Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dwv6garHLLipHPX9YMg_hdSbtnI.roa
File: dwv6garHLLipHPX9YMg_hdSbtnI.roa (raw, json)
Hash identifier: 8hyOzP7u/ObxuQXevIBTQKCyZklfZ5ls9AOAIOq8KxU=
Subject key identifier: 77:0B:FA:81:AA:C7:2C:B8:A9:1C:F5:FD:60:C8:3F:85:D4:9B:B6:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4917
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwv6garHLLipHPX9YMg_hdSbtnI.roa
Signing time: Fri 26 Apr 2024 00:53:20 +0000
ROA not before: Fri 26 Apr 2024 00:53:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18711 (0x4917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 00:53:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=770BFA81AAC72CB8A91CF5FD60C83F85D49BB672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4f:b9:17:2f:2a:6f:ff:e2:9e:d6:a5:92:1d:
2a:44:c2:6e:56:ef:89:19:36:0f:4a:4c:35:33:15:
b6:bc:f2:d8:48:f4:c2:98:c6:74:20:f6:a6:4e:09:
26:c2:7f:7c:0e:93:bb:ef:02:ab:8e:57:62:83:aa:
76:10:2a:f6:54:60:5a:35:ef:fc:28:c6:d6:01:05:
cc:4c:d0:7e:09:3b:c2:44:63:0c:85:d5:6e:c0:8c:
4f:68:3f:57:66:54:94:a2:9f:c2:3d:d7:dc:ea:a2:
09:ea:91:1d:b2:b1:94:08:4d:dc:2c:7c:c0:2b:da:
ce:26:a3:89:cc:fc:3e:b8:23:14:59:2c:18:e4:d8:
70:db:5b:23:02:a3:f0:d4:6b:e1:12:86:a2:8e:a6:
87:e1:73:00:4e:d8:67:a4:9d:ca:3a:64:23:05:0f:
1b:2f:8d:11:3e:87:a1:76:5f:7c:5a:54:1b:0e:6e:
25:50:cc:13:5e:17:35:e4:3f:cb:72:33:49:36:3b:
53:87:a5:6f:c5:77:6a:1a:30:80:54:cd:11:7f:48:
24:f9:14:78:ec:d7:23:fd:ee:19:18:b4:89:79:bb:
6c:3d:60:7d:09:5b:67:5e:4a:7a:04:49:39:8b:7b:
20:b4:a2:d0:58:7b:97:81:7b:a0:55:76:c8:ed:6c:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:FA:81:AA:C7:2C:B8:A9:1C:F5:FD:60:C8:3F:85:D4:9B:B6:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dwv6garHLLipHPX9YMg_hdSbtnI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:b6:ad:c6:b5:5c:c9:6c:36:72:93:24:2e:fc:19:49:85:84:
6c:37:ce:d2:3e:13:4f:70:83:87:dc:82:03:f3:2a:66:e7:ca:
f3:78:ad:0e:90:e2:01:ca:e0:ad:4a:86:19:51:c8:6e:28:1e:
2a:6b:43:32:63:11:41:9d:da:ad:62:3f:1f:e5:72:20:fe:4a:
bb:d6:f0:cf:16:97:a3:39:44:30:97:a9:06:03:23:0f:b1:2d:
e5:05:35:7b:e3:23:d3:38:21:b8:3d:b2:60:df:99:6f:bd:2b:
79:49:6e:b6:67:bb:60:c2:32:31:07:46:98:fc:d9:da:9f:7a:
80:2d:64:2a:5c:eb:96:9b:22:1c:79:96:d5:65:c6:84:c4:6c:
86:42:88:76:ef:79:2b:e4:5e:eb:b1:3d:88:fc:e7:02:4a:7e:
a7:2e:09:46:c3:70:54:be:f1:10:4c:19:6a:42:59:f8:03:b8:
37:20:47:0b:72:e1:3e:bb:11:e6:d7:75:70:5e:46:33:aa:c9:
cf:6a:5c:15:44:7f:cd:33:d2:d3:26:0a:00:48:9b:b5:65:1a:
49:06:5f:2c:72:28:98:6c:48:bb:7e:fa:e2:61:f2:29:27:63:
e1:88:75:6f:2d:40:a6:81:49:69:fc:65:3e:07:86:c6:29:d2:
f5:d4:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:06 2025 by rpki-client