Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Mjo2JYLZZCag1uPaUFNou0Av2uY.roa
File: Mjo2JYLZZCag1uPaUFNou0Av2uY.roa (raw, json)
Hash identifier: BKVaQ/KRX0tIWtCbtvILoX7b93/7/6qIHGG2/i1y3/Q=
Subject key identifier: 32:3A:36:25:82:D9:64:26:A0:D6:E3:DA:50:53:68:BB:40:2F:DA:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5153
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Mjo2JYLZZCag1uPaUFNou0Av2uY.roa
Signing time: Tue 07 May 2024 00:24:02 +0000
ROA not before: Tue 07 May 2024 00:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20819 (0x5153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 00:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=323A362582D96426A0D6E3DA505368BB402FDAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:03:72:6a:58:6b:43:f9:ff:17:4c:81:a9:
33:d1:2a:a9:03:81:20:4a:21:04:f4:1c:fb:ca:f6:
e8:65:57:26:39:be:c4:21:92:fd:e9:e4:53:b2:d4:
86:9a:69:03:93:f6:65:d1:80:0b:8f:cc:b5:c7:e4:
f3:69:e5:62:dd:e0:f2:09:d7:13:f6:45:24:6b:65:
2e:b7:9f:48:2a:50:f8:aa:63:c1:8e:38:ff:aa:39:
7a:1c:1f:c6:90:91:32:ab:4e:f0:18:ce:60:dd:f4:
06:e7:57:db:3b:85:87:c6:23:0f:67:b9:66:12:f6:
92:d0:d8:62:49:10:74:f2:f4:8a:66:c9:ba:82:e8:
e8:70:5e:4f:06:4b:08:d0:73:01:88:a4:b5:4f:63:
1d:3e:42:37:b6:c3:14:a3:5c:a0:b5:16:bf:f6:d3:
a9:15:31:41:b1:7f:e5:c0:96:03:da:c6:68:ed:1a:
0c:a4:ed:74:32:e4:3a:9c:8e:7b:33:97:6e:30:13:
9c:f5:12:0a:26:a7:33:02:48:63:de:4e:65:27:5e:
a6:0f:31:11:2c:81:5e:d0:a3:c6:02:24:36:b0:3f:
5f:f4:0c:12:3b:4c:a4:43:af:78:06:bc:2f:ca:61:
73:f6:94:ae:0f:6f:5a:79:27:20:40:06:55:91:c7:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:36:25:82:D9:64:26:A0:D6:E3:DA:50:53:68:BB:40:2F:DA:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Mjo2JYLZZCag1uPaUFNou0Av2uY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:65:22:30:50:20:ed:06:07:c9:2e:2d:88:db:f1:25:cf:10:
48:0a:d0:9f:04:4f:46:a4:32:05:b4:34:07:f3:69:73:88:78:
7a:0e:72:15:0d:26:45:a6:20:e7:40:88:a5:eb:64:10:12:2f:
05:cb:77:eb:43:6f:5d:ba:0e:9c:18:81:41:89:2d:2b:6f:e3:
71:d4:28:97:13:1a:14:a1:13:04:ab:ee:df:ed:fe:61:24:5a:
18:07:4e:44:ef:c2:90:e2:da:d7:dd:53:8e:c5:79:a9:fc:70:
6a:ab:98:21:4b:6e:99:0b:86:de:78:1b:04:39:08:a7:d2:0d:
93:30:08:9f:19:50:e0:79:8c:06:97:e8:24:1d:be:a7:60:fe:
ae:69:2e:42:a6:84:ca:6b:8d:c6:c0:9d:77:e1:e8:86:27:09:
6f:d8:a4:f3:9c:8c:95:83:c5:67:f1:49:16:f5:85:68:1c:42:
b4:8c:fe:04:4a:d4:50:41:cc:db:c7:22:2d:9d:77:c7:4c:6d:
a2:7a:3f:3d:b9:76:94:5e:3c:4a:50:88:06:4b:a8:b8:e5:c1:
c3:f6:e1:15:b7:0d:3a:a1:c5:97:15:b8:e3:a8:20:58:a8:70:
6c:e4:b8:76:78:63:46:9a:e2:f0:2f:c0:8c:fd:b3:cc:bc:38:
b6:d6:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:24 2025 by rpki-client