Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/2ozjlB1S88hnOSA7cPU8Vmvgtag.roa
File: 2ozjlB1S88hnOSA7cPU8Vmvgtag.roa (raw, json)
Hash identifier: Ee+WJHFjEpPtUCnBEARQkVv59suXjcFxMjkFAAWQFvM=
Subject key identifier: DA:8C:E3:94:1D:52:F3:C8:67:39:20:3B:70:F5:3C:56:6B:E0:B5:A8
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0943
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/2ozjlB1S88hnOSA7cPU8Vmvgtag.roa
Signing time: Fri 17 Jan 2025 01:23:44 +0000
ROA not before: Fri 17 Jan 2025 01:23:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 58.66.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371 (0x943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DA8CE3941D52F3C86739203B70F53C566BE0B5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:c5:a7:ef:64:2e:ef:c9:a3:d7:e4:b9:c3:
1b:7d:23:0f:f6:e5:61:72:24:56:9e:44:1a:b0:cf:
26:c7:ab:d6:0e:f8:d1:0d:60:36:2c:54:7c:b4:18:
f8:03:cf:c1:6e:6b:22:e5:67:60:9c:db:10:ce:f9:
3f:f8:f1:fd:c1:ab:e0:0a:82:14:82:8b:be:49:32:
88:56:69:65:f8:17:39:f2:7d:de:bd:e7:60:b7:a8:
54:e5:93:e6:4c:89:29:f2:2c:7e:c0:75:ed:97:b2:
ab:d0:dd:16:fb:67:1b:8e:5e:5f:85:20:c0:b7:3b:
17:20:e2:96:ab:3e:6a:60:db:f3:9f:d4:41:9d:8a:
9a:b9:91:e5:b1:5a:2f:0f:de:6c:4d:1a:d7:d3:67:
38:cb:00:42:70:2e:5c:fe:a7:54:31:b1:b8:1e:3c:
d5:5a:2a:6a:c9:4c:b4:a6:ce:d9:28:0c:ee:f9:82:
c9:91:c6:3f:c0:be:7a:2f:02:5e:37:c2:38:90:47:
f6:60:ce:68:80:84:50:ee:26:67:27:b8:a9:d4:e5:
1e:7f:f3:03:7b:20:2b:2a:1f:ea:51:f0:46:91:fd:
9b:60:fa:7d:e5:f3:c2:f9:1d:76:46:62:76:a2:e4:
fb:06:8c:86:75:9a:82:8f:59:8d:dc:97:bb:a9:d5:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8C:E3:94:1D:52:F3:C8:67:39:20:3B:70:F5:3C:56:6B:E0:B5:A8
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/2ozjlB1S88hnOSA7cPU8Vmvgtag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:a0:6a:42:4b:81:61:6f:31:fc:cf:ad:89:27:9a:8c:f3:66:
78:a9:ea:05:09:a6:af:29:f1:ec:c3:8d:42:d4:e2:f6:7c:ee:
27:a8:ea:ab:07:d7:fa:4c:25:ba:23:76:a6:98:a7:9c:06:85:
01:b1:22:50:79:00:bf:c7:89:b0:3d:4d:15:e5:63:24:0c:4c:
b6:42:52:f0:ed:32:3b:c3:ab:1f:18:5f:aa:42:e4:8c:e3:5d:
d4:88:24:35:38:1d:22:3d:bb:ea:b7:50:8b:2f:7c:5f:0d:9b:
fa:77:e5:50:1c:29:e0:b0:8b:11:0e:21:47:df:79:bf:dc:04:
4a:22:b1:90:05:6f:68:b4:a9:72:8b:85:74:9c:44:71:4b:ec:
2d:2b:07:65:de:dc:6e:91:98:72:db:ba:6c:77:9c:89:cb:6c:
d6:f5:f8:e9:08:b9:ff:77:f6:7c:0c:a3:c0:f5:a5:c5:b5:1d:
d2:9d:ee:8b:ea:a3:1b:7f:3b:d4:f0:c9:c7:a3:61:f9:28:66:
0f:fa:52:cc:e0:36:41:c7:ee:b5:13:6b:1f:c9:12:fc:f4:c0:
13:a0:94:22:e5:da:e4:fc:33:42:43:9b:77:ec:df:1c:b0:28:
5d:0d:17:0e:c1:11:82:48:bb:9e:32:62:e7:a6:72:76:ed:b4:
c6:d9:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:23 2025 by rpki-client