Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/L_92sSpqdyrAJSjxCwYOw3vGjqE.roa
File: L_92sSpqdyrAJSjxCwYOw3vGjqE.roa (raw, json)
Hash identifier: J5Gl71My22wrUuayXJRBWd7hQwiOYx4raousNMAytUc=
Subject key identifier: 2F:FF:76:B1:2A:6A:77:2A:C0:25:28:F1:0B:06:0E:C3:7B:C6:8E:A1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5057
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L_92sSpqdyrAJSjxCwYOw3vGjqE.roa
Signing time: Sun 05 May 2024 16:53:50 +0000
ROA not before: Sun 05 May 2024 16:53:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20567 (0x5057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 16:53:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2FFF76B12A6A772AC02528F10B060EC37BC68EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:14:1a:69:00:72:e8:8a:1f:55:36:61:ba:
3d:a3:65:fb:d4:10:c4:c5:7c:08:a4:e5:5c:70:ac:
18:68:30:b4:33:9e:5c:d0:4f:1b:00:ab:c5:e5:82:
56:3d:e7:21:e8:f7:0f:88:0d:a1:b0:97:4d:23:33:
53:62:b4:4c:4b:87:22:18:d5:03:68:d3:58:e0:0c:
3c:37:59:5d:db:7c:db:89:29:4f:6e:34:c2:fd:38:
fa:54:c4:4b:42:d7:66:e7:7a:af:94:e2:41:f1:7f:
22:bc:2b:37:6c:26:71:12:6f:21:ac:08:16:79:ff:
99:b3:d0:ce:8f:99:6b:57:80:7f:3d:6b:c4:e1:54:
51:ff:56:98:28:f0:d7:45:f3:d0:62:5e:87:ec:0c:
57:83:28:13:0f:ae:60:0e:26:8e:14:95:2a:2b:ca:
e5:33:43:e9:a0:02:b4:8f:39:38:f6:fc:6b:4d:17:
ee:89:f3:2d:7f:29:b1:70:19:d1:cb:f6:87:47:13:
d0:c6:d1:fa:8d:71:0f:c5:2a:ec:82:18:51:d0:89:
c2:1a:68:26:0c:35:f9:73:f4:9b:5a:db:f0:ca:f5:
a0:08:ee:cf:b8:fe:58:7c:c5:cd:68:0c:3a:c1:0e:
34:3a:ab:72:cc:87:b7:6a:51:12:da:47:3e:72:dd:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:76:B1:2A:6A:77:2A:C0:25:28:F1:0B:06:0E:C3:7B:C6:8E:A1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L_92sSpqdyrAJSjxCwYOw3vGjqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:56:de:bb:3a:75:6c:25:2e:ff:dd:37:1d:a9:b4:81:ea:c1:
98:d5:73:39:86:e3:0f:b7:db:90:32:a1:92:f4:b3:72:be:60:
53:63:32:6d:63:16:da:41:e7:2f:27:64:a8:b1:83:c4:98:22:
2f:c2:b0:0e:93:e0:6a:04:7f:12:aa:93:9d:92:ce:9f:9b:b0:
a0:9e:63:d8:bf:f0:25:42:a3:94:77:1a:3f:17:85:c5:bc:e8:
2d:d8:f4:18:32:a7:dc:7b:90:c3:0e:67:a0:e4:0c:6d:ba:d0:
6f:e4:f5:52:17:71:29:03:0d:46:66:86:5b:e0:09:de:a8:c7:
c4:70:4f:18:ca:84:d5:f1:e4:06:e0:60:28:c6:3d:63:2b:3d:
f5:80:a1:36:b0:cd:3c:7e:db:e8:ff:99:c0:40:32:ac:e1:b0:
a9:20:06:b7:dd:09:4a:85:36:ce:2e:82:51:b2:a7:76:c4:ed:
86:a6:f0:cd:bb:42:4d:8c:f6:0d:61:f5:1c:b1:92:c9:ab:85:
01:db:ef:8f:3f:b6:07:44:62:b6:02:fb:d4:ee:12:d2:0e:16:
48:8b:8d:e2:b2:7f:16:dc:4b:7b:42:0f:c9:22:e3:6e:f9:f1:
d3:0c:cf:f4:e3:8a:bb:8b:05:3b:c6:72:95:8f:7f:82:17:67:
e7:9c:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:13 2025 by rpki-client