Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KZXfACjuIrCN8wRn0eMHnmRtVL0.roa
File: KZXfACjuIrCN8wRn0eMHnmRtVL0.roa (raw, json)
Hash identifier: dg2bzGiV6CM0QZVDYgzvTk2A0R5fMoX7hvnZeFOJr98=
Subject key identifier: 29:95:DF:00:28:EE:22:B0:8D:F3:04:67:D1:E3:07:9E:64:6D:54:BD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5027
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KZXfACjuIrCN8wRn0eMHnmRtVL0.roa
Signing time: Sun 05 May 2024 10:53:49 +0000
ROA not before: Sun 05 May 2024 10:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20519 (0x5027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 10:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2995DF0028EE22B08DF30467D1E3079E646D54BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:bf:1b:b4:6a:a1:57:af:ba:2d:05:35:72:
7e:a1:1d:e6:46:27:8d:70:76:a5:8c:b4:87:08:a5:
94:cf:19:d8:3e:07:ad:9c:10:8b:1f:1c:c7:d7:07:
e3:80:31:7b:a4:39:62:4e:24:96:a3:6a:16:1f:01:
04:2f:37:e7:80:ae:c4:69:de:09:bc:60:cb:a4:49:
2c:6e:e1:a1:c8:02:8e:33:d5:c0:90:c6:f8:af:91:
7b:a6:a3:9d:46:93:7c:2b:11:3d:f1:f8:8e:2b:62:
83:e0:31:aa:6a:73:0a:86:1c:dd:c9:32:01:23:9c:
eb:44:ca:17:36:1a:9d:ee:b5:55:b8:c4:3c:e2:70:
5d:eb:41:f4:cf:82:14:d0:48:15:44:ad:b6:58:99:
2b:69:fe:e9:7d:47:da:e0:5c:7d:af:9b:1d:32:26:
b1:9b:3e:28:71:77:9e:08:2d:8f:e0:7b:4d:17:b7:
1a:1b:e2:9c:c7:65:07:a2:f7:82:3a:e4:5d:a4:6b:
22:dc:92:44:27:89:8d:e8:85:51:85:b0:11:d3:a9:
7c:cc:71:da:37:08:4f:c7:df:fa:81:65:89:8c:e6:
ae:4e:fa:a6:f1:42:80:eb:cb:c7:85:3c:85:ae:86:
c9:c0:93:69:ce:d2:36:44:98:e8:34:60:94:fe:74:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:DF:00:28:EE:22:B0:8D:F3:04:67:D1:E3:07:9E:64:6D:54:BD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KZXfACjuIrCN8wRn0eMHnmRtVL0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:f8:06:f7:79:b6:fe:73:84:8c:26:ed:13:69:9c:36:7c:8e:
8f:24:ef:4c:9f:b1:35:a1:d1:6c:ee:cf:11:85:3a:a8:a1:94:
71:14:48:39:66:16:a7:e5:a9:61:fc:f1:23:e5:e5:6f:a5:e5:
85:e3:b0:0c:c8:55:55:b0:6d:d8:73:90:ae:03:ec:7b:20:15:
6e:aa:4f:61:45:78:21:0a:44:0e:95:a2:01:75:74:e9:26:eb:
60:e3:df:0c:1a:56:28:36:4c:59:91:97:81:44:71:42:ff:e7:
7a:f6:c9:00:1e:e9:25:71:ba:77:3e:40:11:a9:8f:48:86:20:
87:3b:9f:f2:7c:8b:6a:38:ca:f6:ea:1d:ac:0e:f0:d6:c2:9e:
9e:dc:6c:87:9d:b9:26:90:9f:de:e5:30:02:43:25:be:55:85:
36:19:55:d7:02:3e:87:88:a9:6b:be:98:df:4f:f2:59:fa:88:
5b:58:6e:63:c7:cf:a5:92:4c:f8:de:4a:66:de:f4:f6:79:f2:
21:88:a9:7c:c3:4e:06:b5:ea:fa:ee:9a:60:c7:be:c2:17:09:
05:00:17:16:7f:49:f6:88:89:c0:d3:40:5b:dd:a1:f5:ca:aa:
ce:54:ba:ff:8b:ee:82:25:9f:20:d7:a2:14:37:fc:e8:0b:62:
13:e9:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:30 2025 by rpki-client