Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa
File: akoD9DuvAG3U4nq_wQgcV1qWHRc.roa (raw, json)
Hash identifier: p354Kkb3VaI9JeAGMbO6Th8RSrdcsaZWKmZ4vRtUcn4=
Subject key identifier: 6A:4A:03:F4:3B:AF:00:6D:D4:E2:7A:BF:C1:08:1C:57:5A:96:1D:17
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1639
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa
Signing time: Sat 03 Feb 2024 02:49:49 +0000
ROA not before: Sat 03 Feb 2024 02:49:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 23724
IP address blocks: 101.237.34.0/24 maxlen: 24
101.237.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5689 (0x1639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Feb 3 02:49:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A4A03F43BAF006DD4E27ABFC1081C575A961D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:43:7a:dc:bb:80:99:4b:c6:cf:3a:7b:0a:
59:ca:bb:29:be:a8:fc:2c:2f:0a:75:b5:83:6a:9b:
d8:6a:d1:c0:a6:1b:94:4d:50:4e:db:66:1c:a5:4f:
f4:cb:13:b3:b9:28:86:46:e3:78:f4:f6:1a:70:f8:
ea:d9:3d:95:fb:5c:14:96:60:c5:3b:78:29:d2:73:
f6:02:05:e2:f7:61:8c:50:55:97:f3:12:57:e5:da:
4e:f1:5f:42:04:0a:60:36:5a:9e:ef:b6:be:2b:6b:
91:e8:c8:f6:e5:27:22:c6:66:6b:30:37:33:58:9e:
a6:f3:f9:52:60:44:99:b0:17:0f:22:2a:21:f2:f1:
80:c7:eb:a4:68:82:ba:00:5c:3d:1f:0a:f4:62:76:
89:24:c2:80:be:86:1b:47:6b:73:82:cd:ae:7c:4a:
fa:9a:fc:ed:2a:24:be:1d:7e:cb:03:fc:24:5f:da:
6d:ac:d1:84:99:d3:8d:6d:ef:1b:ec:37:15:bd:33:
9e:23:25:b8:e0:c5:b6:9d:73:11:52:a6:27:f3:18:
85:b2:98:c3:78:51:e9:fe:db:a1:94:49:2f:86:01:
6d:40:7b:c4:67:dc:59:7d:69:16:d3:28:b1:09:fa:
ea:04:3d:db:8a:06:11:80:c1:53:d6:f1:46:82:13:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:03:F4:3B:AF:00:6D:D4:E2:7A:BF:C1:08:1C:57:5A:96:1D:17
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/akoD9DuvAG3U4nq_wQgcV1qWHRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.237.34.0/24
101.237.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:c1:6e:f5:37:bc:69:04:3d:7f:17:bb:93:a3:26:30:90:75:
3b:40:c3:55:75:9b:28:97:30:45:64:1f:23:97:fb:a0:a6:eb:
50:a2:39:18:2c:ae:cd:b0:5e:9e:fc:42:66:71:8e:dd:f5:c2:
1a:95:6d:e8:4e:27:f9:a2:5a:78:cb:f0:e5:c9:aa:ac:de:ce:
0c:c2:d3:8f:37:6d:cb:46:ca:97:ca:e4:78:ae:0d:e7:66:10:
c2:b1:3c:d2:4e:94:af:06:a7:a1:50:2c:59:d7:9b:fa:db:a0:
dc:3a:94:28:0f:87:26:0a:c4:12:23:b0:6b:e3:57:5f:ab:23:
dd:bf:80:a7:5a:5f:e4:d7:f8:70:04:99:64:9c:70:67:c5:22:
5a:9a:86:2a:f2:47:b1:ab:dd:05:e9:f1:c6:8f:98:23:86:3e:
08:52:a6:ed:c7:d1:f3:4d:99:e0:de:c6:7b:6f:76:61:f3:c1:
40:cd:d2:db:0e:29:64:3a:88:48:5e:50:e4:94:0d:fb:e4:a4:
c1:5d:35:b4:4d:6f:28:6b:be:1c:fc:c7:b6:06:ea:33:8f:63:
3f:8a:49:31:36:72:e4:27:bc:fb:28:f3:8e:5a:06:6a:e8:ba:
af:fa:1d:5a:8a:95:c6:e6:a4:52:88:c5:c0:59:f4:3a:c3:b4:
97:6e:cc:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:06 2025 by rpki-client