Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wtC6qqLHhdWTYHa-f3Uj6ozcWMM.roa
File: wtC6qqLHhdWTYHa-f3Uj6ozcWMM.roa (raw, json)
Hash identifier: UaGhdDi6q1Ph9VVzJjSCCn+E2pePjWtKEvVrHuF1JEE=
Subject key identifier: C2:D0:BA:AA:A2:C7:85:D5:93:60:76:BE:7F:75:23:EA:8C:DC:58:C3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43D3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wtC6qqLHhdWTYHa-f3Uj6ozcWMM.roa
Signing time: Fri 19 Apr 2024 00:23:01 +0000
ROA not before: Fri 19 Apr 2024 00:23:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17363 (0x43d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 00:23:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C2D0BAAAA2C785D5936076BE7F7523EA8CDC58C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:1d:1d:8d:1b:83:4d:71:fb:ed:b4:8d:8d:
94:a2:48:64:75:6f:88:57:5d:60:83:2c:72:66:63:
26:b1:8d:e2:3e:b0:a9:08:7f:14:ca:2c:d1:1b:14:
d3:c5:c6:6f:51:b8:c9:42:cf:10:c5:85:ae:e5:61:
cd:99:40:a2:c9:11:bd:d7:a5:df:b6:a0:96:4f:56:
2d:e9:a2:ed:5a:9b:29:82:69:2b:e3:66:8b:f6:29:
31:16:2c:03:cf:bb:5f:23:a6:cf:7a:02:c6:1d:96:
94:37:9f:ac:f9:ce:89:69:93:cf:a5:d5:2a:d5:a2:
8d:af:7a:0e:73:6f:af:93:6f:69:64:97:79:2f:16:
2c:1d:89:41:be:d0:df:28:2e:d6:2f:ae:c1:d4:67:
65:22:8c:83:90:36:71:01:c7:2d:8e:fa:41:ee:3c:
f1:8e:fc:7e:39:89:9b:65:66:fa:24:0e:4e:1d:55:
c8:5e:b6:66:af:a5:d6:85:66:0d:a1:53:aa:60:8f:
8d:2d:11:a2:ba:b3:f9:a3:da:20:76:96:f5:d1:88:
43:63:cd:35:c1:45:f9:47:73:ac:56:5c:8b:de:57:
53:7c:d1:50:70:35:19:72:3b:a0:98:eb:54:79:7f:
e1:7a:4f:d1:e3:be:f7:db:62:3d:c7:f5:a0:6e:3e:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:BA:AA:A2:C7:85:D5:93:60:76:BE:7F:75:23:EA:8C:DC:58:C3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wtC6qqLHhdWTYHa-f3Uj6ozcWMM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:7f:21:4e:e8:0b:47:25:b6:de:92:1c:13:83:06:8d:e2:8f:
4d:94:3c:23:ac:94:e7:3d:ed:8b:4d:1c:32:26:e6:13:56:f1:
3f:70:e7:51:77:35:1c:79:e1:3a:c7:88:0b:7b:2b:c1:e2:e6:
66:85:76:60:04:da:9d:63:7f:11:31:2e:51:47:f5:fd:6d:16:
d2:18:fc:ea:a0:49:5f:e4:78:ab:d9:56:b8:48:86:f4:6a:86:
29:59:48:d5:6e:75:6c:72:b5:2e:72:fb:e4:65:b2:c9:8b:e7:
39:c8:e3:61:54:76:be:d6:37:74:fc:d5:d1:ba:5e:d6:17:72:
57:0c:ca:b9:7e:39:ef:21:d3:26:ff:91:bd:17:ef:4a:6d:64:
87:e9:db:9d:e3:67:15:0c:54:ac:a9:7f:46:1f:64:96:58:5b:
f3:26:d3:ea:6a:1e:85:e4:16:24:20:ca:19:8f:39:1f:bd:5c:
3d:2a:8e:bc:21:4b:f2:cb:a9:1f:97:14:29:0f:44:3b:c0:1d:
56:35:55:48:27:33:48:db:86:68:aa:e6:20:c3:b1:39:98:be:
8f:52:c3:5b:04:e6:8c:f7:5b:c3:f8:4a:72:cc:0e:de:20:f6:
a3:ee:31:12:11:40:db:1a:8a:60:fb:c1:96:7a:d2:9c:1b:8f:
04:de:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:18 2025 by rpki-client