Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/9iaRevOjItiB42OYClEdF--mFg0.roa
File: 9iaRevOjItiB42OYClEdF--mFg0.roa (raw, json)
Hash identifier: ED20hfSuADnFJmeeOaTjU4egLl9u4GrkffoC7KMPz4I=
Subject key identifier: F6:26:91:7A:F3:A3:22:D8:81:E3:63:98:0A:51:1D:17:EF:A6:16:0D
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0941
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9iaRevOjItiB42OYClEdF--mFg0.roa
Signing time: Fri 17 Jan 2025 01:23:43 +0000
ROA not before: Fri 17 Jan 2025 01:23:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4766
IP address blocks: 58.66.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369 (0x941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F626917AF3A322D881E363980A511D17EFA6160D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:84:9a:d6:80:57:e6:ba:97:31:e5:34:02:
29:bf:98:86:88:e3:79:41:48:35:1d:4b:05:a7:49:
0f:94:3a:80:4f:d6:da:51:6d:74:5a:4b:d9:44:63:
ed:97:4d:5d:04:50:b8:c1:ed:ac:13:f6:30:fa:50:
b8:78:94:01:a9:7b:18:37:0f:65:45:a1:c2:78:57:
8e:ac:3a:7f:25:43:7e:89:05:1b:1c:1b:ce:e0:2d:
c4:60:ab:a7:e7:86:4e:17:fe:62:6e:ba:f5:5f:c8:
09:46:ea:78:95:a1:2e:0e:3f:66:0c:0f:9e:da:84:
25:39:43:2b:87:86:47:a0:66:d7:9b:cd:56:aa:6d:
9e:5e:f4:ce:d1:47:a6:c9:ad:05:4b:8f:0e:53:29:
44:e2:53:18:1c:2a:77:39:e7:53:1b:fc:72:ae:9a:
2d:97:7a:16:38:0b:5c:d1:48:19:39:29:bd:a4:46:
aa:b5:94:71:ea:03:0e:0a:8f:91:19:59:8f:12:dd:
11:13:7e:d2:46:eb:aa:3c:28:12:15:fc:84:0b:de:
dd:1b:40:e8:71:ea:b1:f0:61:10:ce:eb:95:7e:14:
8b:13:15:00:18:90:f0:62:c0:5b:c7:51:26:94:ef:
b1:b5:db:78:d2:a9:f2:0e:52:02:a1:5d:6d:1e:0a:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:91:7A:F3:A3:22:D8:81:E3:63:98:0A:51:1D:17:EF:A6:16:0D
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/9iaRevOjItiB42OYClEdF--mFg0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.184.0/21
Signature Algorithm: sha256WithRSAEncryption
97:67:3c:ef:40:9c:aa:65:9c:b7:19:f2:c2:a9:66:cc:97:48:
0f:f4:32:aa:45:ba:bd:72:f2:33:53:0d:7d:54:8d:95:ee:0d:
1a:8c:e8:c8:c1:c7:47:39:26:fd:5e:36:88:d2:40:28:1e:95:
ee:49:e1:fa:60:b9:c4:12:df:12:23:0f:4b:f1:fe:06:5f:c6:
d5:58:fe:ee:eb:36:05:30:83:7e:43:bf:39:f3:7f:9c:04:ca:
e7:dd:65:5e:30:82:82:7a:88:7e:ba:a2:49:0e:27:91:d0:ce:
82:56:f3:9d:40:c4:75:b1:dd:12:f9:cb:fc:58:fa:3b:66:f8:
28:5e:6a:b8:e3:e9:46:f0:34:87:3e:21:07:ed:3b:51:09:2b:
48:f0:47:1b:2d:0b:26:8d:5d:f2:82:81:38:2c:ac:60:bb:52:
15:30:ec:76:f9:4a:37:62:49:9f:8f:57:33:bc:9f:2e:71:74:
2b:41:8b:25:d7:e6:6a:72:d5:17:6e:b7:8d:cb:f3:30:28:92:
65:a4:3c:43:71:28:b9:38:a5:87:a1:14:bc:f0:97:ab:69:f6:
ea:0b:9c:d6:57:48:56:ba:c4:fd:7b:c0:c0:c2:88:04:9b:cc:
97:10:d4:e6:2e:0c:97:7c:c4:ff:fd:8b:7d:f9:fa:fe:13:21:
15:aa:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:33 2025 by rpki-client