Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aa4ufdCJisGfNYl9ErY5MsorGX4.roa
File: aa4ufdCJisGfNYl9ErY5MsorGX4.roa (raw, json)
Hash identifier: Zmbp1r2kZnmm9lm5CqdbPM06P+Is9asNMZnpBQRfLA8=
Subject key identifier: 69:AE:2E:7D:D0:89:8A:C1:9F:35:89:7D:12:B6:39:32:CA:2B:19:7E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 383F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aa4ufdCJisGfNYl9ErY5MsorGX4.roa
Signing time: Wed 03 Apr 2024 13:52:20 +0000
ROA not before: Wed 03 Apr 2024 13:52:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14399 (0x383f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 13:52:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69AE2E7DD0898AC19F35897D12B63932CA2B197E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:94:47:cd:8b:2e:05:14:85:00:a2:bb:ff:
86:66:d6:3d:a4:55:b0:86:2b:27:ed:b8:2a:5f:70:
c9:28:bb:f7:76:82:1e:2a:8a:a7:0b:83:80:9b:2c:
76:2d:cd:cd:24:83:b7:ef:7e:6f:39:00:75:a8:91:
d8:2f:5d:16:70:29:6e:17:a5:e5:b3:55:a6:9f:72:
d3:8d:e6:fc:52:27:83:aa:66:82:08:5a:f5:43:56:
1b:d8:55:3f:9c:a7:48:04:e4:49:ef:88:80:ed:3a:
bf:24:c5:eb:16:73:20:8e:dc:85:6c:8a:1c:a5:ae:
f6:bd:1d:a6:b3:26:f9:46:1f:52:0e:31:b8:5c:d1:
b7:ed:5c:86:3a:ea:b1:eb:84:dc:64:ae:c2:41:8d:
74:fe:d3:ad:63:37:05:71:8f:ec:d1:50:ee:fa:e3:
1d:f4:33:57:d0:66:12:fc:71:a2:32:20:ea:24:5a:
00:83:f4:9c:96:21:2c:8d:2c:03:b4:a5:42:e1:1b:
c9:08:8b:66:dd:d4:4f:d9:c2:58:8e:be:6c:7a:6e:
4d:c2:3f:2a:fc:2e:0c:4f:5e:0b:32:ec:02:d0:89:
56:62:d0:06:1c:ff:88:14:c2:e6:62:42:4f:a2:41:
b1:d3:c3:26:f7:40:3c:d9:1b:41:d3:74:2e:54:cf:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:2E:7D:D0:89:8A:C1:9F:35:89:7D:12:B6:39:32:CA:2B:19:7E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aa4ufdCJisGfNYl9ErY5MsorGX4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
07:a0:8a:01:fc:86:4a:aa:7d:03:63:ca:04:d4:9a:e5:a0:44:
ca:60:87:27:17:7c:fe:18:88:a0:29:d6:eb:20:82:7d:71:72:
96:1c:4b:5d:fe:59:96:26:61:ce:37:5e:55:70:55:1c:11:f1:
b0:3e:3b:9f:e4:3b:6b:c8:a0:89:aa:3d:5a:e8:93:78:a7:ce:
83:0e:01:40:be:86:56:61:d8:38:e7:a8:e1:61:a8:6b:b8:7e:
db:98:e1:2d:e3:e4:43:0c:7e:ec:92:83:5b:35:11:81:7e:4b:
14:a9:23:82:c8:38:1d:62:25:80:82:2d:af:06:3b:de:25:e3:
3d:d5:d5:fd:2a:86:a5:41:83:bb:c1:54:54:a7:8d:d4:62:26:
df:82:26:88:0f:1c:2a:8c:25:8e:db:e0:7d:51:fd:65:2d:36:
cf:98:ee:06:c0:63:52:a0:82:99:6f:81:33:c6:b1:fe:24:a3:
e5:52:e3:d8:e2:ba:7a:14:f7:d4:a7:70:43:fe:9a:10:95:bb:
14:13:41:ce:af:85:1a:39:74:d5:c3:b6:73:a6:32:09:79:aa:
81:1c:8c:12:b2:3d:08:48:12:f3:c8:f5:bb:fe:e5:6f:1b:2f:
7f:69:55:e6:db:1d:cc:35:e0:fb:99:02:e1:f9:18:4c:7b:65:
07:bc:8d:46
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICOD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDMx
MzUyMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY5QUUyRTdERDA4OThB
QzE5RjM1ODk3RDEyQjYzOTMyQ0EyQjE5N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBgJRHzYsuBRSFAKK7/4Zm1j2kVbCGKyftuCpfcMkou/d2gh4q
iqcLg4CbLHYtzc0kg7fvfm85AHWokdgvXRZwKW4XpeWzVaafctON5vxSJ4OqZoII
WvVDVhvYVT+cp0gE5EnviIDtOr8kxesWcyCO3IVsihylrva9HaazJvlGH1IOMbhc
0bftXIY66rHrhNxkrsJBjXT+061jNwVxj+zRUO764x30M1fQZhL8caIyIOokWgCD
9JyWISyNLAO0pULhG8kIi2bd1E/ZwliOvmx6bk3CPyr8LgxPXgsy7ALQiVZi0AYc
/4gUwuZiQk+iQbHTwyb3QDzZG0HTdC5UzwT3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUaa4ufdCJisGfNYl9ErY5MsorGX4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2FhNHVmZENKaXNHZk5Z
bDlFclk1TXNvckdYNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAAegigH8hkqqfQNjygTUmuWgRMpghycX
fP4YiKAp1usggn1xcpYcS13+WZYmYc43XlVwVRwR8bA+O5/kO2vIoImqPVrok3in
zoMOAUC+hlZh2DjnqOFhqGu4ftuY4S3j5EMMfuySg1s1EYF+SxSpI4LIOB1iJYCC
La8GO94l4z3V1f0qhqVBg7vBVFSnjdRiJt+CJogPHCqMJY7b4H1R/WUtNs+Y7gbA
Y1KggplvgTPGsf4ko+VS49jiunoU99SncEP+mhCVuxQTQc6vhRo5dNXDtnOmMgl5
qoEcjBKyPQhIEvPI9bv+5W8bL39pVebbHcw14PuZAuH5GEx7ZQe8jUY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:07 2025 by rpki-client