Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vtuV7TTQxEVUrnOnMFYfQ946nFc.roa
File: vtuV7TTQxEVUrnOnMFYfQ946nFc.roa (raw, json)
Hash identifier: XFHLJ9z8Dd1ifgJUS5lJkfsWiaWyu/nhTfoptsznjfo=
Subject key identifier: BE:DB:95:ED:34:D0:C4:45:54:AE:73:A7:30:56:1F:43:DE:3A:9C:57
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4173
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vtuV7TTQxEVUrnOnMFYfQ946nFc.roa
Signing time: Mon 15 Apr 2024 20:23:02 +0000
ROA not before: Mon 15 Apr 2024 20:23:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16755 (0x4173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 20:23:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BEDB95ED34D0C44554AE73A730561F43DE3A9C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:90:8d:92:b3:87:d5:60:ab:cd:03:50:c9:
25:00:69:db:b9:44:78:f9:92:08:1b:34:e1:72:9b:
8d:fe:15:84:0b:15:6c:2a:55:f8:77:c5:5c:1d:72:
78:ae:23:b4:b3:6b:63:7e:df:77:6f:33:b8:33:77:
ba:fe:da:00:74:8f:4e:2c:8c:7b:d2:dd:81:4d:da:
3f:0f:e6:96:e9:9a:55:a6:d6:38:df:7d:47:13:0c:
9f:e9:c2:ac:86:17:29:56:fd:04:5f:31:0a:37:6f:
0d:d4:cd:69:f2:39:6a:f2:59:c2:19:50:ea:ed:1a:
9a:fd:d0:10:66:30:b8:32:27:f1:29:51:69:f3:5f:
75:34:35:76:c2:d3:33:0a:6b:e1:9f:78:5b:19:15:
6f:50:a7:4f:3e:68:6e:a2:96:38:31:c5:0e:98:86:
3a:25:fc:9a:58:92:07:65:f1:6e:55:d9:62:c4:d8:
0b:10:38:bf:da:44:aa:4c:50:c8:62:b1:97:18:aa:
c5:9f:7f:e5:ee:a6:58:b7:8b:15:09:57:0e:e5:21:
92:ea:4b:35:29:8f:ae:ea:b9:d2:d9:af:53:2c:df:
04:27:8d:32:0e:96:5f:90:19:22:73:c2:51:5d:c1:
13:0d:63:9b:86:33:2f:ea:0a:fe:1c:4b:0d:8b:d5:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:95:ED:34:D0:C4:45:54:AE:73:A7:30:56:1F:43:DE:3A:9C:57
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vtuV7TTQxEVUrnOnMFYfQ946nFc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:3c:5f:61:8c:3d:27:87:60:4a:e7:9e:ae:ef:17:d4:61:d3:
4d:a9:db:fe:6b:2c:93:36:ad:d0:b4:97:06:63:e1:37:d2:72:
26:75:67:d7:59:0c:b3:19:8e:02:0e:ce:83:9e:23:11:65:c0:
cc:44:4d:dd:3b:eb:d2:40:98:1d:9f:45:71:9a:7f:68:1f:01:
f5:d1:36:8e:6b:92:43:9e:e5:9e:7a:44:ea:9e:b4:a4:a5:6f:
01:e0:2b:29:68:e3:0a:44:82:af:26:17:5e:f9:10:66:50:77:
c4:f2:d0:23:ce:9d:14:23:fe:3c:24:96:77:19:e1:e2:68:c4:
e9:d6:de:2d:0c:88:77:24:40:6e:9e:eb:ba:d9:8c:88:18:1a:
39:ab:26:25:f4:71:8e:5c:ef:ac:50:c8:75:35:ec:fa:8d:4d:
5d:26:0f:46:80:9d:6c:78:95:94:95:67:85:1a:08:8c:e2:af:
0d:68:57:c6:eb:65:72:c9:07:9f:9f:39:fe:10:7d:96:6c:26:
5e:34:59:63:88:99:5f:bb:cc:41:aa:6f:1f:fd:58:00:1f:cd:
81:5b:88:4c:94:f0:c8:3a:65:c6:b0:39:45:8f:4f:7b:36:59:
29:86:d2:6c:dd:d9:65:ab:f6:52:1b:8b:ff:2a:5f:ad:06:08:
fa:76:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:20 2025 by rpki-client