Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/a7YE7ghNJPca3IDAFN9t-xeVEIA.roa
File: a7YE7ghNJPca3IDAFN9t-xeVEIA.roa (raw, json)
Hash identifier: 9P4sbi+vY2wnSGvN4Ao6bRGcOmT1S8HGQ6G4GiEAwMc=
Subject key identifier: 6B:B6:04:EE:08:4D:24:F7:1A:DC:80:C0:14:DF:6D:FB:17:95:10:80
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DF7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a7YE7ghNJPca3IDAFN9t-xeVEIA.roa
Signing time: Thu 11 Apr 2024 04:53:11 +0000
ROA not before: Thu 11 Apr 2024 04:53:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15863 (0x3df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 04:53:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6BB604EE084D24F71ADC80C014DF6DFB17951080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:82:46:58:80:39:98:bb:af:96:e8:3c:8d:
45:c7:5b:b7:d4:cf:f4:c5:f8:75:7c:af:94:62:a6:
fa:78:1c:32:78:41:1f:99:1a:65:08:0c:2b:88:e5:
6b:06:6b:ff:ef:b1:d1:4a:5c:f8:d0:9a:30:04:f6:
66:1e:0b:54:08:78:7f:93:a0:af:f8:6d:ce:e8:b0:
67:9b:24:a1:13:15:e4:1a:66:ed:1b:a6:c7:0e:84:
d4:66:1d:7c:62:51:2a:29:99:bd:d7:05:2f:d0:37:
bf:54:25:a3:a6:ca:68:5c:58:ff:08:74:43:e8:f2:
0a:44:56:b5:8b:c4:7c:9d:fa:1f:44:2e:10:0e:21:
ab:af:7a:48:ce:0b:8e:0c:8c:15:7b:6a:5b:84:7a:
44:fe:42:b4:5f:f0:63:ea:a9:67:e3:d1:cb:da:7b:
0b:b0:77:7c:35:25:7d:09:00:3f:12:f3:86:21:ba:
1f:3f:dd:ca:c8:e2:19:5c:ff:e6:aa:c2:59:9e:47:
cd:6d:30:f9:8f:74:fc:58:f4:60:0f:fa:04:bf:91:
d0:37:25:be:49:cb:f9:06:0f:02:23:63:63:7b:ca:
30:32:39:ad:d5:93:39:68:59:db:e6:f2:fd:ca:f1:
54:13:c7:b2:0c:3a:cc:b4:39:d0:79:ea:3a:f8:b9:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:04:EE:08:4D:24:F7:1A:DC:80:C0:14:DF:6D:FB:17:95:10:80
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/a7YE7ghNJPca3IDAFN9t-xeVEIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:69:17:68:87:c8:3f:42:d2:31:da:0e:90:5f:ad:84:35:c0:
dc:49:8f:5f:2c:27:1f:20:df:9b:c0:a4:ab:b3:83:b7:19:da:
93:cd:49:49:b4:69:0e:2d:9b:73:1c:6e:27:52:10:8a:5d:6c:
b8:ee:3e:bf:42:b4:90:89:0b:e9:b8:64:64:1e:35:c1:c7:a0:
df:08:69:c0:28:89:44:05:d7:96:a9:f1:6f:1a:e0:b0:6a:f3:
07:b9:84:b3:d2:29:a3:e2:c9:14:d5:f4:ef:1e:71:06:19:dd:
ee:cd:36:21:75:e8:5f:94:8e:b3:75:43:8b:1c:ca:b4:35:c0:
47:40:b0:df:12:eb:9d:10:a9:8e:b1:d7:7f:57:b8:89:a7:33:
3f:9c:1e:9e:37:e2:85:c8:37:e0:53:e4:01:f4:e9:77:50:c3:
eb:c7:af:7d:5d:e2:5f:6a:f2:97:a3:18:b9:4f:0f:99:36:09:
3b:c3:15:84:03:95:5e:50:e3:7f:61:56:94:eb:ec:d9:06:9d:
02:05:8f:4d:99:7b:04:24:88:da:34:e0:73:4b:19:07:29:8f:
b1:d2:62:36:9f:b7:0f:48:b9:8f:a0:41:55:d6:3d:aa:17:6b:
da:34:1c:64:bb:e7:4d:25:f9:28:c4:b7:b1:63:e9:21:b3:b2:
59:fc:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:24 2025 by rpki-client