Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mX2PKLo3KBz_xH3I33TQjStH3B4.roa
File: mX2PKLo3KBz_xH3I33TQjStH3B4.roa (raw, json)
Hash identifier: 85Hyjlb81jCJKv+kOPOUno9LB6+i/6bh0qq4xjRL5Ko=
Subject key identifier: 99:7D:8F:28:BA:37:28:1C:FF:C4:7D:C8:DF:74:D0:8D:2B:47:DC:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ABF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mX2PKLo3KBz_xH3I33TQjStH3B4.roa
Signing time: Sun 28 Apr 2024 05:53:25 +0000
ROA not before: Sun 28 Apr 2024 05:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19135 (0x4abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 05:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=997D8F28BA37281CFFC47DC8DF74D08D2B47DC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:46:d7:d9:17:6e:5f:35:a7:00:9c:8d:14:
6c:5a:60:a5:2d:c4:1d:4a:33:80:d7:34:dd:9b:3e:
c2:5e:64:e3:11:05:90:e5:c0:bc:72:60:b4:97:f9:
a0:b9:70:b8:60:36:99:df:0a:75:5b:8c:3b:5f:46:
3b:1b:1d:c2:60:26:c7:39:b4:50:43:5c:81:02:ef:
bd:a9:21:bf:15:7d:55:17:3d:84:66:fa:11:08:9d:
07:66:af:a0:a8:67:31:51:bd:2f:da:65:ea:b8:7b:
ac:dc:4e:ce:62:ed:56:f7:26:45:26:7d:82:f0:a3:
8c:58:55:f3:31:f7:80:27:68:ed:cf:1e:9c:20:f4:
46:4f:3d:7a:da:de:3e:d0:0f:43:32:d6:5d:44:1f:
fe:f2:14:a5:a2:93:96:5b:16:64:7e:be:81:20:ec:
91:1e:6d:04:2a:72:ab:0b:9a:7b:00:ed:26:50:d4:
f4:a6:98:7b:f7:bc:da:eb:ae:38:bd:7a:66:db:bb:
d9:55:b7:23:1d:a3:b4:9a:c4:e9:98:57:4e:51:3e:
2c:94:34:23:1b:8a:99:cd:c2:69:5c:26:ee:4a:e3:
b0:af:0a:ea:e5:80:cb:02:e5:a6:da:12:41:3c:80:
da:ee:8d:b3:e2:2e:7d:3e:87:32:b4:1e:1f:09:30:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:8F:28:BA:37:28:1C:FF:C4:7D:C8:DF:74:D0:8D:2B:47:DC:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mX2PKLo3KBz_xH3I33TQjStH3B4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:38:25:96:95:16:c9:4a:e2:af:b0:72:de:a4:46:a3:c2:62:
7e:7a:fa:64:50:6b:ed:7e:d2:5e:f2:1d:44:e5:52:17:73:23:
12:a1:b4:fb:ef:ad:8f:82:02:40:cb:46:ff:ec:61:fe:8a:24:
bf:ca:a0:31:5b:91:27:c8:ef:c8:2b:10:a4:1b:41:30:22:20:
0b:2a:c4:16:b4:36:41:cd:f2:4e:4a:dc:95:3b:a5:31:6d:9f:
e1:47:a5:92:84:01:8b:f6:2f:19:67:4f:3a:4b:ce:89:ba:fd:
76:cf:40:79:91:e1:42:db:1e:e1:84:6b:1d:c5:9f:0c:67:04:
d0:63:58:46:57:0d:7e:2d:53:83:90:ba:a8:ae:76:d6:05:d3:
44:27:f2:f1:3e:40:14:fd:00:c5:6b:bc:75:d1:d9:07:ed:c6:
00:e4:55:e7:04:ef:8a:18:5e:dc:02:51:1c:7d:70:e4:0c:78:
18:29:c9:7e:0a:78:27:e4:96:4d:c9:56:6c:91:b1:00:25:86:
2d:53:80:f2:9d:7a:24:5b:87:f7:bf:06:ac:8f:a1:15:e0:1c:
8d:d1:1c:db:43:c1:6d:53:b4:fe:aa:48:60:5d:e2:dc:79:cc:
f6:24:b4:ab:93:40:f7:37:cd:06:b3:06:eb:7c:ad:0d:51:92:
23:cf:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:00 2025 by rpki-client