Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IxJz1MKoZzq0mJyOL_uu5FXnjjY.roa
File: IxJz1MKoZzq0mJyOL_uu5FXnjjY.roa (raw, json)
Hash identifier: oYerExqlSfAf2yDd8bq8ftdkhncGL+6EPqKyN4YoRcQ=
Subject key identifier: 23:12:73:D4:C2:A8:67:3A:B4:98:9C:8E:2F:FB:AE:E4:55:E7:8E:36
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E47
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IxJz1MKoZzq0mJyOL_uu5FXnjjY.roa
Signing time: Thu 02 May 2024 22:53:43 +0000
ROA not before: Thu 02 May 2024 22:53:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20039 (0x4e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 22:53:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=231273D4C2A8673AB4989C8E2FFBAEE455E78E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:c0:8b:09:24:8e:45:f9:53:8c:a6:0f:43:
f9:1b:95:01:2b:0f:74:37:f4:49:e7:91:48:d9:b1:
41:2d:e9:45:7c:cf:22:db:a7:4a:b2:e5:38:8b:e6:
16:7c:63:16:80:d4:78:d7:93:3b:d9:06:5b:31:e5:
8d:78:8b:c9:99:69:5f:c6:1b:2f:51:c5:09:55:58:
d2:c7:56:42:01:8f:48:eb:79:1a:e8:bb:2b:dc:d3:
ad:4f:97:fb:39:27:e2:0e:f8:06:85:e6:e7:3c:7d:
4f:d2:40:5e:de:92:b6:f4:6e:5e:a3:59:58:fd:f7:
7c:cf:b3:fe:ce:77:fc:48:8d:f1:fd:45:60:6e:28:
33:61:f5:ae:d5:bd:14:b2:c2:1d:56:67:db:2a:c0:
cf:8b:1d:cb:9c:0a:ac:1b:91:7a:a8:24:6d:ad:3d:
c6:7f:d2:4f:ca:7c:2c:21:24:f1:04:c3:12:b4:f9:
e8:19:e2:7b:b4:18:92:c5:31:e3:e4:e7:e7:9d:b8:
df:e6:b2:9f:88:a5:86:67:48:a4:94:84:13:dc:0c:
d2:99:4d:79:51:06:05:61:00:3f:84:c8:09:2c:6f:
ad:74:3f:09:94:06:3f:8b:6b:86:f7:7c:77:37:fd:
d3:20:bc:52:4c:2b:ed:9b:69:de:ec:f6:3e:39:ae:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:73:D4:C2:A8:67:3A:B4:98:9C:8E:2F:FB:AE:E4:55:E7:8E:36
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IxJz1MKoZzq0mJyOL_uu5FXnjjY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
86:40:b7:c4:ca:1e:eb:b8:3b:d7:10:1d:a6:3e:25:d8:9d:23:
02:34:69:e1:ef:c6:94:fa:c2:5f:ba:2f:37:ec:e8:e5:5f:4a:
86:a2:9b:81:40:56:a6:7b:b3:23:42:f7:3b:c7:4b:ae:1d:fe:
35:e4:3b:a2:d5:f1:7a:a1:63:c4:98:b5:dd:d3:0f:51:b1:48:
89:2b:81:78:0f:69:ab:b5:5a:98:3c:a0:04:32:bb:cf:a7:03:
c3:d9:78:c1:16:94:c9:49:d2:bb:87:e5:8a:16:a8:0a:68:a0:
78:a0:d8:c5:69:e7:83:c0:a8:7d:1c:57:bf:3b:76:93:b0:aa:
2a:c1:78:68:c6:84:1e:e9:8b:e0:47:f6:ed:69:5f:b5:8d:20:
be:fd:90:48:bf:1a:05:32:fa:3f:4f:60:6d:8d:ce:cb:72:93:
50:4f:88:7c:a1:7d:c6:1e:99:ef:c3:8f:75:99:0e:45:7c:29:
fa:b7:87:19:ac:55:4e:06:12:7d:cf:60:b6:07:69:3a:2b:3c:
6b:5c:a0:89:4f:05:a8:60:87:43:ee:a6:6f:9c:94:72:45:30:
ab:cf:d3:77:c6:01:39:ed:9a:dc:25:0d:3d:c1:a7:84:2b:8f:
d9:85:d7:10:d8:a1:de:32:df:1b:e9:8b:51:c0:55:b6:b3:d9:
94:88:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:30 2025 by rpki-client