Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/w2AnuPYIjwLHaukn6SAedE2sUWo.roa
File: w2AnuPYIjwLHaukn6SAedE2sUWo.roa (raw, json)
Hash identifier: VVtNmNv4bxZaJnkUZpzW3mkJImMj67g2nwnYaaexfqA=
Subject key identifier: C3:60:27:B8:F6:08:8F:02:C7:6A:E9:27:E9:20:1E:74:4D:AC:51:6A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 55A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w2AnuPYIjwLHaukn6SAedE2sUWo.roa
Signing time: Sun 12 May 2024 18:24:25 +0000
ROA not before: Sun 12 May 2024 18:24:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21923 (0x55a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 18:24:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C36027B8F6088F02C76AE927E9201E744DAC516A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:62:da:70:5b:7c:c7:28:ad:b4:4a:3a:88:
91:54:57:a6:2c:39:1d:32:88:84:3d:4a:b8:96:80:
8b:de:df:f4:9b:9a:4f:1d:8b:e5:df:c4:e9:00:1c:
13:34:be:84:80:cd:e7:2d:34:e9:03:74:61:59:c4:
3d:85:f0:81:21:cd:56:56:80:da:1a:1f:22:e7:40:
eb:a3:f7:3c:bf:17:e8:f0:71:d5:32:2e:6d:47:ed:
b9:99:bb:93:f8:9b:4b:3d:2c:38:01:45:93:8e:9f:
77:4b:64:83:3e:a7:61:02:99:0e:ce:5b:2d:47:a6:
6c:0b:ef:95:75:d3:2a:7d:79:43:a0:a6:f5:03:99:
4f:3d:1f:5a:f7:36:7e:31:9e:a8:00:d7:6f:2c:14:
e2:90:3e:43:08:ea:00:ad:30:59:ce:5e:19:e9:ce:
cb:b9:52:93:7c:4c:8b:e6:06:2e:6a:59:58:82:a5:
5c:1b:88:c4:a9:d2:d5:c9:09:98:09:34:e6:a8:76:
7c:42:6f:90:53:a1:d2:e0:8d:75:9c:e9:87:77:01:
c1:ee:6f:2e:f9:22:a1:e9:6a:9b:59:a1:7e:ef:bc:
07:63:7d:99:91:93:89:1d:f9:37:0b:94:5f:07:b1:
35:33:36:a7:c2:2c:ff:71:d5:5d:2d:24:00:b8:2f:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:27:B8:F6:08:8F:02:C7:6A:E9:27:E9:20:1E:74:4D:AC:51:6A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/w2AnuPYIjwLHaukn6SAedE2sUWo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
76:45:d2:52:48:23:81:5e:7d:0c:cc:68:d3:33:d0:1c:ca:60:
ca:81:76:69:56:04:47:26:6a:f7:f0:d4:f1:25:d0:c5:a4:b5:
ae:70:3f:c0:9f:cd:62:2e:14:d8:94:ed:19:b8:ae:9e:80:64:
b9:a1:50:c7:dc:28:a0:6e:7a:c3:d8:10:42:8c:cc:d8:7c:b8:
42:68:f5:ee:92:c7:87:7f:72:95:58:b3:2d:83:29:83:f8:52:
73:e6:09:51:3e:df:0a:50:4a:4f:5c:eb:93:2d:92:a7:20:62:
70:c7:bf:80:7c:ea:bc:87:92:21:6f:2b:54:2a:ad:37:de:f7:
d9:64:60:bc:3a:8c:c5:03:d2:c8:f0:44:e4:3d:d5:7f:91:1f:
c2:d1:f3:48:26:7e:94:11:a8:d8:fc:5a:2a:8b:92:e1:b7:2b:
2a:03:47:7f:78:af:c9:3d:a3:3e:f4:6e:3d:ea:a3:05:26:a4:
4f:26:51:6f:78:38:33:e8:7a:57:3c:a3:ee:f2:c4:da:df:83:
7c:ec:e4:a4:d2:7b:4b:f7:33:bd:5c:16:a3:41:b4:1a:71:e7:
37:0a:07:51:0b:79:2a:72:a7:68:e3:d3:72:9a:2c:c5:41:f7:
ae:af:1e:dc:df:c7:de:0d:8d:ec:a8:5a:83:d5:28:2f:24:f0:
26:40:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:17 2025 by rpki-client