Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qKc4VwjBxF57MwQqcfuHm4jgFXg.roa
File: qKc4VwjBxF57MwQqcfuHm4jgFXg.roa (raw, json)
Hash identifier: I0kd/CWSPrLJmbkIN1Gy4Aod4AinU/L8+2S4zx5tKTA=
Subject key identifier: A8:A7:38:57:08:C1:C4:5E:7B:33:04:2A:71:FB:87:9B:88:E0:15:78
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4277
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qKc4VwjBxF57MwQqcfuHm4jgFXg.roa
Signing time: Wed 17 Apr 2024 04:52:59 +0000
ROA not before: Wed 17 Apr 2024 04:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17015 (0x4277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 04:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A8A7385708C1C45E7B33042A71FB879B88E01578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:b1:9f:0c:91:1b:56:49:f2:4a:48:62:4c:
f4:2e:c4:a5:d3:72:b0:9e:14:e1:3f:b2:e1:c7:e8:
b3:f2:3f:ff:71:d7:ec:62:59:bb:f8:32:20:ba:1c:
7e:07:9b:88:f1:25:b7:5a:8d:ed:14:19:d9:2f:c1:
fc:76:98:af:da:ff:63:4a:06:a6:6d:c6:2a:dc:b7:
be:ea:c8:ee:cc:66:ea:57:51:78:1b:cb:50:00:f5:
9a:f2:52:01:f1:f9:02:27:ae:86:72:f0:af:13:b6:
cc:43:d0:8a:1d:4b:1c:29:5a:40:89:6e:79:b1:b5:
d7:e0:c2:20:ad:ff:20:64:f1:cf:08:ff:82:2f:72:
96:52:7b:ff:b3:91:44:62:08:26:96:56:c4:2f:af:
bd:c9:91:b3:86:24:83:c0:39:32:53:80:7e:b4:67:
7a:85:7f:26:da:d9:a1:13:c2:1d:a8:a2:e2:94:9f:
68:21:79:ef:77:30:23:f2:10:f5:27:46:b6:75:44:
70:e7:e0:4a:ed:32:e9:c9:52:12:ce:d0:8f:21:06:
e6:5a:47:75:93:81:9a:52:77:53:68:08:17:3d:a3:
88:3e:d3:e7:2c:3a:e4:ba:c6:52:13:d5:47:01:1e:
ae:48:cf:db:cc:d5:32:b1:b9:c1:a5:14:0b:9e:56:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:38:57:08:C1:C4:5E:7B:33:04:2A:71:FB:87:9B:88:E0:15:78
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qKc4VwjBxF57MwQqcfuHm4jgFXg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:6c:99:4e:74:7d:8e:6f:7c:fc:fc:90:93:82:2f:35:15:7b:
d1:46:74:c7:de:5b:f7:65:d3:47:5c:94:6a:9a:73:d6:84:d8:
23:da:59:f7:4c:7d:62:ab:83:4c:d3:85:cf:57:12:8d:b5:0a:
b7:a5:94:c5:69:99:fb:d7:73:2a:2e:5a:fd:bc:45:82:bf:c0:
19:5f:de:c2:2a:d0:b2:70:81:6e:71:6d:59:a2:1c:d2:80:46:
25:a9:43:bf:fc:9e:fb:84:f4:92:08:54:84:9c:fd:8e:03:55:
e0:7b:ea:b6:3b:59:f5:8b:ec:47:c8:e4:4c:25:f7:76:be:9a:
7f:00:93:12:91:cd:4b:09:95:15:52:ee:c2:81:28:8e:bf:6c:
ca:07:25:75:40:56:29:6b:ee:79:d6:5a:0c:d7:6d:e2:7e:72:
5d:41:71:da:01:c6:73:3c:0c:03:5c:90:86:ed:b5:ba:79:0f:
84:84:39:77:da:9d:82:4c:74:d7:07:7c:9b:ec:22:c0:86:81:
ca:b6:52:91:d1:c0:69:7f:9c:24:75:e4:c0:b5:0e:74:db:45:
eb:0a:d6:07:72:b1:6a:51:cb:c0:07:6b:ba:da:61:c1:56:f4:
59:92:20:9c:ce:97:2c:b4:a7:1d:ee:d2:b7:c9:31:67:8a:d7:
65:f5:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:51 2025 by rpki-client