Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ygbD4thIJJYtOvH0ym8Xh-CdVNI.roa
File: ygbD4thIJJYtOvH0ym8Xh-CdVNI.roa (raw, json)
Hash identifier: R3rfBFiv2XbAE/J0kmAY2UdWBmRRK/jD3U3A7/PAP7s=
Subject key identifier: CA:06:C3:E2:D8:48:24:96:2D:3A:F1:F4:CA:6F:17:87:E0:9D:54:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5723
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ygbD4thIJJYtOvH0ym8Xh-CdVNI.roa
Signing time: Tue 14 May 2024 18:24:09 +0000
ROA not before: Tue 14 May 2024 18:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22307 (0x5723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 18:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CA06C3E2D84824962D3AF1F4CA6F1787E09D54D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:bc:6d:2e:25:ae:99:b5:4c:99:42:d6:35:
98:cb:db:9d:4a:d0:0e:29:0e:6c:a8:98:0f:63:38:
14:ee:5d:53:3f:ea:c5:b7:68:dc:7b:35:0c:2a:2c:
9c:0d:31:f2:af:48:8f:66:ad:54:a2:2a:e1:2b:c2:
5e:fe:4f:f1:7b:f7:5d:c5:8b:5d:75:0f:da:d1:10:
2b:df:dc:62:90:b3:82:9f:f3:de:fd:08:37:cb:59:
f9:c6:05:d0:f7:62:66:d2:5d:ed:a8:5e:96:4d:2f:
01:0b:59:1d:cf:08:bb:47:52:a6:8d:e4:29:0e:22:
ba:c2:33:ee:34:ed:8a:25:0f:6c:70:e9:4d:49:db:
75:90:46:7f:4a:df:0f:3a:dc:0d:8b:23:6c:24:a3:
d0:0c:54:dc:b9:ca:7b:39:21:bc:8f:a8:7d:40:ad:
06:98:6f:a7:21:5f:be:b9:4e:cc:cd:6b:f4:59:07:
49:a1:a6:1a:86:54:36:fb:73:d1:a8:05:1d:ee:2d:
5d:8f:67:9b:21:49:07:cf:f5:22:0f:a0:e4:d8:19:
e2:e7:6b:19:38:05:4c:e0:43:20:ad:63:c7:95:25:
a9:02:ca:17:2a:e6:51:cf:fe:f7:8b:5e:39:de:9d:
56:8f:a1:f8:7e:98:51:cf:26:e2:cd:16:57:67:4b:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:C3:E2:D8:48:24:96:2D:3A:F1:F4:CA:6F:17:87:E0:9D:54:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ygbD4thIJJYtOvH0ym8Xh-CdVNI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:e2:2e:66:9b:32:68:a2:ae:b9:79:45:e6:9e:23:a6:9e:88:
c1:4a:9c:63:a3:f4:a7:eb:88:1a:76:b0:8b:3f:38:27:5f:48:
47:af:5f:98:69:b5:2e:da:95:37:ad:d0:8f:8f:c4:fa:e5:a7:
7c:d5:cb:06:0f:7e:55:e1:27:e8:1b:3e:ec:0b:c6:15:21:b0:
cb:55:3c:9b:5c:c5:f5:cc:6d:83:41:25:f2:bb:93:16:4d:53:
b3:80:0d:79:92:26:bc:2f:2d:4d:95:46:e4:77:7a:e0:5f:96:
cf:ef:e7:80:c6:34:33:8e:09:7f:55:4b:4d:4c:16:88:c0:62:
c3:fe:dc:08:b4:2a:d9:4e:9b:65:5a:07:01:b8:ad:04:79:f5:
8b:79:9b:02:2a:2d:9d:cc:32:ea:83:6d:51:59:7d:2d:95:98:
85:2f:8e:5b:c6:93:5b:23:dd:c2:9a:c5:a5:f4:1f:7e:ed:52:
5f:f7:ae:b1:a7:da:59:f7:63:c8:ae:ec:6f:2b:49:ca:18:fb:
6d:6b:d7:e3:da:cd:86:31:3e:8d:e9:80:af:91:dc:9f:b5:8f:
eb:10:e9:3c:54:0e:4c:8a:5c:0f:b7:67:c4:51:be:d0:8e:97:
20:9e:45:e3:86:6f:62:e3:b5:70:df:73:7f:f0:23:b1:de:5e:
67:2c:79:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:33 2025 by rpki-client