Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bwZ9vwaCP5EWbPE53mlEQMGIVww.roa
File: bwZ9vwaCP5EWbPE53mlEQMGIVww.roa (raw, json)
Hash identifier: 01rIMNlQi7EBBEngma0gVqBptI2Fml9pO4+YtOq96zg=
Subject key identifier: 6F:06:7D:BF:06:82:3F:91:16:6C:F1:39:DE:69:44:40:C1:88:57:0C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 382B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bwZ9vwaCP5EWbPE53mlEQMGIVww.roa
Signing time: Wed 03 Apr 2024 11:22:20 +0000
ROA not before: Wed 03 Apr 2024 11:22:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14379 (0x382b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 11:22:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6F067DBF06823F91166CF139DE694440C188570C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:1b:10:51:a0:50:49:10:27:18:59:16:36:
85:98:43:3a:95:af:15:ab:0d:ed:70:17:f7:e3:08:
8d:1b:4c:22:96:e2:17:7b:eb:ef:f4:83:01:23:5a:
37:d3:c1:04:29:87:7c:66:e3:33:ee:3e:7a:21:24:
dd:58:a1:2d:e3:d8:b6:93:a5:00:da:64:2c:0d:d7:
7e:9c:3a:20:c6:cc:6a:97:97:ae:12:0d:88:4c:f8:
12:8c:c0:a7:0f:41:f2:cd:76:ec:13:a2:b2:48:80:
82:66:72:80:c4:92:cc:62:b7:11:db:09:d0:c2:94:
1d:17:2b:b8:5b:45:2f:ff:b4:b9:5c:37:2e:e6:aa:
d0:d3:47:58:83:32:23:57:61:2b:84:63:54:8c:de:
e1:f7:b5:df:b0:40:67:b2:d3:fd:e5:fd:5a:69:88:
55:b0:72:a5:a0:c8:f5:08:e6:01:69:14:04:d4:8c:
85:0a:64:f2:1b:ab:cd:ff:b1:db:16:22:56:96:7a:
f9:a1:97:a4:5f:35:29:fb:1f:9c:19:b4:74:4a:88:
12:c3:b6:c8:48:06:1a:56:ea:d7:1a:80:c5:d5:44:
95:80:2f:66:e6:72:60:73:56:77:f5:c3:ff:4a:c1:
7c:bc:59:1a:15:cb:c4:a9:c8:5b:c2:6e:78:fb:9e:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:06:7D:BF:06:82:3F:91:16:6C:F1:39:DE:69:44:40:C1:88:57:0C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bwZ9vwaCP5EWbPE53mlEQMGIVww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:58:4b:42:7e:90:c2:ef:fe:f6:b6:a5:2e:f4:6c:57:7f:ee:
e0:4e:54:99:48:80:1e:2b:38:71:63:55:62:7b:8a:5a:ed:c7:
07:47:30:e1:63:bf:6a:af:53:4d:67:80:45:09:ee:b2:12:19:
ec:74:90:f7:54:0d:34:53:3f:58:13:dc:1b:a4:56:be:75:a6:
88:f4:06:5d:99:0e:6c:c8:3c:d2:65:89:5e:29:da:50:3c:80:
30:17:57:6e:54:ce:38:64:d0:e2:a0:e0:b5:17:23:83:a8:60:
61:44:61:64:04:eb:51:8a:8d:81:ae:cf:77:49:d2:20:10:68:
cf:00:7a:3e:bd:a0:6d:6d:86:ae:d2:e4:1f:f1:0d:83:26:80:
be:a2:ea:1a:48:bc:1c:08:04:b0:d6:fc:73:79:4e:e1:46:91:
ba:20:eb:4a:14:27:cc:ae:1f:7c:c2:be:a6:ac:24:f7:9e:b7:
7c:d3:03:f1:1e:09:e8:b6:94:89:82:65:14:e9:de:db:16:4f:
4c:d5:f2:41:ee:2f:79:42:33:55:98:03:ca:b2:0d:99:57:93:
96:2e:ad:c1:40:e7:f8:85:9e:ff:79:97:59:1c:9d:63:3c:d0:
78:b8:81:f1:da:37:93:2f:8f:9f:79:98:29:2c:de:78:35:57:
41:e8:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:18 2025 by rpki-client