Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FN9uSRgpGv8MKrrSueTuQQtPJ60.roa
File: FN9uSRgpGv8MKrrSueTuQQtPJ60.roa (raw, json)
Hash identifier: 47oKECJ4A4UkbTEzwbBnRwVcsi4wR8qSVbx+w94MOM0=
Subject key identifier: 14:DF:6E:49:18:29:1A:FF:0C:2A:BA:D2:B9:E4:EE:41:0B:4F:27:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E3B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FN9uSRgpGv8MKrrSueTuQQtPJ60.roa
Signing time: Thu 02 May 2024 21:23:42 +0000
ROA not before: Thu 02 May 2024 21:23:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20027 (0x4e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 21:23:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=14DF6E4918291AFF0C2ABAD2B9E4EE410B4F27AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:13:76:f3:77:b3:70:60:94:ba:bf:b3:fe:
33:22:32:a8:00:a8:bf:eb:e1:ee:d5:b5:a8:40:ec:
3f:90:4e:b2:a2:9c:c6:52:22:be:88:3e:b5:ee:f6:
7a:4a:5d:7e:89:11:9c:53:c8:ed:0b:0b:97:49:26:
14:00:03:91:75:aa:37:5f:8e:17:61:f3:2c:59:c9:
68:a9:ab:a2:89:61:d4:ec:95:b4:8f:62:6e:c3:1a:
d3:75:95:93:08:84:89:25:b0:15:4f:86:d9:e0:b3:
7d:95:0d:9a:54:ba:40:59:ad:bd:e4:e1:a6:03:ed:
0a:41:78:ed:44:5e:46:10:94:b2:cf:83:93:01:47:
c1:13:94:25:fa:f9:5e:f7:e8:d3:b5:c2:95:8c:75:
3b:ff:66:3f:c9:c2:a5:f6:6c:da:99:a7:2c:04:11:
b3:b8:74:48:5b:2c:a5:d5:5e:42:82:7b:89:ed:bc:
d0:66:66:7e:84:a3:17:70:ae:89:01:a2:0f:ef:af:
1f:71:0f:a4:e7:18:71:d1:e8:0c:08:5f:31:69:49:
8c:fd:2c:00:e6:a9:67:ff:09:f0:7c:0d:10:e1:7c:
2b:ab:3d:30:6b:9f:96:7d:a7:f3:b2:67:24:56:24:
78:27:ac:d0:dd:f1:04:80:02:19:88:88:71:d1:b7:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:6E:49:18:29:1A:FF:0C:2A:BA:D2:B9:E4:EE:41:0B:4F:27:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FN9uSRgpGv8MKrrSueTuQQtPJ60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b2:4e:31:3a:1d:b1:c6:58:de:dc:9c:a0:f3:d7:bc:ed:23:16:
3c:fd:e3:56:ef:be:66:52:06:34:2c:c1:30:03:6d:b1:ea:f7:
bf:db:b1:8d:14:1a:df:55:28:8c:ef:ae:ea:f9:d7:79:e3:60:
e1:c3:5b:d5:b1:81:36:2b:aa:f4:9b:40:c1:cd:ed:8e:0e:8e:
36:0e:d6:b6:cd:9d:97:a1:05:9b:06:16:1c:51:33:af:8c:b7:
1f:50:c7:fa:f0:b8:c5:9b:11:c7:95:b1:34:f6:40:eb:73:c1:
0d:8f:bc:e5:c5:a1:d6:de:1d:9f:29:b2:3c:cc:21:6b:d1:ad:
15:45:04:ad:1d:85:7f:b2:98:77:22:3b:20:8b:46:ca:9c:a7:
83:be:58:4d:fe:d1:bb:52:97:ff:b7:7e:9d:d9:0b:86:6b:98:
c3:af:29:18:45:f1:6e:02:e0:e9:44:4a:08:83:39:6a:1f:cd:
83:d8:0e:5d:a9:82:52:75:6f:76:dd:13:3f:4c:fa:3c:c5:83:
15:cf:44:0e:03:1a:b7:b5:c3:ef:4a:bb:c1:97:04:51:e5:d8:
c8:e7:8b:9a:7e:f9:f2:8a:d3:f7:2b:c9:61:44:24:d2:ba:d3:
7d:45:22:12:3d:28:a9:fe:f1:92:90:fd:5e:6a:92:fd:72:f9:
8f:1f:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:03 2025 by rpki-client