Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa
File: YPtiTpC3_2ladsp2RnmsGeRmYok.roa (raw, json)
Hash identifier: BcNVoszKWuXYJShkJ3+9H/gyVtqB/H0DWX2zmfaWA5w=
Subject key identifier: 60:FB:62:4E:90:B7:FF:69:5A:76:CA:76:46:79:AC:19:E4:66:62:89
Certificate issuer: /CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Certificate serial: 0444
Authority key identifier: B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa
Signing time: Tue 05 Nov 2024 07:32:50 +0000
ROA not before: Tue 05 Nov 2024 07:32:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 211392
IP address blocks: 157.66.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52F0F3FF7371FF1CE9D823E9549FC1158B16A2A
Validity
Not Before: Nov 5 07:32:50 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=60FB624E90B7FF695A76CA764679AC19E4666289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:b5:2e:ce:dd:02:93:61:26:67:0c:df:66:
20:40:68:d0:81:2e:e4:34:ce:a8:ca:84:9f:4a:eb:
45:4d:2c:35:30:db:02:5a:5b:5f:e6:1a:64:29:8d:
f0:e5:c7:d4:15:93:43:67:17:7f:11:e3:c8:7c:6b:
75:65:fc:e0:8a:15:3c:88:29:0d:15:97:e6:a8:2a:
36:cb:21:8b:6f:00:39:10:ae:25:41:14:32:f7:78:
ad:9b:85:69:c7:c5:4e:7b:7a:67:fa:ff:01:ba:ed:
ed:de:d6:77:16:06:52:0f:e8:4c:59:89:95:57:07:
02:4f:9e:85:76:84:a2:62:6b:6e:02:1c:95:ab:6f:
60:9e:96:6d:ca:04:74:81:65:05:8e:33:43:21:9f:
f9:0e:ce:69:c6:a3:6a:41:f9:7e:c2:57:ab:fd:b6:
af:a1:86:31:37:72:8f:08:c8:8a:89:0d:93:9a:ce:
d1:39:a8:6e:08:b6:e3:92:23:f2:28:fa:39:37:1d:
37:6c:e6:85:47:7a:50:8a:d8:e2:21:20:17:be:36:
91:68:66:c6:19:6e:2a:60:6b:6a:e8:71:38:2a:d4:
87:35:a2:76:4b:c5:b2:03:93:9e:37:9f:d4:5a:0f:
4d:2a:61:53:b0:12:41:ba:84:3e:14:6b:1c:7d:3e:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:62:4E:90:B7:FF:69:5A:76:CA:76:46:79:AC:19:E4:66:62:89
X509v3 Authority Key Identifier:
keyid:B5:2F:0F:3F:F7:37:1F:F1:CE:9D:82:3E:95:49:FC:11:58:B1:6A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/tS8PP_c3H_HOnYI-lUn8EVixaio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tS8PP_c3H_HOnYI-lUn8EVixaio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3272/YPtiTpC3_2ladsp2RnmsGeRmYok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.42.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:ca:c6:23:f4:e4:55:f7:18:60:97:71:a0:10:27:34:ad:f9:
ee:54:20:ed:bd:31:71:7f:7c:4f:6a:7b:ba:53:31:c8:58:f1:
5a:02:e9:30:4a:c9:8c:1a:93:b9:03:a8:52:dc:a6:83:e7:b5:
a9:cb:d9:f9:ca:36:b6:ac:df:cf:94:e1:c5:f7:d7:f5:90:54:
cb:60:7f:7c:25:3f:7c:92:e5:37:39:14:12:3e:ed:df:7a:97:
f7:22:15:0c:ad:d1:1a:3c:de:8b:c1:21:90:ef:e2:27:89:76:
f2:f1:d6:bc:2e:6a:5f:4d:39:45:8d:7b:f6:f4:bb:c1:6d:03:
b4:50:b0:ab:e1:b6:95:85:ba:42:8d:0d:7c:08:b7:3b:3c:fa:
2b:17:7d:25:4b:5a:ee:44:68:9f:0f:ef:86:61:f3:eb:4e:7a:
9f:52:a0:12:99:22:80:83:d6:4d:37:ff:4e:0f:b6:77:9a:6c:
ee:cc:45:36:24:86:2a:bb:51:ee:21:a4:68:00:08:fe:c4:c5:
8c:b7:8f:e9:d6:8f:64:12:15:e9:93:98:e4:a1:38:f1:4e:00:
22:dc:02:f6:4d:89:72:a9:d1:72:20:20:32:01:ab:a7:ff:a7:
5a:47:bf:a5:29:32:88:e7:26:80:7e:53:2b:5e:ae:aa:6e:ed:
42:09:5d:61
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUy
RjBGM0ZGNzM3MUZGMUNFOUQ4MjNFOTU0OUZDMTE1OEIxNkEyQTAeFw0yNDExMDUw
NzMyNTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYwRkI2MjRFOTBCN0ZG
Njk1QTc2Q0E3NjQ2NzlBQzE5RTQ2NjYyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBBbUuzt0Ck2EmZwzfZiBAaNCBLuQ0zqjKhJ9K60VNLDUw2wJa
W1/mGmQpjfDlx9QVk0NnF38R48h8a3Vl/OCKFTyIKQ0Vl+aoKjbLIYtvADkQriVB
FDL3eK2bhWnHxU57emf6/wG67e3e1ncWBlIP6ExZiZVXBwJPnoV2hKJia24CHJWr
b2Celm3KBHSBZQWOM0Mhn/kOzmnGo2pB+X7CV6v9tq+hhjE3co8IyIqJDZOaztE5
qG4ItuOSI/Io+jk3HTds5oVHelCK2OIhIBe+NpFoZsYZbipga2rocTgq1Ic1onZL
xbIDk543n9RaD00qYVOwEkG6hD4Uaxx9PuGPAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUYPtiTpC3/2ladsp2RnmsGeRmYokwHwYDVR0jBBgwFoAUtS8PP/c3H/HOnYI+
lUn8EVixaiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3
Mi90UzhQUF9jM0hfSE9uWUktbFVuOEVWaXhhaW8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3RTOFBQX2MzSF9IT25ZSS1sVW44RVZpeGFpby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzIvWVB0aVRwQzNfMmxh
ZHNwMlJubXNHZVJtWW9rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAZ1CKjANBgkqhkiG9w0BAQsFAAOCAQEADsrGI/TkVfcYYJdxoBAnNK357lQg
7b0xcX98T2p7ulMxyFjxWgLpMErJjBqTuQOoUtymg+e1qcvZ+co2tqzfz5ThxffX
9ZBUy2B/fCU/fJLlNzkUEj7t33qX9yIVDK3RGjzei8EhkO/iJ4l28vHWvC5qX005
RY179vS7wW0DtFCwq+G2lYW6Qo0NfAi3Ozz6Kxd9JUta7kRonw/vhmHz6056n1Kg
EpkigIPWTTf/Tg+2d5ps7sxFNiSGKrtR7iGkaAAI/sTFjLeP6daPZBIV6ZOY5KE4
8U4AItwC9k2JcqnRciAgMgGrp/+nWke/pSkyiOcmgH5TK16uqm7tQgldYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:50 2025 by rpki-client