Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8OKY0jFBBsA2qrI0oofATx7EbP8.roa
File: 8OKY0jFBBsA2qrI0oofATx7EbP8.roa (raw, json)
Hash identifier: hXCoaOM6+8xBVrMdEcm7r3exLINT27sreaVQOJOOIvk=
Subject key identifier: F0:E2:98:D2:31:41:06:C0:36:AA:B2:34:A2:87:C0:4F:1E:C4:6C:FF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 344B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8OKY0jFBBsA2qrI0oofATx7EbP8.roa
Signing time: Fri 29 Mar 2024 07:22:13 +0000
ROA not before: Fri 29 Mar 2024 07:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13387 (0x344b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 07:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F0E298D2314106C036AAB234A287C04F1EC46CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:52:df:21:c2:88:3e:3f:ea:3c:a1:cc:1a:
5b:9e:59:75:ee:57:4e:ca:57:b2:8f:f3:88:b3:3d:
5c:fe:a5:ef:c6:62:6d:e3:c8:70:5c:01:51:34:fd:
1b:94:66:18:e3:f9:ec:18:0e:b6:92:92:d2:e2:32:
ed:fa:36:ed:38:b5:fb:9e:ba:98:19:f6:8c:df:d6:
89:30:e0:ea:be:d7:7e:cf:ac:62:50:59:41:b0:38:
87:46:ee:09:4f:54:29:27:82:fa:51:71:6c:96:66:
91:b4:28:bc:69:dc:97:47:1c:de:0e:58:4a:0e:62:
7a:cd:55:c1:ea:40:a0:83:a1:9f:99:69:1c:c6:86:
c6:2c:cc:84:f4:db:da:37:e6:8c:2c:15:1d:b7:0c:
a5:ba:8f:09:60:b1:05:b8:8e:c8:44:95:57:14:d4:
d0:08:60:c0:5e:ba:f9:7c:dd:35:12:84:c1:a1:1c:
bc:c3:9a:c1:bb:8e:e9:50:74:66:91:5b:4d:9c:b7:
0c:31:ee:cd:26:90:56:3b:b0:ce:85:c1:0b:97:e6:
d4:e9:de:66:2a:07:83:5e:86:90:42:e4:28:94:b6:
13:fc:0a:43:a0:5c:43:0d:0f:c1:4e:da:16:25:d4:
44:24:09:11:f4:46:39:97:4e:5f:9d:b1:91:d2:9c:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:98:D2:31:41:06:C0:36:AA:B2:34:A2:87:C0:4F:1E:C4:6C:FF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8OKY0jFBBsA2qrI0oofATx7EbP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:d4:07:ca:db:c8:e9:42:34:03:68:60:66:52:45:8c:d5:5a:
84:32:ca:50:a5:58:70:f6:63:14:ba:6a:71:1f:aa:f9:58:9f:
d1:a5:3f:ad:24:d4:8f:0c:92:55:17:5f:1b:ac:2c:8d:04:57:
62:cf:ce:cb:f5:47:b0:9d:ef:b8:23:8d:37:db:17:70:0c:b0:
68:38:62:e7:2e:c0:86:fc:2f:96:d7:42:fa:39:52:2e:46:f4:
a4:38:71:f4:05:09:ea:07:29:ce:19:a5:35:61:67:42:bc:40:
93:18:4d:4c:17:29:a7:52:5c:48:ac:65:63:ed:8a:34:4f:32:
0b:81:d6:99:1f:c3:14:08:3f:88:6c:0f:de:4f:0d:25:2b:6f:
00:d6:df:94:d9:b5:10:b0:16:af:5c:42:a7:bd:0b:12:d3:cf:
5e:7b:ba:11:70:83:e3:57:12:83:bc:e4:e6:f0:de:53:69:c3:
87:11:d1:0d:61:e9:c2:c7:f5:84:e5:13:29:85:5e:22:7f:66:
89:b5:d8:b8:01:b1:f1:e6:e8:b0:19:d3:fc:64:39:a2:bc:a0:
f9:74:c8:36:34:78:db:11:c1:e2:e2:e1:14:a1:17:f3:f0:64:
d3:91:31:e3:20:85:b3:3d:cc:06:14:47:ec:df:2f:9c:73:cb:
8f:fd:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:31:34 2025 by rpki-client