Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/0FtZiulbyfUSnIDa7m07o2xQDX4.roa
File: 0FtZiulbyfUSnIDa7m07o2xQDX4.roa (raw, json)
Hash identifier: RclZRfbKQqUN7ZwZeHWpfNT8t4uF92nGoUqUDicbwbg=
Subject key identifier: D0:5B:59:8A:E9:5B:C9:F5:12:9C:80:DA:EE:6D:3B:A3:6C:50:0D:7E
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0945
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/0FtZiulbyfUSnIDa7m07o2xQDX4.roa
Signing time: Fri 17 Jan 2025 01:23:44 +0000
ROA not before: Fri 17 Jan 2025 01:23:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 58.66.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D05B598AE95BC9F5129C80DAEE6D3BA36C500D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:86:f3:30:18:60:ef:00:08:ff:7f:54:71:
7c:1b:74:a6:82:09:2a:5e:3b:e5:32:5c:9c:3a:9e:
b8:b4:dd:43:35:a4:f0:1c:6b:db:da:05:f7:9c:c6:
53:f4:97:92:72:2e:cb:bd:51:25:1f:cd:06:43:4a:
d9:68:5a:f8:6e:f6:1c:97:16:81:c6:76:ca:d9:27:
14:e2:07:69:66:d2:a5:c5:aa:28:7d:29:93:47:09:
c1:93:9f:92:de:d9:44:97:f0:cf:2c:d5:75:f2:4f:
58:9a:a4:e5:ee:09:c3:a2:d5:38:9a:84:6c:17:c5:
3e:b9:d9:a2:ef:e8:0b:bd:f4:62:c2:bb:24:1f:50:
ec:97:44:cd:5c:a1:20:38:d6:bc:f8:c0:99:42:a4:
b0:eb:4b:a3:0d:86:f8:22:30:f1:2d:cb:77:c1:f0:
21:09:4e:55:a5:18:26:87:ea:e4:31:6e:77:6c:6c:
20:28:36:e9:6f:46:f7:e9:51:ac:8c:a8:f9:84:fc:
59:e2:74:66:69:01:c0:cf:da:d9:57:16:17:21:02:
fd:5b:84:2f:61:0f:8f:15:b9:c1:85:c8:9e:1d:99:
38:e3:c7:93:20:fe:41:47:76:cd:c6:38:f0:d3:48:
ca:65:d9:9e:8a:2f:ae:c7:ec:7e:71:77:ad:15:1f:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5B:59:8A:E9:5B:C9:F5:12:9C:80:DA:EE:6D:3B:A3:6C:50:0D:7E
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/0FtZiulbyfUSnIDa7m07o2xQDX4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:62:00:7f:5d:b0:82:02:51:97:bf:ba:e5:f4:72:fb:89:a9:
36:f7:87:a7:3d:67:ae:d6:73:d9:95:90:76:d3:a8:16:b3:9b:
5f:06:40:f4:a9:1a:7b:f7:a4:66:e9:c8:84:0c:1d:43:42:2f:
15:52:d4:24:fd:5f:13:b3:41:bf:6c:79:6f:6f:ed:19:54:18:
28:19:27:3d:20:da:b3:4f:4b:54:43:c5:56:ec:28:87:0f:82:
06:88:cd:c0:da:b8:1b:81:f2:f3:bc:58:ea:45:c0:82:65:cb:
4d:33:3f:fa:5f:bc:ca:31:77:51:66:66:bd:aa:37:ba:58:79:
de:24:40:52:86:39:5f:af:97:c2:e2:ce:f1:07:10:6d:db:9d:
0f:52:20:c3:ef:2b:37:a2:7e:90:0c:1a:42:af:bc:b9:55:47:
e6:a1:19:eb:68:aa:8c:1e:cd:d6:c4:90:1e:56:a7:b2:c3:94:
0a:1e:7d:27:42:33:30:7d:38:f8:4e:d8:0b:21:d6:6e:b2:dc:
c8:21:ec:3f:8b:0a:0b:aa:22:22:46:cd:36:77:79:11:9b:4e:
d2:cb:0f:62:1d:46:8f:c5:2b:f1:45:7c:ba:ae:50:0d:a6:ed:
3e:a2:b4:af:81:e7:c1:22:43:3e:26:72:72:2f:43:7a:7b:8a:
68:5e:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:35 2025 by rpki-client