Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oJe-wLWuyNxLWFlNTOpPZlyr_jI.roa
File: oJe-wLWuyNxLWFlNTOpPZlyr_jI.roa (raw, json)
Hash identifier: NWDPH4wtaPw8kyW/otHlEiE1CXLJWMPManq4F4U4Sd4=
Subject key identifier: A0:97:BE:C0:B5:AE:C8:DC:4B:58:59:4D:4C:EA:4F:66:5C:AB:FE:32
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5713
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oJe-wLWuyNxLWFlNTOpPZlyr_jI.roa
Signing time: Tue 14 May 2024 16:24:15 +0000
ROA not before: Tue 14 May 2024 16:24:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22291 (0x5713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 16:24:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A097BEC0B5AEC8DC4B58594D4CEA4F665CABFE32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:f7:6b:92:15:61:c7:f2:02:56:1e:90:3c:
2c:13:3a:91:d8:97:49:5c:cb:81:9e:6c:12:60:8b:
8d:92:42:31:75:8d:e1:df:b9:ec:15:88:f3:78:6e:
48:44:42:b4:5e:eb:15:69:49:90:78:5a:10:fa:fb:
d3:59:d2:9d:c4:2b:80:50:83:72:07:23:6e:8f:ec:
f0:90:d7:d0:bf:91:35:71:7e:a0:b7:a5:99:fa:da:
32:e9:2c:94:3f:a3:e3:9f:1a:cb:2d:95:fc:b7:63:
30:1d:19:a1:d1:6d:b8:75:8e:b2:79:75:b7:e3:c6:
99:68:7f:c2:9a:0e:b3:b5:78:bc:7d:30:8b:c7:e9:
6b:c3:eb:c2:4f:34:19:3f:74:08:db:d6:26:36:3f:
8c:65:5a:19:4b:40:94:0b:85:6d:1b:c7:b8:83:71:
a8:ae:01:c0:08:e9:b6:44:d3:bf:e8:29:d9:17:d1:
96:d0:5d:d0:3a:77:08:f6:df:6f:d7:23:c0:9f:88:
4f:ce:98:80:5d:75:c9:0d:b7:2a:14:23:66:79:b3:
8b:3d:03:97:6f:42:c5:1e:be:85:07:f7:e4:f1:44:
00:56:c1:a9:34:2e:ac:61:ec:bc:52:11:15:04:d4:
54:ba:08:de:ad:6a:33:a1:c2:38:8a:47:e5:82:2d:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:BE:C0:B5:AE:C8:DC:4B:58:59:4D:4C:EA:4F:66:5C:AB:FE:32
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oJe-wLWuyNxLWFlNTOpPZlyr_jI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:42:56:95:0e:f1:ca:bd:d7:33:98:ef:44:d8:ab:df:7a:d9:
f3:9a:54:03:35:33:a4:50:42:3c:73:1f:4f:a5:1b:9c:56:3f:
06:b8:7f:ea:fc:8f:a3:0e:7f:97:d3:7c:12:6c:cd:bc:97:bc:
75:aa:5e:f1:40:d9:6b:6c:43:38:4c:68:3e:dc:2b:2f:54:12:
02:b8:97:30:c7:4d:f0:fd:4e:67:8a:90:88:65:ae:3f:96:25:
ed:3d:be:3f:eb:dc:ca:52:9d:7d:02:50:df:93:cc:57:6f:41:
2f:48:d9:62:5d:00:9c:3f:f9:b2:99:e2:a7:c6:1c:df:12:1d:
20:10:cd:18:6a:96:46:2e:a2:4d:73:45:20:70:2c:2d:14:2a:
cd:73:28:6a:cc:d5:48:38:a6:78:49:1e:8b:70:17:05:47:67:
46:ce:e1:c9:1d:66:60:df:65:61:f7:f1:a1:a1:0e:8c:98:9a:
77:ba:fc:38:91:cf:e6:c6:b1:30:27:09:a7:e7:ff:62:70:43:
5b:14:54:3e:60:3e:65:4b:39:e9:2f:01:0c:28:e7:9c:d1:2e:
b4:d8:89:10:1c:32:aa:2f:2c:c2:41:2c:78:22:52:98:ae:5e:
cd:ef:ba:b8:be:2c:f4:dd:44:4b:39:7d:e4:a0:1b:7b:27:0f:
16:67:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:28:15 2025 by rpki-client