e0:78:ec:4c:73:2b:44:24:b9:bd:2b:96:70:e3:16:7d:e4:
18:fa:ae:5d:32:b8:ac:3b:23:3b:8b:c4:38:ac:73:2e:a8:e0:
d5:b9:da:f8:ae:c1:8e:c9:4e:68:f1:b8:e2:67:98:03:55:bd:
04:e7:45:61:0d:3f:1f:f0:0a:bb:1a:ee:e2:56:8c:2b:e2:b6:
14:81:65:84:96:c2:1c:8b:bf:7e:a7:c3:15:7b:85:b8:7d:19:
2f:ad:1a:cd:87:22:7a:71:cb:a1:53:f1:9d:07:7d:9d:93:0d:
0a:07:ba:15:b6:5f:ac:77:da:ab:bf:37:5e:eb:00:07:f9:d3:
96:a6:b6:13:33:84:79:84:db:85:d9:26:85:08:dd:03:0d:a2:
b8:8a:a5:34:ac:be:e6:08:9f:a2:71:b4:6d:29:09:75:cc:44:
45:52:8b:bd:ef:dd:d4:de:e6:ad:57:83:7f:ef:45:e5:03:b7:
94:02:19:90:d1:9d:62:54:88:3a:6d:e4:16:7a:4e:aa:44:db:
04:2d:51:64:99:08:c9:c1:d7:5d:d0:1f:5f:dd:9c:83:93:f0:
58:79:dd:17:0a:d0:da:3a:60:e8:90:28:51:d3:e9:a4:31:3b:
e8:95:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:57 2025 by rpki-client