Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/Jyt3482tHvOuiKO514oEbBl-B0w.roa
File: Jyt3482tHvOuiKO514oEbBl-B0w.roa (raw, json)
Hash identifier: IPCJY/CUQOkbFbT++a+JAM3kTeGDsjb+C1Y5AAH3m5E=
Subject key identifier: 27:2B:77:E3:CD:AD:1E:F3:AE:88:A3:B9:D7:8A:04:6C:19:7E:07:4C
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0A67
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Jyt3482tHvOuiKO514oEbBl-B0w.roa
Signing time: Thu 06 Mar 2025 12:40:15 +0000
ROA not before: Thu 06 Mar 2025 12:40:15 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 58.66.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2663 (0xa67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Mar 6 12:40:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=272B77E3CDAD1EF3AE88A3B9D78A046C197E074C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:81:dd:11:4a:5a:ae:12:51:ca:a1:a4:81:cb:
c5:eb:63:3c:c5:5b:13:8a:a5:f2:57:d0:13:1f:88:
1e:1e:78:57:ec:00:fc:3d:cc:55:e3:65:b8:63:8d:
80:6f:a7:bb:21:ff:fa:c2:de:69:2b:fc:31:21:82:
f5:cb:9e:1e:ba:e4:94:8e:b8:52:32:be:0c:77:e1:
92:97:d1:e8:67:2a:70:6d:0c:94:bc:88:1a:43:fa:
86:80:eb:cf:d7:b0:29:23:a7:e2:0b:26:d1:6b:79:
b8:8d:c4:f0:b4:0e:1a:58:39:60:78:8b:c6:92:1d:
2c:64:3e:f4:22:dc:66:88:a0:a4:b3:2c:ed:33:3f:
e0:0f:87:d9:b7:1f:e2:43:a8:55:aa:f7:ba:00:8c:
c5:db:4c:30:20:7c:f0:ca:af:1f:09:be:96:8f:c4:
c1:d5:88:9a:12:b2:e5:3f:39:5f:a6:9b:b3:5a:bb:
87:b4:bb:f3:f3:8b:e3:e6:45:f9:be:2b:ca:12:ac:
04:11:49:ba:b7:da:2f:64:41:87:12:1a:7c:2a:a8:
ee:a4:a4:3c:fb:d0:cd:ff:88:40:a6:95:41:24:e3:
5b:af:b3:c1:55:46:3e:fd:e9:f2:1c:77:f4:1d:70:
54:49:92:ec:ca:60:7d:56:75:31:40:e6:c4:0a:fe:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:77:E3:CD:AD:1E:F3:AE:88:A3:B9:D7:8A:04:6C:19:7E:07:4C
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/Jyt3482tHvOuiKO514oEbBl-B0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:cd:6b:45:0f:e3:2a:32:f2:46:07:21:19:5a:0b:f4:2b:80:
f8:7f:27:69:df:19:b2:60:ec:57:64:72:8d:ed:cf:5f:b4:b5:
4b:cb:8b:7e:26:61:86:5b:db:36:81:9d:6a:c9:8c:bd:d4:d5:
fd:31:03:b2:18:ab:42:19:44:9a:0d:fb:eb:ee:69:4d:b6:0a:
fd:cc:34:a3:9f:48:2e:fd:7b:2a:2f:68:0b:67:c8:dd:93:37:
c0:5e:be:a4:20:8f:6d:e5:33:f8:e3:e7:df:08:84:75:65:ba:
60:17:ad:2e:7d:e1:3d:c2:d2:4d:f0:db:08:62:35:74:4f:2b:
3c:de:43:a0:b0:fd:9a:65:0f:4b:f9:c0:3a:aa:8b:0a:76:4b:
88:ce:1c:9a:07:fa:57:3b:26:7f:c0:f2:07:06:42:43:1c:ef:
90:9f:48:ed:d6:2c:c6:2b:59:37:c5:96:29:77:18:fa:b6:70:
04:b6:b3:c2:d1:3a:5f:85:ff:db:8f:36:e8:52:2a:d3:97:74:
02:f4:4f:e6:0d:62:80:3f:f7:f5:0c:da:e0:73:62:98:02:cb:
4d:e4:1e:fd:ec:62:f7:83:96:4a:85:99:92:e2:8b:e7:30:8f:
4d:5f:7c:52:d6:65:1c:05:b4:49:d7:2c:91:5a:62:a7:bc:a6:
e9:33:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:29 2025 by rpki-client