Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qeE4nzhoZO7S25hW1a1UrQun0hk.roa
File: qeE4nzhoZO7S25hW1a1UrQun0hk.roa (raw, json)
Hash identifier: pU6TICQV8/m+hD7DY9/tpEPzmMbg2stOOSTP4l+7wDs=
Subject key identifier: A9:E1:38:9F:38:68:64:EE:D2:DB:98:56:D5:AD:54:AD:0B:A7:D2:19
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F1B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qeE4nzhoZO7S25hW1a1UrQun0hk.roa
Signing time: Sat 04 May 2024 01:23:54 +0000
ROA not before: Sat 04 May 2024 01:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20251 (0x4f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 01:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9E1389F386864EED2DB9856D5AD54AD0BA7D219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:e0:b7:1d:47:ca:4c:5c:59:13:ff:3e:9e:
34:db:b4:31:68:71:86:81:8d:07:cd:a0:0d:34:c5:
dd:6f:ec:0b:88:4d:20:dc:37:50:c2:71:cd:63:3c:
1b:5c:d6:b3:0a:9b:15:7e:a5:49:12:2b:0a:3b:07:
39:65:71:82:a0:1e:fb:cd:14:7d:d1:29:8f:41:f0:
05:5c:1c:61:b6:4e:25:47:11:ff:79:d3:7f:23:bd:
f4:7b:7b:8e:c5:4d:fa:4d:13:8b:6a:8c:2c:04:fe:
b7:f9:a8:78:3d:c6:46:f8:5b:53:1a:c8:02:e1:12:
89:b9:e7:38:f7:18:9b:9c:05:22:b3:2c:d9:e7:74:
47:da:71:d4:a9:d8:1f:7a:ce:0c:41:b7:03:58:05:
54:9e:18:b8:bb:7b:93:12:7c:a2:ee:06:1d:e5:95:
cb:90:49:33:64:54:72:f8:0a:e1:e9:80:e2:ed:ea:
59:e8:46:91:33:16:a6:85:83:13:5a:05:c6:66:7d:
91:96:56:5d:60:0e:0d:32:28:9c:47:9a:8d:c3:32:
e9:bc:63:28:c5:a6:4a:a6:d3:67:94:f0:cf:19:5a:
8d:5e:39:ab:b3:ab:01:db:8b:13:50:3a:82:6a:86:
ca:47:9e:7e:bd:85:78:10:70:1b:3e:e1:0e:ab:9d:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:38:9F:38:68:64:EE:D2:DB:98:56:D5:AD:54:AD:0B:A7:D2:19
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qeE4nzhoZO7S25hW1a1UrQun0hk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
49:7c:68:04:3d:9e:16:d7:db:8b:9a:0e:98:bf:1f:d3:52:57:
1b:87:64:82:92:b7:bc:c5:18:9e:c1:3f:f2:ac:59:b5:65:4f:
92:66:d0:0b:bf:57:9a:77:aa:e4:61:87:6e:f7:00:d5:20:d8:
3d:58:8a:91:44:aa:fa:29:5d:74:4e:88:aa:2b:44:54:38:1e:
a1:d3:75:0e:37:b9:5f:bc:43:b4:da:d7:86:a0:0d:80:b7:b3:
df:c1:97:2c:64:ad:d1:a7:c2:54:c8:0d:08:0a:83:77:a7:68:
85:02:16:d3:dd:81:67:f1:d3:54:e8:fc:96:e8:6e:fa:55:ef:
de:60:48:36:ca:a9:1d:ea:ff:a9:6f:2b:3b:f4:d3:57:bb:ea:
17:93:5c:9c:47:9b:96:4c:b2:02:5c:83:0a:63:7e:bf:ef:f0:
8f:dc:9c:be:e3:cb:a0:34:9d:a9:72:0f:90:58:cb:b0:87:f6:
cb:2e:66:2a:84:c9:68:a0:86:8f:0f:ab:78:d4:fe:ad:29:01:
a6:2f:89:06:64:4d:2a:b7:3e:ed:7c:af:9e:d6:13:58:37:a2:
04:0a:a1:1e:db:e8:d9:63:e7:bd:79:86:01:6f:71:12:69:cf:
e5:f4:93:c0:8b:06:63:4a:a8:fe:2e:85:a0:2d:aa:c6:84:12:
36:a0:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:56 2025 by rpki-client