Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xVDC8PfwCTbcH_b6zeFLEnQk8W8.roa
File: xVDC8PfwCTbcH_b6zeFLEnQk8W8.roa (raw, json)
Hash identifier: 0uJ79uvZ5SA67SUKgo9nRxZ6VRG10YzZK2ljTqPO9Ec=
Subject key identifier: C5:50:C2:F0:F7:F0:09:36:DC:1F:F6:FA:CD:E1:4B:12:74:24:F1:6F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 43CF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xVDC8PfwCTbcH_b6zeFLEnQk8W8.roa
Signing time: Thu 18 Apr 2024 23:53:00 +0000
ROA not before: Thu 18 Apr 2024 23:53:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17359 (0x43cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 23:53:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C550C2F0F7F00936DC1FF6FACDE14B127424F16F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:42:57:c3:4f:f2:8e:09:78:30:29:d1:0f:
47:fc:56:81:0c:b1:73:47:01:9f:1b:9c:09:bd:31:
22:20:92:a2:50:ad:b7:cc:50:3d:4f:ce:07:07:91:
6f:87:98:4f:36:fb:7b:89:8a:8d:29:b6:0f:f2:d8:
47:d8:f5:84:a6:e7:83:1d:9c:de:ee:eb:48:41:98:
3d:22:88:77:19:74:66:c6:0d:7f:de:e1:cd:31:11:
89:59:e8:1c:c7:62:d9:d1:ac:00:d4:37:8c:f3:26:
e7:a0:5e:37:7a:c1:ce:e9:5b:29:3f:2a:12:27:51:
2d:04:82:f9:08:f5:37:d5:21:1a:0c:ad:ae:c1:f4:
1e:5a:cc:aa:6d:4d:fd:e3:ad:2b:5d:9c:db:b9:6a:
cb:83:5e:84:e1:27:46:fd:ab:d9:c8:fc:0b:e7:41:
d6:54:c8:26:24:e5:ff:23:4d:3e:73:7d:ac:27:67:
02:71:70:db:37:be:8f:b5:ba:35:d5:4a:ca:29:8e:
4c:e4:94:78:38:62:ff:e2:e0:c4:9e:0d:03:6f:5c:
87:fb:d7:77:98:6f:71:1c:96:76:c0:19:01:e1:d1:
04:aa:31:14:dd:a6:84:57:61:3f:40:cc:a4:d0:01:
2c:f8:a4:b3:a7:e1:7c:22:fb:72:33:45:3b:1b:2e:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:C2:F0:F7:F0:09:36:DC:1F:F6:FA:CD:E1:4B:12:74:24:F1:6F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xVDC8PfwCTbcH_b6zeFLEnQk8W8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
84:86:49:10:4d:3c:2b:a0:48:87:06:e7:19:ca:d9:e5:e4:87:
d5:8e:e8:b8:f3:ab:a4:16:ca:99:ce:9a:64:b7:d1:aa:23:7d:
a3:33:92:eb:9a:3f:bd:d6:78:81:a4:c8:af:f4:3c:b7:c2:71:
27:b8:02:3d:3e:f6:07:70:6c:c1:31:28:9d:e6:8a:ed:c0:9c:
35:44:94:29:10:63:65:0a:fb:b6:8d:9d:12:78:90:fb:d3:34:
dc:03:b8:b8:c7:9a:32:88:eb:30:6d:7f:48:25:d7:34:08:71:
3b:a1:2d:4c:12:42:94:7a:23:ed:30:c5:70:72:77:5a:56:9f:
a5:d2:0d:c5:01:f5:12:5a:82:ce:58:3f:31:b4:e4:fb:de:12:
6a:68:c3:0a:cd:7f:5b:96:2a:11:f8:25:e1:32:22:7d:83:8b:
af:32:d5:6d:1e:bb:74:a3:48:de:7e:de:20:07:69:fa:26:db:
a5:1f:4e:20:5b:ff:2e:d6:19:08:bd:85:cc:05:77:b0:00:78:
0b:d9:42:45:a1:e5:73:ab:d9:33:27:08:22:0a:93:15:fb:0a:
3c:4e:a1:02:da:7d:52:f9:41:84:cc:87:5d:a3:94:fe:18:60:
b2:7d:55:a2:d5:b8:d4:65:48:e1:11:6e:f4:5a:86:6d:50:c3:
b2:27:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:31:50 2025 by rpki-client