Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dQJxxY6lSySqh827QweZKtQ9boc.roa
File: dQJxxY6lSySqh827QweZKtQ9boc.roa (raw, json)
Hash identifier: nG8Is4hiovTaK05C4E6SV+2IUoD25M7m8RJbVwc4W5o=
Subject key identifier: 75:02:71:C5:8E:A5:4B:24:AA:87:CD:BB:43:07:99:2A:D4:3D:6E:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 348F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dQJxxY6lSySqh827QweZKtQ9boc.roa
Signing time: Fri 29 Mar 2024 15:52:06 +0000
ROA not before: Fri 29 Mar 2024 15:52:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13455 (0x348f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 15:52:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=750271C58EA54B24AA87CDBB4307992AD43D6E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:6a:93:2d:4d:fe:a9:f8:58:c2:80:5e:a9:
9c:7e:f1:8e:e0:64:b6:d1:46:1d:7f:8d:26:7e:96:
e2:6d:49:46:34:1c:72:a1:1c:a6:58:12:99:3d:1b:
84:db:1b:6c:30:40:e2:67:d7:14:49:03:4d:f0:56:
51:2a:6d:b8:37:2b:d2:66:61:64:f8:38:e7:6c:a8:
c9:45:e6:ba:54:f0:89:fd:0f:82:14:eb:ca:40:9e:
93:39:93:e2:bd:8d:41:73:d9:1d:85:ae:60:eb:61:
2e:7f:10:22:2f:c5:6b:49:3f:81:70:2a:1a:86:db:
ba:c5:1a:dc:d0:01:6a:c3:91:12:3f:20:a2:60:e9:
fb:24:01:1a:76:81:5c:0f:d7:6c:aa:c1:cb:ce:89:
ce:94:93:70:2d:c9:7d:67:44:71:13:18:09:ee:1c:
54:02:22:c9:76:d0:46:ab:52:fe:71:21:9e:ef:af:
70:d2:94:62:05:4b:d8:bd:f8:62:df:aa:e5:d3:34:
d9:a6:e2:df:75:0f:af:4e:be:88:3b:e9:34:9b:c7:
5c:83:82:06:fc:6c:50:7a:6a:6e:f8:bd:a2:d4:a1:
04:25:c4:5a:aa:b3:89:ad:b0:01:89:5f:62:dd:36:
72:29:2f:ae:e5:ae:c7:ca:ef:21:34:80:10:00:9a:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:71:C5:8E:A5:4B:24:AA:87:CD:BB:43:07:99:2A:D4:3D:6E:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dQJxxY6lSySqh827QweZKtQ9boc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:66:49:08:91:7b:ca:ef:9d:13:37:b4:36:d3:ac:58:0e:65:
3b:4a:61:e6:9d:7b:36:d7:fc:8c:d6:ae:5e:9a:15:89:b7:d5:
42:a9:ec:7b:6b:23:e8:26:7e:a1:66:a2:e3:e7:29:fc:32:35:
86:75:3a:41:9f:64:12:8d:9b:a3:e7:7b:db:29:0f:05:2e:96:
6f:f9:f3:b3:8c:f3:d2:01:86:46:5b:e7:7c:14:4e:52:cd:42:
47:85:82:ed:cd:ce:ba:b9:7e:65:d8:45:ce:e4:cf:0d:94:e3:
0b:47:fe:7e:91:d9:eb:6d:1f:22:90:fc:cc:2f:8a:10:ad:aa:
48:e5:a3:44:f0:b2:13:79:ec:1e:ef:4c:b7:92:34:3b:30:80:
e5:18:e5:3f:a7:b5:31:10:21:30:22:58:10:45:2e:b4:f7:a0:
1d:21:e7:49:15:21:bd:ad:82:d3:5c:61:35:4e:5c:85:53:63:
ec:f4:23:2f:f1:d4:5a:7a:4a:a5:22:1b:2e:fa:03:9c:75:05:
09:af:97:a4:84:84:a3:43:88:14:20:8a:20:4d:78:44:47:17:
c4:54:ae:34:e2:ea:72:74:52:84:55:1b:57:1a:42:d4:7c:9f:
09:48:91:b4:a8:bc:79:be:a6:80:56:36:26:c4:ec:b0:19:68:
be:e9:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:17 2025 by rpki-client