Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dtabCDYfCv0zQUv96wz8n09QbE0.roa
File: dtabCDYfCv0zQUv96wz8n09QbE0.roa (raw, json)
Hash identifier: t41/1PgK/gbvSg3lIsoOWggaLQSf3NUjdb4oQLhWXXo=
Subject key identifier: 76:D6:9B:08:36:1F:0A:FD:33:41:4B:FD:EB:0C:FC:9F:4F:50:6C:4D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3473
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dtabCDYfCv0zQUv96wz8n09QbE0.roa
Signing time: Fri 29 Mar 2024 12:22:13 +0000
ROA not before: Fri 29 Mar 2024 12:22:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13427 (0x3473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 12:22:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76D69B08361F0AFD33414BFDEB0CFC9F4F506C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:32:01:c2:f6:98:c0:41:9c:8d:36:97:84:
c4:8d:7a:56:74:7d:55:5a:ef:5b:f4:4c:92:78:80:
aa:49:fd:aa:9c:d9:9a:a0:ee:13:2f:66:9f:ea:8c:
d8:09:d0:10:dc:54:6d:3a:ca:ee:be:81:48:36:5d:
75:87:81:5e:b8:47:e8:2e:9f:03:7f:9f:1a:69:0a:
d9:28:74:40:2b:ac:9e:c8:53:75:ea:de:df:be:a1:
51:e0:23:dc:52:41:ff:53:87:9e:f1:8f:52:48:9d:
2f:bd:9e:97:b6:84:b5:18:ab:b9:ed:26:16:74:c4:
8d:71:eb:3f:5e:10:a9:72:4e:49:58:ea:90:06:f7:
fd:cd:e2:80:2c:d1:eb:7a:c2:42:bf:8c:2e:32:1e:
d1:90:2b:fd:ce:42:59:3f:67:ab:c1:0e:ad:76:89:
4c:fc:36:b2:cd:14:4d:31:54:26:19:d7:7e:ef:ba:
cf:8b:cd:85:0f:76:52:b8:c4:0f:ba:6f:4a:7f:5b:
a6:d7:33:3b:2c:8c:a7:d2:d5:f0:b3:a8:ea:b2:bd:
23:95:5b:18:c8:80:36:e5:7d:d7:12:e7:bf:64:ca:
db:08:a3:1d:a5:b9:f4:90:f9:3e:bb:24:1a:2b:86:
a4:ad:a6:d5:80:4b:d0:c6:04:c5:b6:78:74:d5:48:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:9B:08:36:1F:0A:FD:33:41:4B:FD:EB:0C:FC:9F:4F:50:6C:4D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dtabCDYfCv0zQUv96wz8n09QbE0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:0c:3c:82:6f:4e:07:22:a7:2b:78:8b:6a:0b:96:4c:71:f9:
d3:f8:b0:17:ee:0d:60:4d:c2:e8:d7:5c:cd:22:fb:5f:22:22:
f1:72:35:3a:3e:64:5f:68:a0:ab:10:0c:90:64:7a:c7:32:ee:
50:53:b7:4e:a0:f0:66:3c:aa:43:96:e5:a5:b5:53:00:8a:a4:
03:93:59:60:27:0e:ef:12:a7:fa:9e:65:ca:95:db:08:67:28:
5f:fb:87:e2:66:1e:55:55:22:cc:1b:80:f3:ca:10:e2:ea:02:
ac:4b:ca:e5:2f:f4:57:e2:fe:6d:0f:d6:f1:1e:86:0a:49:97:
50:90:d1:38:87:93:62:e0:c8:0b:1f:d0:7e:7b:dc:81:50:4b:
d7:d7:9e:68:c2:ee:2e:65:50:68:42:1d:3d:83:5e:87:1e:4b:
90:aa:35:0e:b5:53:ce:9a:e7:aa:77:37:19:a0:6a:8f:83:c9:
31:af:94:0d:c7:a2:83:9a:b7:f8:16:17:ad:b7:e9:6d:b1:fd:
1b:cd:24:7a:01:32:2a:56:1b:e6:2e:67:f9:a1:0d:36:4b:d7:
c8:03:5d:12:8f:89:32:a6:9a:7e:70:af:87:f6:49:09:a4:5a:
88:a3:2a:15:32:2c:72:3e:0c:e4:32:4a:41:94:f7:30:23:15:
a6:e5:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:30 2025 by rpki-client