Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa
File: Yg61RxIhCNGDnQvVtwg-egnxOLU.roa (raw, json)
Hash identifier: 3XfY+iN0080xE/fEDKYWFBE5T1lbhQ0g9gRDubSk/jY=
Subject key identifier: 62:0E:B5:47:12:21:08:D1:83:9D:0B:D5:B7:08:3E:7A:09:F1:38:B5
Certificate issuer: /CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Certificate serial: 06
Authority key identifier: EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa
Signing time: Tue 14 Jan 2025 08:18:20 +0000
ROA not before: Tue 14 Jan 2025 08:18:20 +0000
ROA not after: Wed 14 Jan 2026 07:53:29 +0000
asID: 17969
IP address blocks: 218.244.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECB273B097997C02B4F52E5C1BB4FEFE66797850
Validity
Not Before: Jan 14 08:18:20 2025 GMT
Not After : Jan 14 07:53:29 2026 GMT
Subject: CN=620EB547122108D1839D0BD5B7083E7A09F138B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:ee:fd:74:52:0f:73:2d:2c:22:89:ec:fa:
d6:36:3f:9a:eb:51:c1:d4:e9:22:de:4f:3b:78:2d:
e4:01:23:33:7e:72:5e:c6:6d:e8:29:b4:f0:8c:bf:
7f:43:a1:21:57:ca:2a:1e:93:5a:3b:3a:67:0f:5b:
b6:29:eb:f7:d8:9f:be:4f:9b:8b:63:d9:66:23:b7:
8c:be:8d:54:7b:20:c5:30:15:df:3c:cb:ee:13:c5:
f2:60:13:0f:6c:4a:5a:47:10:ef:1f:7a:a9:57:09:
6c:28:82:e0:a4:ed:8e:66:d5:b3:c3:4d:98:6a:fb:
43:6c:c7:d3:70:1e:91:cf:32:31:bd:32:81:55:59:
ad:38:45:78:07:8a:0b:5b:b6:f5:aa:61:f6:46:dc:
e8:dd:aa:5a:41:f6:a7:ce:66:df:2b:84:23:e3:0b:
8b:98:c8:d4:a6:c5:b6:81:33:28:ae:97:67:cc:59:
0a:7f:3c:8d:76:b2:b7:f7:01:ec:bc:c2:7e:82:9c:
07:3c:4c:79:fd:21:43:b6:13:d2:fa:49:62:a4:33:
f2:6e:e1:c8:47:c3:ec:5b:6e:84:6c:21:ad:34:15:
44:7a:8f:ba:50:08:6d:26:61:8b:43:3f:b8:24:85:
1f:89:09:87:4b:c9:41:e7:76:71:16:cc:d8:d4:5f:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:B5:47:12:21:08:D1:83:9D:0B:D5:B7:08:3E:7A:09:F1:38:B5
X509v3 Authority Key Identifier:
keyid:EC:B2:73:B0:97:99:7C:02:B4:F5:2E:5C:1B:B4:FE:FE:66:79:78:50
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/7LJzsJeZfAK09S5cG7T-_mZ5eFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7LJzsJeZfAK09S5cG7T-_mZ5eFA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/22/Yg61RxIhCNGDnQvVtwg-egnxOLU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.244.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:cc:27:85:1c:a5:7b:09:c4:5e:aa:14:bc:a2:70:c4:d6:87:
d2:61:fc:7d:0e:f5:3b:3c:d4:de:66:88:2c:83:2a:c0:5a:25:
1d:87:cd:da:bc:fb:d7:d1:1d:a1:67:55:d7:16:ae:96:e5:98:
a4:fe:5d:49:9f:a7:b8:78:3a:6c:22:f3:5a:de:bb:79:e6:8e:
3b:fd:cf:87:8d:14:d3:76:7a:a0:1c:41:a2:28:b5:11:8e:be:
98:70:88:29:5b:a7:fe:da:63:3e:9b:05:2e:53:19:94:09:27:
55:79:a7:03:97:a5:e6:87:79:d8:8a:a5:25:d7:87:47:cb:62:
d2:45:f7:97:0c:ad:3e:a8:91:ff:c9:d9:8e:98:26:ce:7e:e2:
e4:bb:7c:2f:9a:4f:25:67:19:bb:d0:67:ad:ee:55:7a:23:4e:
17:a9:a0:3c:a0:e2:be:69:98:44:68:43:d9:c4:e0:a5:1c:60:
b4:e8:97:da:0e:52:d0:97:d5:2b:ec:ef:8b:f2:0d:f9:a4:bf:
51:6d:9f:88:cf:99:10:03:6d:3e:96:b6:20:cf:24:62:07:98:
9a:86:24:5a:92:61:fc:be:ea:44:47:5b:7d:0f:c4:d0:ab:db:
00:f2:c1:a7:22:b2:37:d5:ba:64:c1:7f:c7:6a:e8:42:06:0f:
90:ee:6f:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQ0Iy
NzNCMDk3OTk3QzAyQjRGNTJFNUMxQkI0RkVGRTY2Nzk3ODUwMB4XDTI1MDExNDA4
MTgyMFoXDTI2MDExNDA3NTMyOVowMzExMC8GA1UEAxMoNjIwRUI1NDcxMjIxMDhE
MTgzOUQwQkQ1QjcwODNFN0EwOUYxMzhCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMY07v10Ug9zLSwiiez61jY/mutRwdTpIt5PO3gt5AEjM35yXsZt
6Cm08Iy/f0OhIVfKKh6TWjs6Zw9btinr99ifvk+bi2PZZiO3jL6NVHsgxTAV3zzL
7hPF8mATD2xKWkcQ7x96qVcJbCiC4KTtjmbVs8NNmGr7Q2zH03Aekc8yMb0ygVVZ
rThFeAeKC1u29aph9kbc6N2qWkH2p85m3yuEI+MLi5jI1KbFtoEzKK6XZ8xZCn88
jXayt/cB7LzCfoKcBzxMef0hQ7YT0vpJYqQz8m7hyEfD7FtuhGwhrTQVRHqPulAI
bSZhi0M/uCSFH4kJh0vJQed2cRbM2NRf7FUCAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBRiDrVHEiEI0YOdC9W3CD56CfE4tTAfBgNVHSMEGDAWgBTssnOwl5l8ArT1Llwb
tP7+Znl4UDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMi83
TEp6c0plWmZBSzA5UzVjRzdULV9tWjVlRkEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwLzdMSnpzSmVaZkFLMDlTNWNHN1QtX21aNWVGQS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIyL1lnNjFSeEloQ05HRG5RdlZ0
d2ctZWdueE9MVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXa
9AAwDQYJKoZIhvcNAQELBQADggEBAB/MJ4UcpXsJxF6qFLyicMTWh9Jh/H0O9Ts8
1N5miCyDKsBaJR2Hzdq8+9fRHaFnVdcWrpblmKT+XUmfp7h4Omwi81reu3nmjjv9
z4eNFNN2eqAcQaIotRGOvphwiClbp/7aYz6bBS5TGZQJJ1V5pwOXpeaHediKpSXX
h0fLYtJF95cMrT6okf/J2Y6YJs5+4uS7fC+aTyVnGbvQZ63uVXojThepoDyg4r5p
mERoQ9nE4KUcYLTol9oOUtCX1Svs74vyDfmkv1Ftn4jPmRADbT6WtiDPJGIHmJqG
JFqSYfy+6kRHW30PxNCr2wDywacisjfVumTBf8dq6EIGD5Dub3E=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:59 2025 by rpki-client