Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KB2Uiy7V4GS13eaTS10isHUtyyE.roa
File: KB2Uiy7V4GS13eaTS10isHUtyyE.roa (raw, json)
Hash identifier: DpUfEqh23lx1TeEJeY3oAtkn8weUE54h/ISCpOyr1+E=
Subject key identifier: 28:1D:94:8B:2E:D5:E0:64:B5:DD:E6:93:4B:5D:22:B0:75:2D:CB:21
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 533F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KB2Uiy7V4GS13eaTS10isHUtyyE.roa
Signing time: Thu 09 May 2024 13:53:58 +0000
ROA not before: Thu 09 May 2024 13:53:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21311 (0x533f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 13:53:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=281D948B2ED5E064B5DDE6934B5D22B0752DCB21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:04:de:95:2a:00:6b:32:e9:a9:3d:30:7b:
84:32:be:a1:3d:76:65:93:9a:a5:76:33:df:22:62:
ef:73:c7:06:67:03:ac:ce:9e:7b:af:51:3b:70:2a:
a2:ef:40:1b:d1:f6:fb:c4:a6:ec:00:64:05:31:a1:
3c:46:26:e2:1f:ff:f0:0f:e9:84:66:84:a4:12:12:
0b:ae:ec:29:c8:ee:a8:1c:c6:29:53:b4:54:b4:08:
0c:cf:2f:f9:01:a0:d1:4e:dd:e7:c8:25:5c:76:ea:
64:74:b5:aa:c7:b6:a7:7c:63:d2:a7:be:50:bc:5c:
ee:a6:63:01:f3:ce:3c:7d:f4:c0:fb:fe:ef:65:87:
c4:a1:95:ce:ef:17:94:2d:3b:a2:dd:77:8c:2f:96:
d2:6c:29:21:80:73:04:64:9e:0a:7a:0f:ba:8a:8d:
59:15:7d:67:78:9b:6a:9f:d7:b9:6c:a9:32:cb:ca:
ab:e3:df:d1:7b:42:eb:03:bd:0d:ed:79:80:83:e0:
84:26:d6:75:8f:34:fc:7f:d9:32:88:12:1f:e0:74:
81:a3:55:dc:db:16:2e:e3:e1:b4:7a:b3:0e:a0:f5:
d5:62:da:db:76:f4:a3:04:d4:53:11:da:4c:7a:3a:
98:e7:21:4b:cc:5a:eb:5f:e3:70:0d:f6:67:10:bd:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:94:8B:2E:D5:E0:64:B5:DD:E6:93:4B:5D:22:B0:75:2D:CB:21
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KB2Uiy7V4GS13eaTS10isHUtyyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:8e:2b:45:c2:a2:72:a5:8d:09:2c:9e:1b:20:2a:43:f1:ea:
a7:d7:b7:cd:99:cb:e8:fa:f0:88:6b:8f:1b:6a:aa:69:ae:8b:
2b:97:5b:6b:12:c4:b7:d6:ee:97:71:2c:ba:56:be:f0:40:34:
06:01:d0:2f:44:ff:0e:9b:e6:c3:fe:b6:19:07:8a:71:0f:60:
2e:38:63:e3:4e:fa:99:7e:b9:ff:38:8b:2d:09:6b:dd:91:c7:
d7:31:7d:02:14:8a:83:22:db:98:6a:5a:f9:e4:3f:5c:79:9a:
5c:38:39:14:d6:92:f2:a5:f5:0d:67:e2:72:14:3d:ef:54:85:
d5:13:12:5f:65:cb:dc:72:35:71:cb:24:4b:af:c0:6e:78:2c:
c8:f2:e2:87:62:6b:fc:15:f2:4f:19:56:4a:30:99:8b:c9:18:
b5:73:f8:7c:b3:65:9b:04:13:a8:53:23:d9:ac:a0:eb:7d:4f:
e1:b7:90:8d:b6:87:04:8f:18:49:b9:77:7d:e2:31:c7:5c:18:
1d:3f:fb:cc:5a:35:01:40:50:38:17:0f:14:b6:9e:0d:b6:b4:
fe:52:36:d0:a2:55:17:8f:f9:68:8e:3e:b4:2c:d9:ac:15:7e:
46:a4:e5:d0:78:da:a6:c1:6f:7f:37:c1:59:ba:30:50:f7:8c:
68:db:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:35:41 2025 by rpki-client