Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/glenIR7QT8EzKIbL8e9Y1GYQZuU.roa
File: glenIR7QT8EzKIbL8e9Y1GYQZuU.roa (raw, json)
Hash identifier: IatjHMI0TwldymmKBkOP1x2xyODn8vwUljZQ7r/OZB4=
Subject key identifier: 82:57:A7:21:1E:D0:4F:C1:33:28:86:CB:F1:EF:58:D4:66:10:66:E5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B38
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/glenIR7QT8EzKIbL8e9Y1GYQZuU.roa
Signing time: Sun 02 Feb 2025 11:26:50 +0000
ROA not before: Sun 02 Feb 2025 11:26:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 11:26:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8257A7211ED04FC1332886CBF1EF58D4661066E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:5d:f6:6d:f9:99:c1:1a:93:93:c8:cf:e5:
2f:3d:b6:e1:7b:f3:21:a9:fc:28:56:da:b2:5e:80:
1b:14:e6:eb:66:f5:29:73:e0:ae:45:55:b6:88:0f:
d3:bf:e5:04:4f:9e:2a:70:e1:5a:9d:d7:86:23:91:
53:8b:b9:bf:72:37:c5:7e:61:8d:ad:d3:28:6e:0b:
fd:a9:b7:73:cc:45:de:8c:10:45:55:50:8a:f1:ce:
56:84:33:b1:68:b8:a4:30:9a:c3:19:0b:c7:a5:d8:
42:19:3a:40:3a:75:0e:db:64:e6:e7:23:29:a2:2d:
4b:c3:a3:2a:7f:0b:c9:76:05:c9:5c:0f:55:67:30:
6c:53:b4:ab:3e:0d:c0:69:8b:d9:96:01:9c:ec:47:
c9:85:89:ef:98:82:b6:42:0f:6b:f9:f8:d5:ff:13:
2d:5e:8f:5a:07:fb:85:13:c5:66:90:c8:e8:f4:d1:
fa:c1:a0:f1:1a:4e:ba:77:4b:a4:1f:4d:66:47:27:
41:2d:97:47:8c:6d:12:15:3c:31:b9:5d:03:94:17:
75:ab:d7:25:aa:a3:6c:d1:09:4a:49:3b:b2:51:61:
1a:24:e6:cd:97:d7:c0:b2:a6:f5:18:a7:1f:d4:ce:
a4:79:0c:f7:71:db:7b:6b:0c:9c:65:f4:36:4d:e4:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:A7:21:1E:D0:4F:C1:33:28:86:CB:F1:EF:58:D4:66:10:66:E5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/glenIR7QT8EzKIbL8e9Y1GYQZuU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
35:99:17:b7:c3:93:d5:64:66:8b:25:41:23:f3:35:2d:66:4d:
6c:e3:5e:2a:5e:9c:1d:3a:b4:54:83:60:70:66:2e:7b:e9:69:
c8:4c:d6:8a:23:59:8c:4d:7a:9f:87:64:af:0a:49:e0:58:50:
e2:8d:ef:9b:4f:20:27:20:d5:fc:b2:15:09:e7:b1:11:c9:ac:
1c:c1:b4:a3:77:de:70:71:1a:2d:1b:a6:f5:d4:3c:78:ea:73:
54:11:7b:ba:60:f0:65:55:03:5e:9c:78:aa:9d:84:14:b2:df:
83:6c:1d:5e:9e:32:23:02:b5:23:21:9c:4e:4f:cb:b2:5f:55:
ed:0e:b8:5b:2f:65:60:99:e5:51:31:9e:46:69:e7:ab:37:bf:
4b:a1:cd:05:21:a8:a6:c6:1a:93:7d:85:28:75:f7:82:43:c8:
70:4d:b2:06:9b:72:3e:05:65:39:5d:a8:2e:0c:b2:e4:45:15:
97:fd:db:e0:bd:6a:03:36:c8:f8:fd:68:12:6b:82:8c:51:e7:
e7:20:f7:b7:fd:fc:88:95:37:1c:f6:27:e8:8e:0d:a3:10:7e:
a2:74:3e:8f:f4:69:a2:a1:51:58:0c:b3:5e:d3:38:4a:e2:89:
e9:9a:8a:e3:32:97:1a:72:d9:b0:32:a6:47:96:cf:f1:cf:ac:
a8:c0:be:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:22 2025 by rpki-client