Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/tGaH75Q_GCXD6JoeJlMDebcBMLc.roa
File: tGaH75Q_GCXD6JoeJlMDebcBMLc.roa (raw, json)
Hash identifier: SLJErM1CFFdJlEJLqdIegAfEMkaszRMHgiOFksom1TQ=
Subject key identifier: B4:66:87:EF:94:3F:18:25:C3:E8:9A:1E:26:53:03:79:B7:01:30:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A43
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tGaH75Q_GCXD6JoeJlMDebcBMLc.roa
Signing time: Sat 27 Apr 2024 14:23:34 +0000
ROA not before: Sat 27 Apr 2024 14:23:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19011 (0x4a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 14:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B46687EF943F1825C3E89A1E26530379B70130B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:2d:04:8f:6a:2b:ca:af:78:27:07:b6:2c:
0f:60:04:76:e5:7f:05:7d:79:56:93:8c:23:a1:27:
5e:6d:06:25:92:15:0c:ac:8a:09:a8:b7:31:9a:93:
88:56:89:9e:14:04:62:01:2a:8a:59:05:a8:b0:1b:
ae:c4:d6:3f:73:b1:45:3b:29:f4:cb:33:b9:ed:7a:
aa:62:2c:ca:3f:28:75:7e:05:02:bb:29:79:a6:9e:
58:9d:bf:26:0a:81:91:cf:cb:ad:f8:e5:eb:08:21:
fe:84:cf:ed:27:53:a7:84:49:94:43:5b:14:a5:e8:
89:d0:84:ef:d6:1e:5b:d3:b0:2a:65:0f:1c:b2:0b:
6c:db:a0:88:ba:6a:7a:a9:28:7e:dd:6e:6c:67:ed:
61:ba:eb:42:4e:92:b6:8a:b4:57:fa:fc:b8:70:45:
9f:da:3e:7e:f0:f6:9a:24:6e:9e:52:3a:24:c2:89:
bd:3d:fb:8c:90:fe:b2:1f:bf:96:b2:a8:fb:fe:a2:
86:8c:48:d4:e4:70:77:7a:9a:af:bb:22:82:db:5c:
78:d7:5f:75:e3:7f:3e:aa:34:77:47:f1:3b:64:00:
f7:ba:ce:12:44:04:c2:22:d4:21:47:13:e3:dd:0a:
2a:03:aa:b5:78:74:b4:6c:f2:02:99:3c:c1:2d:4f:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:87:EF:94:3F:18:25:C3:E8:9A:1E:26:53:03:79:B7:01:30:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/tGaH75Q_GCXD6JoeJlMDebcBMLc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:cc:41:07:24:7c:6c:cf:b0:24:12:d4:96:59:6d:1c:32:72:
e2:3e:e2:0d:a4:a9:82:52:05:a1:7c:43:1b:19:48:c1:b8:45:
45:1a:bd:e9:80:20:4f:8e:86:fc:ff:b6:63:91:b1:a8:34:5b:
bb:2a:b4:8e:fc:3c:45:1e:de:7b:3f:3b:cb:9b:40:6d:04:ab:
6e:0d:70:14:28:79:88:43:21:ea:91:d6:65:27:60:04:0c:96:
06:12:c6:1e:0c:ce:2c:d4:82:da:16:2f:cc:5c:1d:56:0f:3a:
fc:93:45:51:2b:64:e0:2d:59:ca:28:35:d6:2f:73:8d:b2:2e:
05:8d:12:6c:07:b0:e1:08:15:1f:f8:11:da:a5:16:1f:6d:2f:
fc:db:4a:37:d1:b7:2d:20:11:59:d7:49:96:42:52:ea:3c:57:
bc:39:a0:d2:b6:1a:1c:28:eb:47:ac:28:78:c1:4e:fa:2e:59:
cc:ac:8a:9e:aa:94:03:6e:76:42:cb:15:06:26:99:42:9e:8c:
73:88:c6:76:c1:70:fe:f4:cd:a3:be:54:c6:6f:82:2b:ca:97:
83:dc:98:c7:ab:5c:70:9b:94:ed:4f:35:ce:a8:58:be:f7:d1:
2b:5b:f2:ea:26:a2:9a:c7:1a:fc:2d:f1:7a:87:d2:aa:bc:94:
59:56:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:55 2025 by rpki-client