Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/SF2lHtpzit-QLQ3QzMtgYYBnZjM.roa
File: SF2lHtpzit-QLQ3QzMtgYYBnZjM.roa (raw, json)
Hash identifier: zKZ/D0QOCOUEioknuImsmOvNu0l1OIQSRVC0uHmtovg=
Subject key identifier: 48:5D:A5:1E:DA:73:8A:DF:90:2D:0D:D0:CC:CB:60:61:80:67:66:33
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 094C
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/SF2lHtpzit-QLQ3QzMtgYYBnZjM.roa
Signing time: Fri 17 Jan 2025 01:23:46 +0000
ROA not before: Fri 17 Jan 2025 01:23:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 58.66.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=485DA51EDA738ADF902D0DD0CCCB606180676633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:a5:ce:59:2a:b3:af:89:42:a3:c2:6f:76:
a7:0f:37:1b:70:c0:60:95:15:e1:2d:e0:32:e1:b4:
a2:b7:45:fb:b0:18:60:63:e7:1c:f5:c8:6a:84:eb:
ad:5a:ad:a9:ae:c3:d6:0a:8d:d0:41:f1:f5:c9:b2:
ba:58:02:39:b8:97:de:7d:fb:5a:bd:4b:78:e1:fd:
4e:dd:56:48:60:96:6f:40:22:f8:42:86:a9:67:21:
33:c0:54:af:a2:06:a3:40:29:fd:ad:7f:1d:88:c9:
8f:33:96:8d:0a:71:92:af:8b:8a:6f:9a:39:9a:1f:
a1:2c:b6:99:09:0d:e9:7b:d2:39:13:7c:fe:43:97:
3c:b8:24:3a:2c:55:f1:ae:34:7a:ba:d0:21:90:b1:
4a:54:07:0e:c0:23:34:97:4c:78:7f:4b:7a:3d:b7:
af:89:ea:57:0b:9d:0f:5f:ff:09:13:2f:6f:63:14:
6f:9a:a1:5c:1d:de:89:8e:42:1b:7c:b1:48:85:44:
ed:e0:64:6d:17:3d:0e:b6:b4:b4:c1:ae:8a:b0:46:
ea:2d:50:1d:4f:29:db:e6:77:24:bb:c9:e8:26:42:
7c:25:99:94:9e:84:65:bd:43:1f:30:a5:53:ad:9b:
da:c6:11:1b:b6:38:cf:84:4c:cf:a3:c6:bd:6b:f9:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5D:A5:1E:DA:73:8A:DF:90:2D:0D:D0:CC:CB:60:61:80:67:66:33
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/SF2lHtpzit-QLQ3QzMtgYYBnZjM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.72.0/21
Signature Algorithm: sha256WithRSAEncryption
81:4a:56:6e:45:f4:e4:a7:76:77:51:bc:ab:7f:69:7e:49:67:
9e:2c:6f:99:27:28:48:bc:7e:99:e5:bd:2f:17:a8:a8:47:bd:
aa:05:84:27:d6:2d:87:4c:6d:6b:8a:d8:82:f8:fd:6c:56:09:
03:5f:96:1e:79:96:6d:ba:6d:56:cc:72:f1:45:ab:83:b7:d0:
b2:06:f7:b8:50:73:b7:86:dd:2e:d4:16:dd:eb:a2:0e:d4:21:
6a:a9:23:07:80:66:41:3f:48:35:77:9a:75:c7:20:2a:49:ec:
ef:a2:cd:dc:0e:a3:09:29:b3:0b:a3:dc:1c:5c:be:72:29:1c:
dc:60:10:1d:f3:43:c5:89:4c:7f:07:9e:df:92:63:24:61:70:
67:09:95:ff:07:5c:80:0c:06:0a:1e:62:0b:b6:f6:65:64:ba:
fc:b1:1e:95:20:a1:fe:ae:bc:b4:e1:e9:00:bf:38:a1:5d:e0:
3b:df:82:23:16:56:32:ea:3b:b0:77:b1:0a:22:bd:35:93:20:
48:8b:a4:74:18:49:7e:44:0d:40:f2:9e:86:6b:78:4f:23:aa:
c6:ba:f6:0e:83:bc:b9:3c:4e:ab:87:8e:f8:ee:67:5a:f4:a4:
46:49:42:4a:26:6f:0e:71:e2:ab:46:a6:89:7e:d3:62:4a:d5:
4b:83:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:21 2025 by rpki-client