Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JxWAkTMD_j34Y77R0dhaD-Beo90.roa
File: JxWAkTMD_j34Y77R0dhaD-Beo90.roa (raw, json)
Hash identifier: HC5hKLFYlIcm/Hnjk2myh5CsX5Fn7kyOWy7nTy/w5sQ=
Subject key identifier: 27:15:80:91:33:03:FE:3D:F8:63:BE:D1:D1:D8:5A:0F:E0:5E:A3:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CFF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JxWAkTMD_j34Y77R0dhaD-Beo90.roa
Signing time: Wed 01 May 2024 05:53:35 +0000
ROA not before: Wed 01 May 2024 05:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19711 (0x4cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 05:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=271580913303FE3DF863BED1D1D85A0FE05EA3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:b9:98:46:79:ca:8c:0e:93:bd:37:9b:ab:
33:87:81:ff:62:6b:0f:80:f1:26:46:45:9c:20:b6:
70:04:8c:5e:86:90:ef:36:98:8d:c6:a9:34:70:d2:
42:90:78:70:54:bc:fb:54:17:e3:af:ee:d0:a5:62:
6f:ed:ec:50:47:7f:fa:9d:4e:0f:fb:ec:77:11:27:
ce:f4:78:42:a2:9e:03:91:35:74:72:bc:fa:92:fd:
de:4e:14:eb:ac:39:aa:51:c8:4f:cd:0a:d9:ff:f3:
c9:32:e0:0a:05:6c:c6:f2:f2:71:f4:fd:ed:bc:f8:
40:f6:d4:75:f5:77:43:15:26:dd:6a:8c:c1:7c:0a:
72:42:c3:c8:55:95:c7:e2:86:62:ab:d7:78:57:a0:
d1:d0:d0:fa:80:53:f2:1d:ef:93:b9:d4:f6:02:5e:
16:71:dc:b6:31:80:b4:99:3a:24:0d:47:6c:ef:55:
de:0c:7d:28:a3:c5:29:e1:ae:8d:cd:70:28:57:4e:
59:b4:a5:b1:f9:c9:e6:38:fa:c4:6f:8f:e8:a1:23:
45:27:02:bf:80:27:d8:54:ea:7f:32:c4:24:29:99:
fb:a1:43:f5:9c:63:c5:ae:d9:8d:63:a2:86:1d:c0:
ab:b4:02:d1:88:0c:fe:72:86:18:2b:03:3d:7a:06:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:80:91:33:03:FE:3D:F8:63:BE:D1:D1:D8:5A:0F:E0:5E:A3:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JxWAkTMD_j34Y77R0dhaD-Beo90.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:d5:26:a1:63:9e:d9:f7:f0:33:42:fa:b7:92:d9:72:77:1e:
c1:28:6d:00:e3:74:86:b6:be:cb:36:5b:f2:e6:49:ce:9d:14:
56:8d:0e:47:53:f4:a6:9a:e3:61:ab:a6:6a:a3:9c:b9:2d:c5:
4a:f0:cc:0e:5b:84:69:c5:4f:2f:56:d7:d9:73:a3:a7:05:91:
5c:c3:52:aa:dc:bc:4b:65:d4:3f:e3:b5:bc:93:78:46:a4:9d:
36:9e:75:d7:8f:d1:b0:61:11:5c:f1:d6:0c:59:e5:43:a2:a3:
92:59:80:18:4f:26:44:23:af:aa:0f:ac:96:19:5e:1e:5e:81:
56:59:a7:b2:a5:08:c9:11:be:53:3c:54:93:1c:2d:5f:c9:4c:
e4:8f:06:85:67:31:98:73:e7:d2:0c:5e:e6:3c:94:dc:60:da:
d0:66:b3:7c:e9:4c:11:53:81:7a:42:81:06:95:fc:8f:42:2f:
12:e9:14:88:3f:7f:58:92:3a:cf:51:75:61:2a:db:23:dd:54:
ce:fe:8e:78:f9:65:e6:df:6d:31:42:ef:67:a7:b1:83:a3:09:
c6:77:fd:5d:50:c9:69:95:dd:da:9d:0f:04:ce:35:b3:29:8d:
76:0e:00:24:ee:e0:b9:db:2b:d3:de:ae:f3:95:c1:58:78:75:
e6:fd:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:43 2025 by rpki-client