Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KlU2jS0pKt5B0g3A36FEeUFEX1A.roa
File: KlU2jS0pKt5B0g3A36FEeUFEX1A.roa (raw, json)
Hash identifier: YzPr8BfBcKOAjwAbW41+V7YVf2kQ8GrCeqs7W/6pg9k=
Subject key identifier: 2A:55:36:8D:2D:29:2A:DE:41:D2:0D:C0:DF:A1:44:79:41:44:5F:50
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EEB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KlU2jS0pKt5B0g3A36FEeUFEX1A.roa
Signing time: Fri 03 May 2024 19:23:55 +0000
ROA not before: Fri 03 May 2024 19:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20203 (0x4eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 19:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2A55368D2D292ADE41D20DC0DFA1447941445F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:e8:06:07:df:26:5e:ff:0c:96:13:08:fe:
c4:cf:18:7b:c2:c2:b1:0a:1f:86:c3:4c:b5:a5:0d:
59:0f:0c:2b:d8:06:6e:7a:b8:8d:69:91:56:b4:19:
9f:4a:37:9d:fe:bc:cd:28:2f:de:de:8a:98:e2:9b:
aa:8b:02:c0:75:ba:39:ec:f3:de:01:a5:ad:40:20:
d2:8d:e2:04:e5:03:30:71:81:ea:da:21:26:f4:b4:
d0:2e:1d:98:87:a9:6b:f7:20:19:12:bb:7a:5c:61:
91:38:a6:f3:4b:8d:e7:d2:71:f0:2a:bf:7d:94:6b:
ed:0b:0e:35:83:21:21:e7:9d:11:2f:0a:80:da:72:
cc:70:69:de:c6:b7:d2:c7:35:ce:11:26:8e:f9:63:
d5:cf:5d:58:e4:a9:33:23:0c:87:11:e5:76:df:b7:
1e:70:e2:fc:96:87:4c:75:47:ae:02:3d:cb:52:5c:
f6:f0:9f:52:32:53:44:20:4a:f4:a6:57:ce:23:b3:
fa:4b:de:49:6f:31:db:fb:ea:3b:18:49:42:a1:e7:
10:1f:37:ab:53:0f:f7:73:1f:56:5a:53:59:a1:fd:
d8:e3:b3:33:0c:61:6b:b7:0b:2f:86:92:ad:4d:13:
5e:db:e2:8d:3e:56:29:28:fa:13:87:f3:b4:a4:bd:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:55:36:8D:2D:29:2A:DE:41:D2:0D:C0:DF:A1:44:79:41:44:5F:50
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KlU2jS0pKt5B0g3A36FEeUFEX1A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:c6:87:64:ef:d2:e8:48:18:89:44:3c:7c:0d:a8:31:d3:69:
ee:9d:f5:a2:ff:78:16:51:bf:e7:cf:3c:44:ed:a0:c8:7d:dd:
22:48:60:fe:fa:e3:ea:c8:bc:6b:95:91:aa:66:dd:d5:dd:a3:
16:4c:13:08:a4:e9:c2:c9:c2:6f:52:39:3c:2d:81:0c:55:84:
4f:00:9c:81:64:fb:c0:8e:36:74:30:98:b5:b1:45:1f:11:59:
82:e1:97:dc:e5:96:43:12:6c:a1:4b:ae:3c:be:9b:14:bd:ff:
95:9e:f5:53:a3:72:41:12:32:f7:7c:65:04:70:5d:13:95:14:
27:ea:d6:b5:72:39:5b:57:a7:78:ca:6b:66:72:c3:68:d3:65:
b0:d0:9c:0f:86:0c:5c:03:90:c7:f8:b7:76:cc:af:37:d2:eb:
61:83:d8:e0:33:e9:9f:66:d4:e9:93:16:a6:cd:0d:fe:bc:dd:
da:21:e1:86:b3:b9:c8:47:0d:38:f1:cf:a7:87:56:21:fa:51:
8f:63:06:b6:12:01:3b:b9:25:52:87:55:a5:a8:f0:7f:20:4a:
67:c5:50:4d:72:ea:04:91:71:10:64:ee:a2:ad:79:06:96:f1:
d5:99:c9:ea:14:af:68:01:8c:86:08:b9:81:16:a4:4b:d2:46:
f6:b1:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:24 2025 by rpki-client