Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eEtxleLrx4SCBwRmPiXKoU9vxqI.roa
File: eEtxleLrx4SCBwRmPiXKoU9vxqI.roa (raw, json)
Hash identifier: mzEDf4axaeBfGn2blK5Byz1s/vlUNid2SMV/apPuq10=
Subject key identifier: 78:4B:71:95:E2:EB:C7:84:82:07:04:66:3E:25:CA:A1:4F:6F:C6:A2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F53
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eEtxleLrx4SCBwRmPiXKoU9vxqI.roa
Signing time: Sat 13 Apr 2024 00:22:50 +0000
ROA not before: Sat 13 Apr 2024 00:22:50 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16211 (0x3f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 13 00:22:50 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=784B7195E2EBC784820704663E25CAA14F6FC6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:9a:2e:b2:17:44:3c:4f:71:a0:85:58:3a:
24:dd:1a:83:62:44:ae:e2:e8:55:3b:9d:c1:81:46:
28:55:15:f9:8b:f4:46:98:0b:b7:99:d3:30:1e:c7:
a7:2d:cc:80:ab:36:14:8f:64:a7:a6:4b:16:50:9d:
77:d9:63:b7:16:6b:94:d5:04:fe:b4:3d:21:4b:09:
f7:20:3f:7f:0a:8d:57:99:43:11:57:1d:6c:a6:d8:
85:80:8e:32:ca:a0:a7:63:2b:3d:07:b1:0a:d0:bc:
7c:dd:8c:4a:dc:5c:9f:33:96:93:a5:88:7d:82:1a:
e8:4d:59:42:58:28:8d:ca:64:f7:5b:41:9b:a0:69:
c2:05:1a:92:f4:04:c7:fa:ac:f5:88:f7:70:0a:48:
ed:92:0d:f5:0a:a7:1c:f8:dd:6c:36:ff:be:f9:d6:
76:34:59:e6:5f:66:6c:c7:09:68:ca:da:7e:27:27:
83:c7:5d:5e:18:dd:41:ac:c2:7a:30:db:27:97:9e:
21:0d:2a:c7:51:a5:d6:ff:78:88:16:e3:ec:af:9b:
aa:d0:a4:fb:97:84:fe:ad:06:ea:be:5c:20:2c:ff:
3e:04:e7:77:c2:ea:f5:1c:7c:eb:a5:7d:42:af:83:
fe:9e:95:e5:0f:ab:e1:d4:ee:e4:7f:08:b8:1a:16:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:71:95:E2:EB:C7:84:82:07:04:66:3E:25:CA:A1:4F:6F:C6:A2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eEtxleLrx4SCBwRmPiXKoU9vxqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
89:54:a8:0f:0b:24:b9:62:14:c8:db:1b:3d:34:e7:9c:f6:63:
08:52:22:58:a7:d9:cb:4b:02:62:7e:1a:b1:fc:08:0e:30:27:
87:ec:6b:a3:57:45:cd:7b:64:d1:78:e8:27:ec:f0:9b:89:a5:
67:3c:84:48:4d:d3:f9:1e:30:c2:a1:44:f6:89:75:29:5d:a4:
8f:4e:36:90:f6:e0:51:58:1e:8a:fc:73:28:5e:82:bc:75:1a:
09:44:e4:9b:60:3b:44:51:6e:1c:d3:65:2f:14:70:d0:f1:16:
8d:53:bb:b3:7e:25:d1:ba:49:dc:2b:01:66:29:1f:59:da:53:
cf:a0:73:8b:f9:4c:e0:f9:10:3e:41:7e:0e:50:ea:7f:e1:03:
27:a4:93:ea:99:c9:72:f8:00:8e:d8:00:ea:64:fe:c1:b1:02:
02:cb:f8:0c:64:7e:d5:69:8a:93:e3:4c:cf:2e:5b:46:fd:cf:
e6:0a:30:e6:5b:c9:54:1d:b9:5a:9d:6f:f7:e7:8a:08:ad:d5:
f8:28:14:6b:d0:9f:28:57:3e:ea:45:6e:4c:ae:aa:1f:50:e8:
71:fc:f5:63:64:60:c5:7c:dd:8c:30:8c:75:f8:ae:c4:bf:b5:
41:0a:d9:26:59:a1:59:20:7c:7d:f6:63:21:c7:28:57:79:1e:
f4:71:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:10 2025 by rpki-client