Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qq_gCysv1T7eQHGH1Q1pAehptIg.roa
File: qq_gCysv1T7eQHGH1Q1pAehptIg.roa (raw, json)
Hash identifier: 5vXZUnLk9wn0XSOLSoadxLaEn5cfsxItPj1PtX9Ujb8=
Subject key identifier: AA:AF:E0:0B:2B:2F:D5:3E:DE:40:71:87:D5:0D:69:01:E8:69:B4:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39FF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qq_gCysv1T7eQHGH1Q1pAehptIg.roa
Signing time: Fri 05 Apr 2024 21:52:29 +0000
ROA not before: Fri 05 Apr 2024 21:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14847 (0x39ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 21:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AAAFE00B2B2FD53EDE407187D50D6901E869B488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:65:91:3a:2b:96:91:46:12:96:97:67:c9:
13:2b:9f:8a:ce:ef:61:d3:48:f9:50:bd:d4:dd:c9:
bb:75:fe:7e:34:15:dd:a5:02:f8:48:3d:b0:70:96:
d0:cf:57:02:5a:31:d6:a0:8b:75:fd:fc:3e:34:34:
6f:40:2b:e7:fb:8b:5e:c6:05:93:41:00:82:0f:3c:
9c:33:62:98:e4:97:18:dc:65:34:a5:9e:92:10:ae:
93:02:98:7c:e2:42:94:3c:b9:b0:7f:f7:25:2a:3c:
be:48:21:16:7f:47:a7:31:f7:cb:28:7d:8d:ab:06:
53:e2:72:77:4c:8d:8d:f7:a2:14:9b:51:e6:51:0a:
d8:e6:9c:7a:6b:89:e1:30:fb:71:81:89:ae:87:09:
6d:98:55:40:fe:4d:bd:c7:2d:71:b7:b4:73:e8:26:
14:b0:1d:fe:d3:3b:d9:9a:13:a3:f3:f1:40:91:6e:
dd:90:08:01:6a:3f:93:9f:52:8f:7d:52:a4:26:00:
e0:e7:f6:fb:66:79:9f:64:50:76:c9:b8:81:05:b0:
84:af:8b:f7:83:3b:e9:91:94:0a:e8:c0:d1:ea:f0:
3e:6d:9a:6f:a2:ad:dd:5d:b9:53:54:4b:c1:a8:a5:
02:74:01:c5:08:78:f6:51:c8:cd:de:e1:ef:17:44:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:E0:0B:2B:2F:D5:3E:DE:40:71:87:D5:0D:69:01:E8:69:B4:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qq_gCysv1T7eQHGH1Q1pAehptIg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:ce:b4:ad:7a:c6:2b:a9:f5:a0:e8:8f:ad:45:3d:25:b6:a1:
41:1b:d3:f9:ef:5f:30:6f:bc:97:02:96:b1:5d:5d:58:df:72:
b0:26:d0:40:5a:41:7f:20:f0:14:19:ab:8b:e4:9a:d7:2c:a4:
84:d7:5d:7c:9f:0b:88:c7:4c:dc:4c:7d:dc:9b:84:ea:50:ce:
05:a4:f3:61:2d:17:11:be:7d:e3:cf:40:6c:c5:aa:bf:23:cf:
3f:48:08:ab:f1:32:9a:93:13:1b:1d:2b:3e:3c:0a:c5:fd:5b:
f4:79:0f:e6:b2:b4:48:c3:0f:d7:2f:04:e8:55:4e:e0:ae:dd:
c0:92:d3:a0:92:f1:38:90:56:16:b8:4f:f2:c8:e9:64:8e:3b:
0f:88:27:06:c8:1b:54:f5:0c:4f:47:da:19:7c:7c:26:4d:df:
9f:cc:75:5b:2f:f0:43:c1:f7:6a:88:c3:d6:19:34:a8:0a:d9:
9d:d7:b0:e3:16:57:aa:05:75:96:40:0d:81:3d:59:19:a7:0b:
eb:12:e3:29:b5:26:19:a5:26:3f:9d:0f:ea:70:71:61:6c:06:
c3:99:3e:25:78:f1:33:17:0c:31:3a:80:36:13:63:f1:ec:f8:
01:6f:77:65:15:2e:8c:7b:bf:2c:41:5b:2d:ed:37:d6:0e:b3:
53:ec:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:59 2025 by rpki-client