Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lDx6GK8QQyOV0B3s5FGNLJlW90s.roa
File: lDx6GK8QQyOV0B3s5FGNLJlW90s.roa (raw, json)
Hash identifier: diX7JzmFNxT2lrxhP3erI/G4PXs98uCPZl6gPXGr0Bg=
Subject key identifier: 94:3C:7A:18:AF:10:43:23:95:D0:1D:EC:E4:51:8D:2C:99:56:F7:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 50DF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDx6GK8QQyOV0B3s5FGNLJlW90s.roa
Signing time: Mon 06 May 2024 09:53:50 +0000
ROA not before: Mon 06 May 2024 09:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20703 (0x50df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 6 09:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=943C7A18AF10432395D01DECE4518D2C9956F74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:ff:2e:6e:ea:1b:5d:d9:b8:b2:e4:1f:c3:
5c:43:b4:a5:57:03:8f:a2:53:a1:4a:2d:90:64:a6:
4b:bb:89:db:6c:b6:54:2c:e9:56:38:7c:05:d4:a2:
51:a8:6f:40:b2:92:f5:52:15:4b:16:26:fb:ba:8f:
bb:a7:db:d6:44:61:11:94:7c:27:95:70:e0:0e:ce:
52:6c:cb:48:f0:63:43:b2:be:19:18:f4:8c:73:92:
bc:77:53:df:34:fd:a5:65:9b:29:e5:5b:5a:76:bf:
3e:a1:b4:bb:24:4c:65:27:12:24:4b:25:f8:e6:44:
96:f2:d3:99:25:1a:40:a7:74:f1:4d:a3:db:36:49:
71:e0:3b:a3:73:b1:d2:1d:78:c9:94:6f:65:55:27:
87:04:8d:8e:d7:9e:07:ab:bf:15:3b:84:02:a8:f8:
22:7e:de:31:59:b5:85:4d:8c:32:fe:16:a9:03:4d:
b2:94:b4:9e:0d:80:84:b1:7f:b1:c6:d9:93:a1:39:
80:86:45:98:11:12:6a:54:14:b1:f8:bf:c8:af:89:
e8:ea:8c:8f:4a:af:5f:a5:20:15:c2:6e:ee:02:01:
26:42:22:de:9c:ef:57:a0:e3:76:1b:db:f0:f0:9a:
4d:73:34:65:dd:bd:a9:c3:60:e7:44:f4:54:dd:23:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3C:7A:18:AF:10:43:23:95:D0:1D:EC:E4:51:8D:2C:99:56:F7:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDx6GK8QQyOV0B3s5FGNLJlW90s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:ac:61:d8:27:93:8a:07:dc:e4:7b:19:9f:62:a3:8f:72:17:
d1:67:a3:79:74:10:6c:c5:08:2e:d5:08:c7:4b:c1:87:63:19:
a7:c3:36:d9:e0:4b:58:28:60:64:74:10:38:22:c2:d5:34:92:
bc:07:81:ef:6a:d8:3f:b7:55:0e:d7:6d:ad:da:11:90:f1:f4:
f4:f0:e1:8d:fa:90:01:f7:5c:7b:db:b6:c6:69:21:0e:0c:c9:
69:3d:66:65:ac:51:cd:0b:ac:5c:29:7c:14:8e:16:7a:6a:0f:
f9:aa:f0:74:dd:b8:cf:69:d1:83:80:87:0d:39:b4:ac:14:c7:
ec:b5:60:52:6e:98:a0:c3:ac:82:67:3c:d7:36:60:51:9d:3e:
87:60:a3:f6:11:07:33:88:7a:08:6f:07:3d:ba:cb:4b:7b:80:
9a:f7:26:99:86:f4:d9:dd:bf:03:10:dd:0f:2c:0f:72:18:bc:
2f:4e:40:ee:80:80:97:79:0e:47:60:d2:b0:45:35:79:cb:a4:
9a:64:d0:a9:ef:9b:bf:13:4b:fb:f3:4d:dc:74:aa:a5:12:35:
94:72:25:71:4c:36:27:af:e9:fd:7a:15:50:58:1e:e5:e4:f1:
e3:52:f0:c1:64:d7:54:f1:04:91:a2:91:d6:33:2a:29:2f:a3:
9b:84:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:03:03 2025 by rpki-client