Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/OuwJJOnwiIuCU1GiiRSTaReoOpA.roa
File: OuwJJOnwiIuCU1GiiRSTaReoOpA.roa (raw, json)
Hash identifier: lSxCNij4gC1IapRE7M3fTe/ixki2nC/tB5ASzvPiEno=
Subject key identifier: 3A:EC:09:24:E9:F0:88:8B:82:53:51:A2:89:14:93:69:17:A8:3A:90
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C8E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OuwJJOnwiIuCU1GiiRSTaReoOpA.roa
Signing time: Thu 06 Feb 2025 00:55:47 +0000
ROA not before: Thu 06 Feb 2025 00:55:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 00:55:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3AEC0924E9F0888B825351A28914936917A83A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:d3:c0:81:e4:82:7a:de:d9:51:66:42:ce:
5e:41:c2:7a:83:e3:3f:e1:f3:02:0f:8c:ae:dc:99:
59:f3:9f:5f:93:15:3c:37:26:4f:4b:69:62:b1:ac:
87:86:41:11:1c:76:5d:97:f7:f6:ef:76:bd:f8:56:
c2:69:8a:b2:05:a4:02:6d:e7:8f:0e:a2:0f:3f:44:
03:e0:1c:16:68:fa:95:34:96:91:df:1b:41:ef:15:
1c:75:61:48:ba:c5:31:ac:c0:a5:d6:43:65:2f:59:
6c:d6:aa:df:f2:90:38:db:6d:0b:36:90:ca:2a:49:
06:3b:6c:b8:af:e3:84:77:eb:23:77:46:ff:02:e9:
13:19:50:95:d8:a0:e4:2b:c9:4c:46:b0:a1:95:ec:
f8:7e:ca:e0:22:d8:b8:d3:e9:ef:2e:4a:d7:0a:45:
68:48:da:4d:bd:7a:3e:b2:3d:1b:e3:ac:e1:18:fc:
de:68:54:e1:16:da:21:1f:fc:48:13:fd:7f:4b:38:
e8:43:08:a0:1a:eb:8e:0a:b3:cb:f6:ba:7c:b3:2d:
28:35:46:54:96:7c:fa:49:97:8a:df:1b:db:91:bf:
97:ba:83:69:6d:2c:a0:cf:59:69:e0:72:3a:db:e9:
6a:45:2c:83:a3:f1:a6:bb:86:68:3a:75:37:2f:cd:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:09:24:E9:F0:88:8B:82:53:51:A2:89:14:93:69:17:A8:3A:90
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OuwJJOnwiIuCU1GiiRSTaReoOpA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
97:a3:fb:99:b7:df:70:67:9c:06:1f:0c:88:2c:36:fd:8d:d4:
49:49:1f:7e:eb:f1:af:71:45:4f:0a:4d:b7:c2:95:8b:17:37:
97:0c:6a:53:4d:d4:fd:1d:6d:f3:ed:1b:e9:02:ab:c4:55:79:
a8:be:7f:11:89:ac:61:58:ab:d4:2b:9d:3e:65:7c:57:2b:26:
7c:85:6c:a8:1c:44:24:cd:3c:0c:ce:5f:a9:57:e2:de:b5:7c:
aa:c9:49:2d:20:16:92:5e:2e:92:cf:33:f6:8d:8f:5f:35:c5:
4d:bf:f1:74:e5:c2:0d:6f:36:48:61:bc:c0:84:de:5b:c8:d1:
84:e8:d8:5b:ba:ed:47:1e:89:ee:35:0c:b6:42:2c:95:67:82:
10:3d:c4:8d:a6:76:8b:aa:0f:23:b5:0a:fa:51:0c:a9:e4:4b:
ef:6b:0f:be:e8:13:84:ac:3f:1d:90:d0:67:0f:00:ec:3e:25:
ae:d1:df:f0:31:40:b3:17:0f:bc:da:58:d2:57:eb:52:fb:81:
ab:a1:95:1c:ad:1f:f4:ed:37:49:3e:87:83:72:bb:a2:0a:c6:
a0:b5:f3:a2:80:c6:11:6b:18:32:ff:43:e3:39:ae:49:4e:91:
2e:41:68:a3:70:40:2f:ae:0f:38:c7:81:e8:b6:3a:a0:c3:5c:
aa:60:9c:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 09:10:19 2025 by rpki-client