Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nIID6E5dcduf73qNVKp3kPsqD6M.roa
File: nIID6E5dcduf73qNVKp3kPsqD6M.roa (raw, json)
Hash identifier: Rlqw7MRR2RGzovNgy2wc9hoiRgGBgcIFlv0Xv8ZSxBc=
Subject key identifier: 9C:82:03:E8:4E:5D:71:DB:9F:EF:7A:8D:54:AA:77:90:FB:2A:0F:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33CB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nIID6E5dcduf73qNVKp3kPsqD6M.roa
Signing time: Thu 28 Mar 2024 15:22:29 +0000
ROA not before: Thu 28 Mar 2024 15:22:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13259 (0x33cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 15:22:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C8203E84E5D71DB9FEF7A8D54AA7790FB2A0FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:b5:29:12:11:87:e8:3e:26:03:de:46:f9:
53:b7:4c:d0:1d:98:69:e0:82:cb:15:81:e9:23:7c:
7a:ee:2c:d0:a0:0a:64:e8:b1:d7:2e:c4:64:af:ce:
db:f0:d3:53:af:20:7a:5d:7b:5e:48:23:a8:87:0b:
1b:b6:21:95:26:b6:e1:f8:8d:d4:7c:e6:99:33:01:
45:ad:2a:5f:6c:94:f2:8f:20:e7:65:c0:ed:d1:bf:
f9:a8:ad:99:12:77:86:a6:71:55:b1:89:63:6d:8f:
d7:d6:8f:8e:ea:a9:b1:4b:3f:44:75:ab:96:61:90:
6a:c1:62:9d:f6:6f:fc:7e:e0:d1:99:34:e9:28:d2:
46:97:b0:53:81:0b:ba:cb:7b:ed:82:09:30:78:f4:
cd:01:5c:f1:9e:d2:2b:d1:e5:b6:f8:50:81:c1:74:
70:5b:16:2d:6b:6b:e1:d4:5c:da:9f:46:5b:e7:95:
ca:76:9b:64:dd:84:65:27:53:d6:a8:59:ad:dd:67:
ff:4e:5f:83:77:86:e9:f8:3f:2f:0b:34:98:88:c2:
29:5a:be:e8:d4:1e:cf:fa:d1:0a:01:cd:54:d8:e4:
05:f0:63:01:85:9a:8f:bd:fb:72:eb:6a:14:ef:86:
8a:dd:cb:eb:11:5a:47:5a:33:b0:04:f0:28:e6:cc:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:03:E8:4E:5D:71:DB:9F:EF:7A:8D:54:AA:77:90:FB:2A:0F:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nIID6E5dcduf73qNVKp3kPsqD6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
33:36:b6:90:2a:23:89:e6:fa:9e:b6:0c:98:87:f4:e6:53:b1:
00:05:9b:7b:4f:3f:72:b7:a6:91:9a:a9:81:dd:01:8b:5a:5c:
7f:75:e6:c0:fe:21:44:00:8a:2f:36:b1:e4:20:32:3f:b0:40:
4c:00:18:fa:7b:55:10:05:70:d9:2f:36:96:1d:ae:2b:8a:a0:
70:0a:5f:eb:3d:b8:30:d3:16:db:53:09:f8:c4:d3:8e:92:42:
b1:e7:ea:cc:a4:c3:e1:77:e9:36:69:af:97:cd:e6:43:1b:88:
53:b7:e1:ef:fe:f7:fe:b5:2e:74:5c:33:5c:ef:63:c4:a6:3d:
2b:56:70:4c:62:63:bf:ca:53:49:97:76:4d:6d:64:44:dd:0d:
22:1a:a8:46:b8:01:72:64:8f:f3:a9:5f:66:24:45:f2:04:a7:
36:86:e6:68:24:66:a7:30:8e:99:59:0c:b5:42:ef:33:e7:ab:
fe:43:be:44:b6:1f:d6:f3:52:13:a4:4b:6e:04:8b:12:b5:a2:
ed:23:d0:27:6b:1d:0c:6f:18:e9:41:1e:94:d3:12:15:7d:dd:
f1:d8:cb:67:74:36:9d:b5:3d:9a:7c:ae:bf:02:2f:41:0a:ae:
3c:98:f6:81:e2:99:45:6d:40:b1:ff:68:bd:20:3c:f7:94:7c:
47:1e:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:57 2025 by rpki-client