Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/4N_M7F7Mmx4xfebyAcR2dkInEG8.roa
File: 4N_M7F7Mmx4xfebyAcR2dkInEG8.roa (raw, json)
Hash identifier: JbCnt1yM4t2CQS1oVsn/Bi7XGwonwt5kROelS4Sj8YE=
Subject key identifier: E0:DF:CC:EC:5E:CC:9B:1E:31:7D:E6:F2:01:C4:76:76:42:27:10:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5817
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4N_M7F7Mmx4xfebyAcR2dkInEG8.roa
Signing time: Thu 16 May 2024 00:54:14 +0000
ROA not before: Thu 16 May 2024 00:54:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22551 (0x5817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 16 00:54:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E0DFCCEC5ECC9B1E317DE6F201C476764227106F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:11:f0:14:74:ec:89:d1:20:f5:9c:35:56:
d0:b8:7a:87:39:31:dc:5f:bc:94:89:a8:69:ab:38:
fc:4b:85:ed:80:1f:ae:0e:61:32:0b:69:16:d3:d1:
82:9a:61:db:d4:5b:33:47:ac:40:94:b6:db:0f:d2:
e3:80:4e:51:22:b2:53:71:d3:b5:8d:0a:5b:ee:bc:
55:87:da:6a:18:2e:ec:e2:b3:93:e3:71:ef:61:2b:
58:01:40:e5:58:9e:8b:ca:6a:07:fa:2b:b8:b3:c1:
6c:91:83:c9:71:f1:26:3d:1b:0f:1b:88:b7:37:ae:
4b:9a:c1:60:54:53:da:bc:b5:cd:9f:75:f2:b0:a4:
e8:5f:2b:54:c9:c7:88:42:75:ed:7b:92:a1:cf:0c:
63:34:e8:26:70:34:d9:cb:92:91:58:99:16:3d:4d:
5c:82:e1:b7:fb:2e:7b:5c:e4:d1:b0:23:00:e7:2b:
29:0e:20:9d:a9:5f:8d:35:80:55:c1:96:4c:18:45:
a4:e3:05:c1:5e:6b:cf:1f:19:92:d4:ef:a5:33:74:
a4:27:da:19:68:0d:6f:b6:ab:bd:1f:55:d0:80:04:
9c:db:12:1e:e4:c3:73:34:08:ab:72:04:59:16:90:
56:bf:ae:4a:d3:d8:14:65:99:e0:93:b4:7b:e6:b5:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:CC:EC:5E:CC:9B:1E:31:7D:E6:F2:01:C4:76:76:42:27:10:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/4N_M7F7Mmx4xfebyAcR2dkInEG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:20:19:66:8b:41:18:90:01:e1:32:96:2d:08:1e:14:b1:e5:
7c:01:19:85:ad:53:7c:e7:f6:2d:68:b7:67:30:16:54:e1:07:
ec:13:df:89:ec:0b:fc:b8:c6:97:24:26:b6:4b:ad:36:ab:d4:
cb:db:88:0c:c9:d9:47:2b:30:b5:63:fa:f1:69:87:24:ab:53:
6e:b1:79:08:eb:bc:b1:c5:c5:63:b1:bd:3f:41:24:4e:06:e6:
ff:b3:89:b0:d7:a1:ba:0b:a3:66:6f:70:77:fb:e1:9f:ac:4f:
ea:58:59:ec:3e:6f:27:5d:b4:16:33:3b:7f:2b:2a:0b:ae:6b:
b8:09:b8:e5:9f:5a:c2:fa:05:19:3e:33:d4:66:13:77:4c:95:
5a:ff:5f:9e:8d:30:5b:a4:25:5c:98:8e:fc:e8:f3:2e:13:30:
6e:68:d2:a6:5d:d9:32:6b:67:b9:15:ac:12:23:62:3e:7d:86:
ab:36:d2:72:d7:5f:e9:86:74:7f:f1:5e:01:fd:eb:86:0f:b7:
e7:c5:44:8e:a5:2c:8e:59:1d:0c:29:a7:bf:ce:f0:c6:2d:91:
cd:69:e2:4e:b9:a0:95:cc:0e:e5:ba:15:72:44:68:4f:6e:e8:
91:bc:5f:f9:9e:aa:86:a7:ef:85:de:bc:6e:47:6c:00:b4:36:
2c:a3:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:59 2025 by rpki-client