Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gFYW4CObPpGmz9YdL-KsaduAeBE.roa
File: gFYW4CObPpGmz9YdL-KsaduAeBE.roa (raw, json)
Hash identifier: Gf9YkqFsTZPkHNINrrkEsYu8JS8J1XudjRZm9ocBkH8=
Subject key identifier: 80:56:16:E0:23:9B:3E:91:A6:CF:D6:1D:2F:E2:AC:69:DB:80:78:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 419B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gFYW4CObPpGmz9YdL-KsaduAeBE.roa
Signing time: Tue 16 Apr 2024 01:22:57 +0000
ROA not before: Tue 16 Apr 2024 01:22:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16795 (0x419b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 01:22:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=805616E0239B3E91A6CFD61D2FE2AC69DB807811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:9c:b3:82:34:9f:4b:ff:72:11:65:8d:28:
ee:f9:82:6b:3d:c4:39:62:56:4a:d5:f4:ad:fd:73:
cd:2c:0d:7f:3b:83:7b:23:4c:9b:7d:aa:80:4e:15:
a6:da:10:fe:fe:dd:fc:ed:71:6b:db:f5:c6:82:cf:
bc:56:6a:c4:5d:79:b5:21:69:82:ce:9b:86:10:a2:
4d:f1:5a:7b:8d:88:fd:0b:ac:88:12:91:37:00:1b:
47:14:26:3f:fb:25:28:95:a8:ba:ef:6c:c5:52:34:
f5:c3:f2:9f:71:a2:a4:83:79:43:e9:43:98:4b:df:
b6:ad:93:f9:51:bc:de:29:1c:52:51:99:be:1e:93:
40:5d:a1:e8:5b:68:5d:27:bc:3b:24:6d:fa:6a:0a:
ea:fa:2d:1e:07:90:0f:ff:6a:0f:fc:17:e3:3e:9b:
c3:73:9a:eb:03:59:b5:35:57:ac:2f:47:f3:4f:3a:
e9:a9:23:69:65:1c:00:c3:c3:89:18:6d:0e:03:f3:
c7:35:5c:4b:79:a6:38:39:8a:9c:0d:da:df:be:bd:
35:13:7f:d5:2e:fb:8d:35:3c:60:bc:1f:0a:92:7a:
bf:ea:60:39:18:d1:88:23:b1:49:af:4a:76:ac:0e:
b9:73:bc:71:1c:e1:cf:bb:f6:04:da:bc:68:5b:46:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:16:E0:23:9B:3E:91:A6:CF:D6:1D:2F:E2:AC:69:DB:80:78:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gFYW4CObPpGmz9YdL-KsaduAeBE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ad:66:37:53:b7:6e:12:2a:f2:c0:45:cd:ae:6d:15:d8:99:68:
e1:59:65:a7:cd:71:ac:d0:36:52:12:b2:d3:0b:7a:32:2a:12:
57:81:ac:75:58:cd:93:44:53:fa:0d:e5:df:1e:b8:b7:ef:6d:
77:47:f6:40:2b:28:32:be:d3:4f:f2:ca:b4:ff:ae:54:2c:4b:
e7:dd:eb:2b:ca:62:59:23:2f:06:0b:91:a3:90:d4:51:38:cd:
f3:8d:88:db:f5:70:cd:ce:e1:68:7f:4a:57:ce:a2:84:54:45:
3a:9f:9b:ae:f8:61:e4:bd:f1:71:6d:94:ea:bb:8b:0b:8c:d9:
d5:f0:63:b3:31:d3:69:7d:58:a7:20:e6:9b:bd:90:d0:9d:b2:
10:e2:b9:fa:bc:65:33:2e:97:fd:f8:4a:be:76:a6:ba:92:44:
fd:e2:ec:04:9b:32:c1:f8:ab:41:67:ef:9b:1e:8f:61:f2:64:
46:09:90:7a:62:2b:7d:09:40:77:5d:1d:14:8f:95:e2:b1:9d:
ff:d5:ac:2a:a7:9f:67:ec:88:52:8b:7a:cf:c7:60:13:3c:be:
7c:0a:da:e5:9b:90:4b:4c:68:5e:df:77:3f:23:b0:0e:49:30:
19:39:12:a0:4a:53:3a:40:2d:58:e1:e1:5e:2f:14:04:12:0c:
08:72:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:08:18 2025 by rpki-client