Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa
File: Iq4-oAuIoTzbrOHevfHPAu87t3M.roa (raw, json)
Hash identifier: dl9W1zcVL4Q4lGUVccGN0g5LypHRBPvUrzwo4lqR0Do=
Subject key identifier: 22:AE:3E:A0:0B:88:A1:3C:DB:AC:E1:DE:BD:F1:CF:02:EF:3B:B7:73
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0635
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa
Signing time: Fri 23 Aug 2024 14:39:16 +0000
ROA not before: Fri 23 Aug 2024 14:39:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 4766
IP address blocks: 58.66.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 23 14:39:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=22AE3EA00B88A13CDBACE1DEBDF1CF02EF3BB773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:af:c6:8a:ee:da:0d:ef:fd:67:de:84:5b:
18:bc:2f:3a:39:16:ed:f0:53:13:10:b8:c6:5e:43:
39:67:02:eb:ef:d2:1d:88:d7:a3:ab:8b:72:85:0d:
bf:68:e9:5f:37:93:b4:86:67:46:76:21:8e:9c:21:
c7:82:25:aa:1c:94:e1:5c:67:e0:21:27:8a:36:be:
c1:f7:38:42:8e:07:4a:d4:95:e8:ac:69:b1:9b:7c:
ab:fa:4a:33:88:0b:56:29:d2:9a:e0:79:fd:66:00:
d7:e5:26:b2:4e:8d:21:07:3b:13:03:a5:52:af:5a:
61:0e:fe:d7:3d:3d:72:ad:6a:5e:03:65:52:f1:39:
e8:b7:7f:f1:18:82:ea:b5:47:30:be:58:47:b6:3a:
2d:b5:73:16:f3:e8:77:46:09:5c:af:4d:aa:94:9c:
a4:d0:1e:63:1b:c5:5f:d0:c5:ce:fc:75:c2:91:5c:
ca:93:51:b2:37:ff:fa:0f:bb:69:58:49:1c:be:08:
45:04:5c:2a:23:e0:20:ad:db:fd:70:83:8e:21:84:
60:6b:95:15:de:c5:03:ae:1c:b4:ed:1f:cf:2d:6d:
b0:17:36:ed:cb:49:ed:14:d3:37:ba:bf:21:b7:91:
ef:cc:de:84:eb:92:6d:c0:29:c7:3d:0a:a0:a5:d9:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:3E:A0:0B:88:A1:3C:DB:AC:E1:DE:BD:F1:CF:02:EF:3B:B7:73
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Iq4-oAuIoTzbrOHevfHPAu87t3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:e0:4b:c2:09:9d:c7:00:fb:94:c5:ba:e7:b0:83:56:cf:d8:
c6:25:3b:8f:bc:c3:05:cb:2f:41:70:aa:98:17:78:a3:6c:04:
b2:a1:6d:0f:10:bd:8b:76:57:d6:db:1a:58:e9:e0:1c:ef:e4:
10:ad:ef:7c:80:c4:77:42:09:e7:4d:1a:80:4b:de:71:6a:cf:
9c:99:d4:8e:16:10:1d:7f:da:ff:63:e2:82:28:c8:91:b0:56:
14:3a:ea:57:65:ae:c3:9d:cb:47:99:a5:03:3a:08:cd:ef:a8:
54:6f:b5:59:4a:03:09:ff:9b:f3:45:f5:a6:ff:4a:bc:d6:67:
ad:a6:75:42:2d:d8:bc:b6:18:05:e8:5c:81:67:fd:02:0b:98:
ab:2c:36:5b:49:3d:c0:9e:c0:dc:0c:c8:54:2f:3c:c7:9a:e2:
e4:e1:6f:7d:64:f1:73:27:28:1c:5a:1b:55:54:17:02:26:c8:
7e:28:bf:19:61:63:b9:54:af:50:fe:53:6e:0c:0b:e0:06:93:
36:b5:ac:0c:14:a2:7e:54:e6:0b:4a:b9:2d:a7:78:02:4f:2d:
66:45:ed:64:40:5b:bd:8b:b4:b4:f6:72:3f:a5:bb:c2:86:22:
8d:53:72:c9:0f:f1:9a:f5:05:17:12:68:dc:0c:29:a6:3d:30:
09:e3:0c:8e
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx
NDM5MTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIyQUUzRUEwMEI4OEEx
M0NEQkFDRTFERUJERjFDRjAyRUYzQkI3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTBa/Giu7aDe/9Z96EWxi8Lzo5Fu3wUxMQuMZeQzlnAuvv0h2I
16Ori3KFDb9o6V83k7SGZ0Z2IY6cIceCJaoclOFcZ+AhJ4o2vsH3OEKOB0rUleis
abGbfKv6SjOIC1Yp0prgef1mANflJrJOjSEHOxMDpVKvWmEO/tc9PXKtal4DZVLx
Oei3f/EYguq1RzC+WEe2Oi21cxbz6HdGCVyvTaqUnKTQHmMbxV/Qxc78dcKRXMqT
UbI3//oPu2lYSRy+CEUEXCoj4CCt2/1wg44hhGBrlRXexQOuHLTtH88tbbAXNu3L
Se0U0ze6vyG3ke/M3oTrkm3AKcc9CqCl2bAHAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUIq4+oAuIoTzbrOHevfHPAu87t3MwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvSXE0LW9BdUlvVHpick9IZXZm
SFBBdTg3dDNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC
uDANBgkqhkiG9w0BAQsFAAOCAQEApuBLwgmdxwD7lMW657CDVs/YxiU7j7zDBcsv
QXCqmBd4o2wEsqFtDxC9i3ZX1tsaWOngHO/kEK3vfIDEd0IJ500agEvecWrPnJnU
jhYQHX/a/2PigijIkbBWFDrqV2Wuw53LR5mlAzoIze+oVG+1WUoDCf+b80X1pv9K
vNZnraZ1Qi3YvLYYBehcgWf9AguYqyw2W0k9wJ7A3AzIVC88x5ri5OFvfWTxcyco
HFobVVQXAibIfii/GWFjuVSvUP5TbgwL4AaTNrWsDBSiflTmC0q5Lad4Ak8tZkXt
ZEBbvYu0tPZyP6W7woYijVNyyQ/xmvUFFxJo3Awppj0wCeMMjg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:42 2025 by rpki-client