Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gAw45c_S02ryzMj8w_wS86qIM7c.roa
File: gAw45c_S02ryzMj8w_wS86qIM7c.roa (raw, json)
Hash identifier: IqV8sXMRzemqATJkKD4l6m6O/mJ4OVZ3x5R9/0rHlRc=
Subject key identifier: 80:0C:38:E5:CF:D2:D3:6A:F2:CC:C8:FC:C3:FC:12:F3:AA:88:33:B7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4D63
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gAw45c_S02ryzMj8w_wS86qIM7c.roa
Signing time: Wed 01 May 2024 18:23:38 +0000
ROA not before: Wed 01 May 2024 18:23:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19811 (0x4d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 18:23:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=800C38E5CFD2D36AF2CCC8FCC3FC12F3AA8833B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:22:c7:da:3a:31:cb:10:05:cc:d7:79:63:
61:3c:19:25:dc:17:44:a2:40:85:2b:76:f4:f0:20:
1d:2f:e8:37:58:c4:c4:6d:77:59:03:15:39:79:89:
12:f8:eb:5b:20:92:4a:e4:8d:b2:85:3d:d4:68:97:
27:c2:92:4a:01:d8:a9:6e:10:9e:c4:a1:e7:2b:19:
06:7e:a0:94:17:f4:4a:95:a8:ba:a9:1b:ba:4c:ac:
60:b4:e6:3d:fe:f9:53:04:b9:df:ee:3f:7d:dc:22:
7d:87:c2:4f:a3:1f:f0:68:59:04:98:7f:7d:0c:b3:
e1:75:a4:88:2b:6c:ba:b5:c1:b4:8e:b8:dd:93:6e:
46:07:de:a6:c5:d1:fa:f7:10:59:08:c6:12:e1:45:
4f:7a:b5:c0:cf:4b:9e:85:93:41:b9:7d:71:80:6b:
75:f7:c8:c6:a3:e1:1c:49:d2:82:86:5b:a8:cb:a7:
ca:f3:ae:83:40:e4:5e:3c:4f:55:ab:3f:8f:dd:70:
7e:28:d1:73:28:ef:4d:8c:af:80:be:31:1a:61:52:
07:a1:51:b2:16:14:b8:1e:62:75:24:2e:ab:cb:f6:
55:da:81:3e:6f:1d:aa:98:f5:a8:a7:79:26:db:87:
6d:95:7c:33:7d:0a:fd:1d:38:fc:6a:2c:c0:79:92:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:38:E5:CF:D2:D3:6A:F2:CC:C8:FC:C3:FC:12:F3:AA:88:33:B7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gAw45c_S02ryzMj8w_wS86qIM7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6c:9b:07:b1:33:24:55:92:17:5d:ca:05:7d:6d:c4:9b:03:8a:
1c:a8:a7:9c:c9:0c:a5:61:76:59:31:74:59:d8:77:73:54:83:
b9:3c:ae:64:d2:be:13:ca:b5:96:e2:1f:05:6d:4f:f9:6a:20:
6e:5b:bc:0b:aa:0a:52:c7:62:37:da:0a:4f:de:ba:81:35:51:
aa:81:b8:b1:70:5d:44:08:f4:75:78:31:96:f9:93:c8:3f:58:
80:79:6b:37:c0:70:7e:eb:ea:89:ee:25:e2:b5:f3:3a:31:90:
7d:f6:f2:c0:b7:75:99:5e:61:14:13:b4:cd:1b:79:a8:a6:2c:
a1:07:84:c7:26:f9:7f:cd:a6:00:5b:3e:88:8a:d3:b5:8b:fc:
da:20:1e:d5:ed:79:0d:8c:86:a9:58:4c:79:0c:01:24:a0:92:
d9:19:a6:2f:d5:de:35:b1:ea:f0:a5:e7:88:9f:5e:96:2c:1b:
7a:68:af:1e:6d:03:6a:e6:2f:2b:35:a6:65:10:c1:cc:dc:23:
64:fe:89:84:f4:86:e8:16:8a:bd:b8:84:c8:45:53:5c:e2:44:
70:39:8c:f1:3b:a7:8b:29:c0:84:f1:04:cf:0b:99:3e:6f:a4:
f5:26:e9:36:53:c8:96:a8:0c:03:04:95:f7:c6:8d:c3:18:9d:
fc:69:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:52 2025 by rpki-client