Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/RyJedeisyYebXOAFo1B_zWzSQwA.roa
File: RyJedeisyYebXOAFo1B_zWzSQwA.roa (raw, json)
Hash identifier: kKYL/BjRTJhdnpfOJTsUkJ8D9I610sdOzOTi5Ch14Pw=
Subject key identifier: 47:22:5E:75:E8:AC:C9:87:9B:5C:E0:05:A3:50:7F:CD:6C:D2:43:00
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DCB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RyJedeisyYebXOAFo1B_zWzSQwA.roa
Signing time: Wed 10 Apr 2024 23:22:46 +0000
ROA not before: Wed 10 Apr 2024 23:22:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15819 (0x3dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 23:22:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=47225E75E8ACC9879B5CE005A3507FCD6CD24300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:4c:1c:7e:af:86:1e:41:a4:22:ed:37:55:
7f:78:a1:46:65:4c:7d:fa:c0:0f:1c:f1:ea:d2:db:
9d:3d:30:ab:cb:f1:ef:54:e2:e1:ca:36:01:a7:01:
91:47:82:e2:41:7a:ba:97:28:c9:94:83:ea:ed:9b:
80:82:83:7f:e8:34:fc:0b:d9:db:0d:08:02:28:ee:
4d:5b:72:9e:3f:84:fc:3f:fc:0a:59:4b:3a:43:41:
1f:c7:39:4a:2e:d5:3e:f4:6f:be:5b:0c:30:dd:63:
d0:ee:99:3d:ae:b5:70:7b:cf:80:36:ab:bf:0d:e6:
f5:b1:4c:4f:b3:fb:22:7f:61:17:cc:ce:29:e5:73:
aa:6e:9b:8d:9d:5a:60:66:b1:46:7e:81:0b:ec:4a:
62:d4:61:7d:a9:9f:b5:ea:a3:df:ed:d5:71:a3:8a:
da:c2:d7:de:81:b4:4c:1a:bc:88:df:8f:3f:77:6d:
05:9a:b5:c9:87:f0:8b:48:28:f1:51:fa:da:fa:15:
8c:14:5d:62:37:ad:cc:f8:57:ef:d9:d4:e9:2b:e4:
6c:db:34:61:f1:32:0e:46:c2:35:1e:98:8c:e9:02:
30:99:0b:6e:c3:2b:c9:41:58:71:05:1a:1c:b0:8d:
4e:eb:b2:41:94:37:65:ad:7b:f1:7a:bc:0b:f1:2b:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:22:5E:75:E8:AC:C9:87:9B:5C:E0:05:A3:50:7F:CD:6C:D2:43:00
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/RyJedeisyYebXOAFo1B_zWzSQwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:a6:1c:a3:ac:68:82:c3:5e:93:dd:5c:f3:32:c4:d0:d2:0f:
e7:37:23:6e:f9:7d:6a:a9:d7:25:2d:1e:db:57:eb:4f:1e:5c:
51:79:de:91:13:1f:79:00:c9:e5:51:38:d2:e6:64:a0:bb:12:
83:ad:e2:ae:af:5b:37:48:a3:f8:3f:a0:5a:d5:4d:89:08:a6:
b9:1d:c2:83:2d:51:ab:1c:fe:29:96:1d:0e:7d:24:ef:dd:ae:
a7:94:5c:9f:65:7b:6e:c0:59:48:39:97:92:13:77:fe:a0:16:
cb:50:f2:88:70:4a:36:e5:94:eb:2d:2d:32:0a:f9:6f:5f:9b:
b5:58:38:89:a9:e7:91:76:05:46:7d:0d:44:0b:ad:26:a1:44:
80:e1:ce:e2:63:48:39:ff:16:be:3e:9e:9b:de:05:63:7f:72:
37:1a:69:c9:c6:b9:4c:9f:ff:de:89:c4:29:1d:e0:f1:65:3c:
75:e1:40:f0:20:71:c9:0b:bb:fa:3a:fe:71:1b:84:d4:26:7a:
ab:db:51:b7:cf:14:71:3f:80:a1:4b:26:26:47:bc:a7:f6:b7:
62:00:0b:85:97:0c:e8:45:fb:37:27:52:25:5a:b6:e3:82:7c:
19:a5:34:4b:ca:d0:72:dd:b5:c6:09:97:e7:6e:80:f8:97:84:
dc:de:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:58 2025 by rpki-client