Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nAJVjIM2VEnmCWJfoKBnEQPOAsI.roa
File: nAJVjIM2VEnmCWJfoKBnEQPOAsI.roa (raw, json)
Hash identifier: 4p6N63FtaFLMGyykVlC7AijeGb4ePjeL1QxxMdryBoo=
Subject key identifier: 9C:02:55:8C:83:36:54:49:E6:09:62:5F:A0:A0:67:11:03:CE:02:C2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CCB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nAJVjIM2VEnmCWJfoKBnEQPOAsI.roa
Signing time: Tue 30 Apr 2024 23:23:54 +0000
ROA not before: Tue 30 Apr 2024 23:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19659 (0x4ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 23:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C02558C83365449E609625FA0A0671103CE02C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:e3:90:74:26:7d:94:6f:5b:17:eb:28:d5:
0f:63:39:89:7a:ab:54:9b:49:54:d7:a5:71:84:cb:
91:c4:54:64:6f:08:8e:83:7e:65:19:da:8f:fc:98:
1e:18:c6:72:01:62:41:69:0e:c4:8b:fc:aa:5e:c6:
a8:89:ea:34:5b:1d:db:29:bf:2d:29:f1:2c:e6:73:
6a:64:a7:57:f3:bc:15:44:be:e1:5c:92:79:b0:e8:
61:99:55:73:2b:15:85:9d:98:d2:6e:b7:d3:1c:2d:
50:eb:0c:94:4e:d6:b1:6f:a5:d3:94:64:87:c9:df:
04:84:4e:e4:3b:36:2c:32:ad:ba:09:ba:98:b1:7b:
79:02:3c:ac:ad:cd:d8:8d:1d:f3:a6:cf:68:5a:10:
ac:db:a3:f6:15:fa:8a:6c:22:59:49:58:cc:98:c4:
c2:ae:51:a8:0b:e8:d5:a4:db:d8:da:fd:88:cf:b8:
0b:6a:6f:fa:d4:42:ea:33:85:bc:26:e4:d2:5e:ea:
0b:08:3b:4d:bd:d8:0a:61:41:18:a3:86:f7:2b:54:
c4:39:08:33:d0:ea:0f:b0:7f:dd:48:7b:a1:06:68:
28:9c:75:b5:ee:e5:6d:df:be:e5:da:9d:b6:45:0a:
f8:b8:4e:be:a5:3c:f4:89:de:fa:d8:c3:2d:38:68:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:55:8C:83:36:54:49:E6:09:62:5F:A0:A0:67:11:03:CE:02:C2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nAJVjIM2VEnmCWJfoKBnEQPOAsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:c8:91:6c:cf:e6:ec:b6:f3:50:f9:eb:3c:b7:90:95:84:9a:
0e:50:aa:5d:5c:f7:f8:f1:b0:f7:f5:78:e6:19:b5:d5:68:58:
3a:ef:72:db:d5:50:af:8c:41:9e:2a:83:17:03:f4:2c:a3:1a:
40:20:d7:75:ec:71:92:41:d9:48:1d:6f:47:ac:dc:90:8d:21:
ba:10:58:46:7b:d6:e9:89:4d:f2:a9:a7:ec:da:6d:ad:df:81:
2d:45:fd:4c:4d:63:50:7d:26:a0:8c:c4:88:6b:0f:87:24:8f:
ee:27:2a:55:d5:89:e8:bd:9e:a7:96:a1:5c:94:04:1f:9e:f2:
a2:93:1c:a1:76:e8:7d:92:ad:97:2f:3e:ef:dd:0d:69:12:ed:
94:c2:0b:f1:4c:1b:74:23:86:de:bb:3f:d2:9b:f6:35:68:5b:
c8:94:50:93:d3:c2:36:26:98:37:f8:5f:c5:5c:d0:a8:cd:f8:
c9:5d:52:53:4d:ea:26:f6:a6:1b:35:98:a7:73:93:c8:72:6f:
02:57:6a:c9:38:5a:48:91:13:23:8e:c8:90:b9:2a:4d:4f:77:
59:bd:90:38:fa:58:97:92:08:f9:4e:c1:32:d0:ba:d0:8e:f0:
8a:ce:d8:72:b2:cf:8d:f2:e5:a1:8b:48:5c:80:c3:ac:5a:27:
35:f9:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:09 2025 by rpki-client