Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sliyD7dfS20rIPzUJxD6PYGmFpM.roa
File: sliyD7dfS20rIPzUJxD6PYGmFpM.roa (raw, json)
Hash identifier: 087+78VUnC/r4ZodXIx0cz4CimwYRdUqBv8OymKzcv4=
Subject key identifier: B2:58:B2:0F:B7:5F:4B:6D:2B:20:FC:D4:27:10:FA:3D:81:A6:16:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C2F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sliyD7dfS20rIPzUJxD6PYGmFpM.roa
Signing time: Tue 30 Apr 2024 03:53:34 +0000
ROA not before: Tue 30 Apr 2024 03:53:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19503 (0x4c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 03:53:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B258B20FB75F4B6D2B20FCD42710FA3D81A61693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:3e:ad:2a:a7:ed:cd:58:6c:6e:7a:a7:2d:
5f:0f:7c:71:5e:37:7f:9a:f2:05:ae:9f:1a:d4:5b:
84:95:79:60:ba:a1:85:7d:44:5a:14:70:2a:80:92:
a5:be:1a:4c:3d:88:b7:0e:93:cd:9a:b8:9f:ff:b8:
c4:3c:88:c5:3f:64:6b:8f:db:97:3f:e9:70:36:6a:
20:41:c7:7a:d5:e7:7f:cf:8a:00:be:d3:a3:23:d6:
ef:28:20:62:9a:e3:ce:52:df:33:d9:1d:7d:e2:c2:
5f:6f:42:3f:bd:06:52:40:5c:64:7e:a1:26:e0:08:
c2:0a:2d:70:14:95:25:23:61:ab:17:a6:88:f5:16:
ee:d4:29:5a:5b:47:b8:24:3d:81:73:53:bb:d2:23:
89:df:e7:5f:e8:a6:7b:0e:a4:c1:70:d9:ac:f1:bd:
0e:42:34:01:41:22:0d:b1:39:ad:88:35:e7:05:14:
16:80:ac:7f:7c:a9:7e:a9:63:b3:71:10:a4:96:c8:
4d:1b:78:2e:03:6a:3b:31:3f:43:5e:0f:2b:43:f7:
d3:fa:d8:3c:8b:6a:ee:2d:15:2e:46:e1:92:88:a2:
9b:08:5d:1c:94:e9:d4:f1:6e:00:69:b5:8c:d1:d4:
1e:39:55:3e:71:dd:de:fa:f5:f9:ee:21:ee:b9:e2:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:B2:0F:B7:5F:4B:6D:2B:20:FC:D4:27:10:FA:3D:81:A6:16:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sliyD7dfS20rIPzUJxD6PYGmFpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:7d:14:5c:4d:22:8a:6d:50:58:46:be:8a:de:ec:0b:8f:61:
42:6a:f2:26:17:73:94:49:c5:50:93:4c:33:57:1b:07:b6:20:
45:c9:db:c6:87:a8:58:96:03:f4:4b:f0:d4:fc:d7:0b:28:88:
e7:1a:18:d6:9d:dc:9e:d1:fc:aa:17:2f:29:25:fa:d5:d3:39:
b6:50:27:1f:30:f3:87:b1:22:73:23:86:55:e2:14:8b:e5:36:
3d:9f:23:b1:5a:b8:f4:84:de:1f:ae:00:e7:0e:a5:7e:75:ca:
b0:dc:b8:93:e1:fd:19:a0:30:76:d3:98:53:e1:c8:7f:5d:5a:
a2:33:08:3a:ee:83:79:41:8c:ee:9b:33:57:bd:b3:a6:ad:72:
61:6e:c7:6b:bb:c9:0d:83:03:93:15:46:a7:04:fc:ba:7a:bc:
97:9b:da:0f:da:2d:4c:a5:bd:a4:65:f6:c8:fd:29:47:d2:14:
29:cf:db:81:81:f6:51:20:44:f3:79:96:de:85:e4:37:1b:b2:
c8:6a:f9:a7:4b:75:c3:22:6d:81:89:75:21:0a:b3:4f:4c:3a:
9d:c4:37:5a:af:11:52:13:c3:06:5e:f2:da:f9:63:b7:02:bd:
54:db:a7:f9:3e:ba:dc:83:2f:14:cf:f8:55:0d:e3:db:9d:68:
57:fc:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:32:59 2025 by rpki-client