Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Sfjj9FfYsHrRQMFvfsc_YSNpc1o.roa
File: Sfjj9FfYsHrRQMFvfsc_YSNpc1o.roa (raw, json)
Hash identifier: Q9tt2+lNtuW6jcR9MB9RhWqUaQY9hFB6JTfVQ2rN974=
Subject key identifier: 49:F8:E3:F4:57:D8:B0:7A:D1:40:C1:6F:7E:C7:3F:61:23:69:73:5A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 477F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Sfjj9FfYsHrRQMFvfsc_YSNpc1o.roa
Signing time: Tue 23 Apr 2024 21:53:15 +0000
ROA not before: Tue 23 Apr 2024 21:53:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18303 (0x477f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 23 21:53:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=49F8E3F457D8B07AD140C16F7EC73F612369735A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:9c:b6:ad:96:b8:39:a2:36:10:f9:2f:7c:
b6:8b:f9:50:45:0b:90:24:7a:82:1b:16:70:5b:26:
68:75:f5:66:9b:97:9f:9b:7e:a7:01:7a:bc:fb:5f:
d9:5a:50:3c:47:45:bc:77:74:3a:6c:81:6d:6d:bd:
25:2a:2b:73:b8:24:05:0b:84:2a:ef:f7:87:d6:b7:
c6:a7:fb:ab:ff:9e:f6:ad:ed:b7:5b:09:66:91:3f:
12:1f:6c:63:a3:b5:59:bb:f5:b4:f0:e0:e6:98:22:
22:52:ca:6a:02:45:6d:ef:a7:24:01:a7:8d:fb:5b:
0f:a9:3c:32:b9:e0:d9:aa:3d:c4:cb:f2:e7:3f:1f:
f8:35:7d:37:42:2c:ab:22:0a:cc:a3:40:ee:ba:dd:
54:73:db:67:26:7a:27:a4:a6:fb:12:8b:ce:22:ef:
75:29:bd:7a:6d:ea:dd:6c:36:c7:a8:b5:8b:e4:b7:
d9:45:a7:48:ec:1e:8c:ea:cc:50:e6:e1:4f:26:78:
cd:8f:83:89:38:79:bb:3f:20:64:6d:d5:5d:b8:37:
17:96:dc:75:b8:1e:39:68:b2:53:2a:b2:d1:46:b9:
48:27:80:1b:78:e6:d4:d8:66:b7:aa:93:93:9b:d3:
79:ce:74:0f:c8:8e:bc:f9:12:43:dc:88:a8:43:35:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:E3:F4:57:D8:B0:7A:D1:40:C1:6F:7E:C7:3F:61:23:69:73:5A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Sfjj9FfYsHrRQMFvfsc_YSNpc1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:17:7d:bf:9b:36:a1:31:3f:65:82:ff:c3:54:48:5c:1f:24:
b6:a1:7e:03:6c:64:a0:6f:34:eb:6d:7e:9c:e3:de:31:5f:82:
da:69:e6:e8:fb:53:f5:e7:df:38:6e:a1:44:df:e7:1f:2f:e8:
a4:94:3d:f0:5b:75:53:16:c2:44:16:6f:2d:94:1b:ca:d6:81:
90:f7:f4:3c:81:8a:38:20:0e:aa:c3:7f:a8:1a:4e:24:ef:03:
47:58:81:e8:60:11:80:a3:5f:14:c3:78:48:47:8c:87:ad:f6:
64:97:b7:24:18:57:c1:46:53:59:7c:1f:64:71:86:4f:1d:43:
30:99:92:32:45:9d:0c:4e:0d:d8:f7:44:65:c8:b0:11:af:5d:
72:3b:1a:bd:62:39:8c:6d:04:ed:6c:f3:bb:89:07:10:9b:d3:
5d:b5:83:84:b7:3c:14:49:02:85:c1:2e:d6:8d:bf:4a:50:02:
ee:24:89:73:9d:61:ba:71:c6:a0:af:78:7b:64:95:4e:82:5a:
22:34:ef:ff:04:f4:17:21:05:a5:1d:00:b7:3e:20:26:c0:c5:
33:29:29:1a:71:5e:e9:74:67:3d:cf:24:8d:29:f8:f4:04:20:
6c:7b:be:b1:ec:80:ef:7d:3f:b5:98:1a:92:76:a6:76:7c:3c:
20:20:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:27:57 2025 by rpki-client