Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ajeifdJFM7wf1SjaUwTMcJikiW8.roa
File: ajeifdJFM7wf1SjaUwTMcJikiW8.roa (raw, json)
Hash identifier: TnC2BhzWobCnuLGXHzmHuco16LqxDqcOUGn8s89XiDc=
Subject key identifier: 6A:37:A2:7D:D2:45:33:BC:1F:D5:28:DA:53:04:CC:70:98:A4:89:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4353
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ajeifdJFM7wf1SjaUwTMcJikiW8.roa
Signing time: Thu 18 Apr 2024 08:22:59 +0000
ROA not before: Thu 18 Apr 2024 08:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17235 (0x4353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 08:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A37A27DD24533BC1FD528DA5304CC7098A4896F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:a5:00:61:6a:8c:9d:c0:16:0f:07:b9:5b:
74:7e:35:66:56:c2:27:b9:71:58:d4:7b:50:bf:f4:
26:03:5d:23:ad:6c:26:e8:23:fc:b0:2c:94:89:fa:
e3:7d:0b:89:f0:d0:7c:88:28:e5:a5:53:21:98:1e:
54:ce:35:30:1e:8a:9f:fd:17:30:fc:ef:59:ca:ed:
22:d4:a2:83:41:a7:ab:6f:10:bf:6c:2a:8a:b8:91:
ae:12:a2:0a:b5:c5:05:a7:d3:0d:ef:1f:94:5f:79:
f8:47:19:e5:1b:b4:56:7e:99:8a:f3:1d:ad:2e:89:
f5:f6:05:46:6f:32:c6:75:24:d4:cf:86:36:4e:42:
5d:51:23:c5:41:57:02:30:37:a3:51:0b:7f:c6:38:
f5:2e:0d:80:a0:d7:62:69:0b:59:39:e6:49:d7:f9:
a5:34:45:02:18:03:62:a1:f1:0a:12:1c:7f:e2:2d:
c7:8a:1c:19:34:2b:4c:73:43:8e:f0:18:5a:93:bc:
2b:ba:27:cb:97:f0:9d:43:8e:ae:b0:e8:a7:cf:2a:
19:f8:fd:16:04:fd:80:77:3f:7a:d8:81:f6:df:42:
86:57:9f:e8:b8:59:87:87:d0:88:13:42:49:59:1a:
45:63:84:99:2d:a3:d1:0e:c9:55:3a:60:40:a6:2c:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:A2:7D:D2:45:33:BC:1F:D5:28:DA:53:04:CC:70:98:A4:89:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ajeifdJFM7wf1SjaUwTMcJikiW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
39:f5:44:e0:f0:1e:01:e2:66:ab:94:43:30:9d:f0:c8:c7:e0:
02:31:b4:1e:8d:88:52:72:a5:2d:af:70:6f:d0:6b:dd:be:7e:
1a:c2:62:ce:ce:d6:f2:b7:75:d8:79:5b:28:61:a5:12:f7:13:
e2:2f:9c:9d:51:d7:cf:68:29:7b:61:ff:b0:24:a2:96:c0:60:
cd:c2:7d:fe:01:12:41:c3:fe:ab:cc:83:8f:d4:1f:22:f8:b3:
d9:31:f7:24:88:77:6e:6c:c2:b9:9e:48:b0:17:1f:b3:10:fb:
ad:85:0b:d0:96:d9:74:6e:d9:95:93:a7:18:2e:cd:81:ff:b1:
a0:35:9d:41:25:47:1b:dd:cd:ad:b8:28:36:f6:e1:5e:c6:6c:
61:04:88:2e:0a:18:10:d9:ff:2f:60:a8:28:1e:bf:e4:5a:ec:
a6:30:b4:a6:44:31:a6:64:1d:75:2d:93:72:93:37:9b:d5:08:
e2:05:28:cb:51:83:59:c7:10:aa:d1:f2:71:e9:b2:dc:cf:ac:
71:81:33:e8:f7:39:ff:58:c3:30:53:4b:e3:a4:cd:77:fe:54:
a6:9b:fb:38:81:7b:a5:96:1d:f5:3f:1c:b5:d3:95:6d:ae:57:
72:f3:35:2c:74:c7:e9:67:79:66:b9:fe:e6:54:08:9a:fd:2f:
e8:59:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:29 2025 by rpki-client