Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vRExahiOpIB2bz6C2qcJOoorIhQ.roa
File: vRExahiOpIB2bz6C2qcJOoorIhQ.roa (raw, json)
Hash identifier: qg3UZ66RwOfZVFznP2VpxVYm3qajnkqDqlyC/GKygZE=
Subject key identifier: BD:11:31:6A:18:8E:A4:80:76:6F:3E:82:DA:A7:09:3A:8A:2B:22:14
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 364B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vRExahiOpIB2bz6C2qcJOoorIhQ.roa
Signing time: Sun 31 Mar 2024 23:22:16 +0000
ROA not before: Sun 31 Mar 2024 23:22:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13899 (0x364b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 23:22:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD11316A188EA480766F3E82DAA7093A8A2B2214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:08:d4:6d:6e:76:b8:8d:4b:41:15:6a:e5:
70:f8:36:4a:23:7d:ac:48:15:bc:04:02:50:dc:1e:
4b:15:8e:67:8f:93:09:3b:c2:f0:21:74:ba:e4:c9:
7a:8b:6f:13:32:34:48:e1:64:89:1c:43:dc:43:50:
e0:39:7e:4c:5b:33:45:b5:db:d5:a8:b1:61:60:7b:
d7:df:34:52:bf:68:78:50:b6:d7:0e:98:a2:b4:a0:
ca:db:bd:0e:a2:a7:c1:22:f4:fb:d4:ba:d2:47:3e:
1e:55:57:76:7b:74:bb:e1:94:d8:a0:71:2b:64:d7:
ff:75:d9:2a:d2:79:f1:2c:9f:11:73:d1:24:37:1b:
d8:dd:45:b5:b4:6a:d2:f8:5d:e3:91:5b:92:e1:67:
8f:98:7a:d8:91:57:a7:6b:48:a6:9a:0e:35:0c:6e:
24:bd:db:1f:bd:96:20:b8:e3:38:fd:97:f1:c1:9f:
50:a5:c4:37:92:59:d8:86:f9:95:8e:e9:0c:9e:ff:
b3:f0:1f:96:f1:4f:b0:e4:b3:61:16:8f:9d:c2:d4:
5c:26:7c:65:f4:a4:6b:33:24:e8:64:72:e0:0c:c6:
2c:d8:0d:66:64:74:1f:7f:f9:9b:af:9f:30:a4:82:
1e:cd:28:eb:61:20:e0:9f:1a:51:7f:8b:a0:73:ba:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:11:31:6A:18:8E:A4:80:76:6F:3E:82:DA:A7:09:3A:8A:2B:22:14
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vRExahiOpIB2bz6C2qcJOoorIhQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:4c:f4:3f:95:67:24:71:45:fa:dc:d1:ec:f2:49:9d:33:ac:
d7:49:e0:25:b5:05:fa:f9:ed:d8:79:dd:d3:40:b9:2d:23:c7:
d8:0b:5d:10:c6:f0:8b:2a:c0:8b:82:6d:03:f0:e1:e0:83:e8:
33:98:91:4f:22:9b:69:44:1e:43:56:8d:49:1c:0a:7f:8c:aa:
99:23:ce:ee:99:9a:55:03:fc:21:68:8f:03:5a:1c:97:96:c3:
59:32:3b:19:2e:8f:1d:ff:17:f9:6d:db:18:bb:33:f4:f2:4b:
f3:de:42:70:fb:67:a7:1b:e5:90:17:24:56:8a:e5:7d:bf:1f:
4f:f3:ec:d0:8f:98:72:84:e4:50:71:d4:bc:15:0e:64:c4:82:
bd:26:18:18:81:06:87:48:d7:93:10:b9:cd:9c:5c:1b:50:19:
33:52:12:94:48:c3:9e:f4:45:14:c1:d5:4f:50:be:95:f1:b4:
ef:bf:d1:84:98:ce:d5:8d:a9:c7:a8:56:00:af:e1:c3:64:dc:
d7:70:c9:46:8d:04:42:52:55:dd:28:70:91:02:8d:42:1b:7f:
e9:e0:05:37:6f:a1:01:34:44:be:e4:71:30:ea:1b:2a:49:f4:
95:94:00:a3:7e:c8:02:d3:a4:27:ac:28:ba:2f:41:c2:33:49:
b0:b0:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:12:15 2025 by rpki-client