Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ri10JaoaDjg96p3IbxbAwP2qnwc.roa
File: ri10JaoaDjg96p3IbxbAwP2qnwc.roa (raw, json)
Hash identifier: Xyh/Num3xOrkUCCNzRdYaiVAMJzIypiCzW6VyEhJr3E=
Subject key identifier: AE:2D:74:25:AA:1A:0E:38:3D:EA:9D:C8:6F:16:C0:C0:FD:AA:9F:07
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BEB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ri10JaoaDjg96p3IbxbAwP2qnwc.roa
Signing time: Mon 08 Apr 2024 11:22:34 +0000
ROA not before: Mon 08 Apr 2024 11:22:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15339 (0x3beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 11:22:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AE2D7425AA1A0E383DEA9DC86F16C0C0FDAA9F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:37:4a:1d:4e:22:5b:40:1d:22:fa:fd:14:
69:b4:6e:07:e3:d6:e0:c7:aa:6c:ad:a4:b1:83:92:
10:6f:0e:d3:2b:52:35:55:4c:38:8a:bc:ff:7c:82:
5b:44:e4:39:51:f2:c7:87:c2:c4:ed:a8:c1:72:35:
8f:78:9f:7c:88:27:25:59:88:b1:e9:19:32:da:dd:
68:3e:25:06:1d:cb:0c:30:ad:3f:0a:64:cc:e3:64:
d3:6b:97:22:b3:01:3a:c0:70:f3:29:fe:34:cb:ce:
da:b8:38:e5:67:ce:9b:1c:dd:27:ea:b5:98:74:f1:
e2:0c:bb:35:d2:f8:59:af:0f:67:7e:59:2a:27:25:
7b:f9:cc:97:b5:38:15:c3:7a:81:03:49:0d:40:35:
10:84:24:7b:48:73:88:6c:1f:6d:68:7a:5e:92:6a:
c0:7e:9b:4a:60:65:e5:b7:0f:91:c7:ca:d1:25:0c:
22:69:35:bd:ad:a0:f1:66:7e:5f:22:ac:62:d0:28:
a5:32:03:65:d4:82:d1:b0:c6:26:9f:b7:ca:18:cb:
81:16:4a:36:3e:92:b9:0c:60:57:74:95:fa:35:a4:
f9:6e:25:cf:74:3c:a6:eb:e7:6f:e7:22:41:ba:ec:
59:15:e6:bc:ff:2a:bb:5f:29:ce:45:60:4d:c5:68:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:74:25:AA:1A:0E:38:3D:EA:9D:C8:6F:16:C0:C0:FD:AA:9F:07
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ri10JaoaDjg96p3IbxbAwP2qnwc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:d9:fe:88:b1:5a:68:8a:86:ac:85:2d:fa:4e:e0:32:04:67:
f1:82:47:40:be:cb:79:01:09:b0:a0:95:6f:4b:91:e6:18:09:
f6:50:c4:f5:df:1e:a1:bf:c1:67:3a:45:b5:e7:f6:e0:b7:93:
6e:90:b8:4c:7b:81:fd:21:b9:70:11:31:ff:17:b7:27:46:42:
f5:45:9f:b9:1c:47:44:35:a3:17:a2:9d:8a:8c:97:27:b7:c0:
6c:8a:70:87:46:e2:7b:68:a2:39:ac:aa:de:b1:cf:e1:9b:8a:
9c:cf:4b:2f:9e:10:9a:7e:cc:0e:25:b8:36:a1:49:ef:ad:af:
8b:10:dd:6c:ec:29:2c:b0:dd:e4:b6:8e:40:ca:fd:5c:71:28:
67:05:1a:13:16:2d:87:0c:12:c7:65:ae:e8:6e:aa:9f:aa:14:
44:6a:bc:fe:b2:0a:5f:1a:02:11:32:af:d9:b5:ca:0c:f3:20:
24:b5:59:41:35:86:f8:f0:a6:eb:0b:90:89:62:f9:79:16:45:
3d:11:8b:70:fb:b8:5a:e2:b0:fe:7a:9c:f4:ba:42:59:cc:28:
ad:b7:48:74:eb:fb:81:74:2d:e5:f1:21:7a:34:c6:08:ee:4a:
d3:6f:8d:9b:ff:4a:b3:36:13:b8:1b:6c:7c:41:6f:ec:1a:a2:
35:b2:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:55 2025 by rpki-client