Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NxWoLAOWipFZRwbN-mHG7yeRpFc.roa
File: NxWoLAOWipFZRwbN-mHG7yeRpFc.roa (raw, json)
Hash identifier: vk2+FNcmReq5IispcsyoyVy9pwkkHOorOY9k5YdjBG8=
Subject key identifier: 37:15:A8:2C:03:96:8A:91:59:47:06:CD:FA:61:C6:EF:27:91:A4:57
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F23
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NxWoLAOWipFZRwbN-mHG7yeRpFc.roa
Signing time: Sat 04 May 2024 02:23:53 +0000
ROA not before: Sat 04 May 2024 02:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20259 (0x4f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 02:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3715A82C03968A91594706CDFA61C6EF2791A457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:c4:bb:bf:4e:eb:3b:bd:a5:87:c8:66:68:
45:5c:65:3c:6a:2e:5c:8c:30:91:89:71:d8:12:08:
36:f2:8a:93:98:01:e4:55:15:8a:98:a6:15:81:47:
12:69:45:61:51:bc:df:13:b0:0f:72:4c:d2:23:d2:
81:23:1e:46:46:40:4f:dc:ad:75:3b:a9:97:a8:10:
85:b6:4a:77:ee:18:c6:5a:2f:a4:77:e2:90:5e:52:
e6:10:3c:bf:8b:3f:0a:64:d7:c3:66:23:ed:f6:71:
49:a2:cc:76:8a:e4:5c:8c:46:8f:3b:3e:52:15:18:
a3:8c:04:a3:cc:9c:21:b3:bc:06:a4:b0:dc:22:51:
09:56:3d:62:9c:36:ce:b9:ee:5b:48:61:44:a7:4e:
77:26:d3:be:a3:00:3d:39:3a:12:ca:46:93:3e:54:
ee:81:58:85:fe:a9:b5:cc:dc:20:d1:22:5e:b0:fd:
38:d6:35:86:ef:50:c2:1a:15:f3:17:eb:2f:32:d4:
20:44:fe:4b:92:97:0e:76:00:1c:72:b7:ba:0d:4b:
2b:e1:c9:1f:a8:0c:bb:6a:4e:2e:17:be:c2:b4:59:
fa:de:56:f1:84:ee:b4:2f:fa:af:2e:0a:06:58:e5:
a8:e4:0a:cf:ec:0f:19:35:88:76:97:dc:a7:b6:20:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:A8:2C:03:96:8A:91:59:47:06:CD:FA:61:C6:EF:27:91:A4:57
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NxWoLAOWipFZRwbN-mHG7yeRpFc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:93:21:91:e6:3a:d2:7d:de:c4:08:62:09:47:25:ee:65:46:
ee:8b:05:b4:81:77:63:19:35:93:1f:9f:18:95:aa:bc:dc:39:
03:39:01:ba:fe:da:73:f0:b7:7a:79:8e:92:82:9a:0a:48:01:
fb:50:d4:59:3d:81:c4:17:62:98:31:7c:ae:92:e1:03:38:cd:
03:62:2a:cb:7d:51:eb:b0:50:b6:2a:22:3a:f7:41:22:fe:32:
27:12:9e:5f:ff:09:ab:fd:08:17:56:7f:66:f2:93:ac:b8:5d:
86:74:cb:f5:dd:fa:3c:cb:b8:fb:c4:70:8a:dc:b7:a8:cf:82:
2c:b0:90:bd:50:30:d5:26:bd:e6:2a:da:bc:d3:34:52:38:c5:
18:11:77:51:75:12:35:a6:02:63:ad:74:58:b7:79:4e:1d:74:
f4:5b:0d:f3:38:36:2b:f7:f7:cc:33:97:87:d5:1d:18:ef:8e:
91:2f:4b:44:31:b2:af:6e:dd:b4:5c:24:ef:bc:0c:b1:72:6f:
5d:46:f5:41:4f:45:51:1a:95:01:6b:6d:e8:a4:81:02:1b:7a:
b1:58:16:05:45:f6:4f:ed:d1:8c:ff:7d:fc:43:d8:9a:ce:e0:
33:23:a6:27:b7:b6:99:2e:e7:eb:37:35:6c:c7:a4:d7:e2:16:
bd:a8:0e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:29 2025 by rpki-client