Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gXBuWVxg7ECnqJQDPqLvByABCNc.roa
File: gXBuWVxg7ECnqJQDPqLvByABCNc.roa (raw, json)
Hash identifier: rG4bUuNv8qgmN+62zYDmCnoCXHfxXcrrIOVIzvM6Q68=
Subject key identifier: 81:70:6E:59:5C:60:EC:40:A7:A8:94:03:3E:A2:EF:07:20:01:08:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 52EF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gXBuWVxg7ECnqJQDPqLvByABCNc.roa
Signing time: Thu 09 May 2024 03:53:58 +0000
ROA not before: Thu 09 May 2024 03:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21231 (0x52ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 03:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=81706E595C60EC40A7A894033EA2EF07200108D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:07:ac:b9:a9:8e:0a:b9:0b:13:33:02:b5:
42:6b:a4:5c:7f:82:d3:44:4c:ad:f2:ee:43:0f:6e:
ac:29:f0:8d:54:6e:e2:d0:c2:ec:59:16:a5:5c:d5:
4e:b0:d2:a5:fd:e5:29:fb:cc:6a:7c:a9:88:f4:c7:
83:de:79:b1:70:3e:20:0f:02:e0:4e:73:21:e6:ae:
bc:62:9d:ea:25:87:41:0c:52:30:36:7c:23:28:9e:
a4:c5:c2:c2:72:aa:f2:79:31:0f:e7:78:bc:27:79:
b6:de:3e:0f:b9:91:7f:61:71:d4:ce:50:7a:7a:78:
91:0f:95:98:01:20:55:55:39:b9:f1:7a:37:92:21:
bb:e6:14:12:aa:7d:0d:31:a5:85:0a:ef:b7:e2:ef:
95:5b:3f:4b:07:57:d1:58:55:9a:05:e2:78:0a:22:
9a:c0:7e:4a:7c:ed:3c:bd:0e:96:30:72:0b:32:05:
63:00:1b:91:d8:24:70:bc:3a:fb:45:21:55:18:09:
b4:e9:20:41:b2:50:01:26:03:f9:b2:9d:49:d6:8c:
60:42:bf:f2:c3:44:78:29:bf:b0:ba:d0:14:30:f9:
7e:58:23:ec:38:2f:bf:ba:d6:2f:d9:0a:7b:b2:a2:
5a:9b:6d:1f:85:50:17:09:cc:e9:df:1f:29:8a:7b:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:6E:59:5C:60:EC:40:A7:A8:94:03:3E:A2:EF:07:20:01:08:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gXBuWVxg7ECnqJQDPqLvByABCNc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:2d:b7:48:a2:3d:22:6f:86:39:5f:03:98:a3:17:a3:75:f3:
bb:58:22:b3:7e:e1:5f:49:16:11:55:e7:7f:33:62:5c:1d:bf:
e6:90:46:01:de:37:a7:89:de:07:2a:77:cc:b8:ea:55:36:44:
fb:8e:e3:95:ca:97:6d:df:f2:aa:56:90:06:8c:fb:6a:60:0e:
c3:c0:5a:de:98:73:9a:a9:02:45:bb:66:79:58:a9:ec:a6:89:
38:9c:0d:d9:69:5f:44:ed:27:ff:dd:fc:3b:88:b7:7c:40:e7:
34:97:f9:2c:e5:69:58:6e:91:46:ae:56:bb:b9:76:af:76:69:
75:02:d4:af:43:6c:f8:ff:a4:37:48:d1:e4:19:46:10:a2:f2:
5e:86:26:46:63:28:ab:b3:dd:38:0f:2c:1f:71:0f:74:ec:de:
07:da:65:38:c7:43:ef:18:0b:f0:12:3d:8c:1a:e6:53:98:fa:
8a:26:39:ec:04:e3:26:80:76:21:ea:7a:8c:6d:ab:b8:9d:3b:
92:03:22:03:26:67:54:9c:7b:3d:f2:a0:bd:fc:ac:75:b6:67:
5f:dc:1f:62:dd:da:3d:2c:4e:0d:a1:24:be:62:cb:a6:8c:6d:
6c:93:ab:52:36:a4:e4:03:38:69:95:cd:32:0c:8e:95:e2:c7:
11:c9:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:20:00 2025 by rpki-client