Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/TPEuM2-pSPV38dBHWv1TAoq55eg.roa
File: TPEuM2-pSPV38dBHWv1TAoq55eg.roa (raw, json)
Hash identifier: JY+Ha+/o8rzEGSu90PleMcBBfWjxsqegP2HSVdwoPXY=
Subject key identifier: 4C:F1:2E:33:6F:A9:48:F5:77:F1:D0:47:5A:FD:53:02:8A:B9:E5:E8
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0811
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/TPEuM2-pSPV38dBHWv1TAoq55eg.roa
Signing time: Tue 19 Nov 2024 12:40:41 +0000
ROA not before: Tue 19 Nov 2024 12:40:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 58.66.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Nov 19 12:40:41 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4CF12E336FA948F577F1D0475AFD53028AB9E5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:7e:a3:30:8c:9b:c4:01:fe:85:1e:df:cd:
9e:e7:0a:36:a3:9b:67:70:bc:e7:f6:5b:5b:a5:41:
d0:03:47:22:2c:df:33:8c:06:b6:cb:62:4c:eb:74:
44:22:d2:b6:7c:88:f8:e0:a0:75:13:83:bf:e1:42:
a1:16:b1:e2:f3:34:5d:e5:b2:cf:e0:87:67:0a:fd:
99:0e:aa:09:35:f1:4f:40:4c:0b:4e:c6:05:cd:f0:
92:18:df:18:77:db:a5:4b:f6:b0:a9:a4:03:77:4b:
1d:69:f5:27:ae:93:f7:54:8d:b5:1d:ec:03:76:86:
81:8e:0c:dd:9e:4f:74:a0:4f:6a:68:0b:e3:a4:cf:
5a:9b:06:cd:c2:69:b5:51:d1:5c:17:cd:9a:98:af:
db:98:0c:d7:76:60:16:1d:0f:65:54:08:76:7a:c6:
23:82:cd:59:62:32:26:f6:d2:b5:a4:38:bb:6d:89:
29:02:18:dc:41:b3:28:7e:4b:bb:d0:51:b9:cb:7d:
fa:d0:39:0b:66:de:08:da:ea:92:f5:58:db:32:a5:
b7:a2:0c:73:74:86:ae:6b:21:6c:e5:5b:1c:a4:6b:
87:5c:7a:67:35:10:63:b5:9b:31:f1:e8:e5:12:5d:
62:d3:12:a8:bc:1d:55:82:33:49:b5:25:b5:5a:09:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:2E:33:6F:A9:48:F5:77:F1:D0:47:5A:FD:53:02:8A:B9:E5:E8
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/TPEuM2-pSPV38dBHWv1TAoq55eg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:01:4a:f0:56:61:f2:63:70:28:af:c1:7d:36:9f:26:8a:9d:
a3:14:be:89:67:eb:eb:9c:3c:31:8d:7e:9c:71:da:fb:2d:e2:
6b:6d:58:be:fe:5f:a1:47:d7:c4:6f:7c:54:c0:77:64:fd:9e:
2d:18:fb:e5:cf:00:ad:63:64:9b:45:64:36:26:a9:ee:b1:f6:
d3:1f:9f:18:8b:45:8a:7c:ce:a8:33:94:f7:53:c6:e4:f1:11:
0e:5b:bc:a3:5c:1f:8d:85:43:b9:3e:aa:06:25:16:9c:6d:dd:
fd:ed:10:8b:eb:e5:92:56:17:ec:22:e5:ec:45:f0:c7:d0:9d:
0d:96:32:d6:a9:65:fe:66:5f:80:d6:8c:d8:59:c4:b6:8c:9e:
81:95:50:0b:59:94:47:8b:06:1b:3a:6b:7e:58:a2:d6:20:be:
dc:83:29:9b:d2:be:95:3b:54:01:50:e7:e6:43:ba:cc:4c:2f:
ca:3d:12:ea:16:22:f0:4f:02:e4:88:7e:72:d5:06:87:e0:4c:
f5:cd:cd:85:2a:68:eb:eb:bf:e1:43:5d:15:f3:dd:7a:d3:a8:
97:8b:4f:2c:ee:42:ae:d5:73:75:52:4d:99:ec:71:a0:53:d8:
88:fd:19:ad:a3:3e:97:7b:25:83:72:cf:99:48:4f:d7:28:7e:
8b:31:1f:8d
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDExMTkx
MjQwNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDRjEyRTMzNkZBOTQ4
RjU3N0YxRDA0NzVBRkQ1MzAyOEFCOUU1RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk2n6jMIybxAH+hR7fzZ7nCjajm2dwvOf2W1ulQdADRyIs3zOM
BrbLYkzrdEQi0rZ8iPjgoHUTg7/hQqEWseLzNF3lss/gh2cK/ZkOqgk18U9ATAtO
xgXN8JIY3xh326VL9rCppAN3Sx1p9Seuk/dUjbUd7AN2hoGODN2eT3SgT2poC+Ok
z1qbBs3CabVR0VwXzZqYr9uYDNd2YBYdD2VUCHZ6xiOCzVliMib20rWkOLttiSkC
GNxBsyh+S7vQUbnLffrQOQtm3gja6pL1WNsypbeiDHN0hq5rIWzlWxyka4dcemc1
EGO1mzHx6OUSXWLTEqi8HVWCM0m1JbVaCQH1AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUTPEuM2+pSPV38dBHWv1TAoq55egwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvVFBFdU0yLXBTUFYzOGRCSFd2
MVRBb3E1NWVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADpC
sDANBgkqhkiG9w0BAQsFAAOCAQEAqAFK8FZh8mNwKK/BfTafJoqdoxS+iWfr65w8
MY1+nHHa+y3ia21Yvv5foUfXxG98VMB3ZP2eLRj75c8ArWNkm0VkNiap7rH20x+f
GItFinzOqDOU91PG5PERDlu8o1wfjYVDuT6qBiUWnG3d/e0Qi+vlklYX7CLl7EXw
x9CdDZYy1qll/mZfgNaM2FnEtoyegZVQC1mUR4sGGzprflii1iC+3IMpm9K+lTtU
AVDn5kO6zEwvyj0S6hYi8E8C5Ih+ctUGh+BM9c3NhSpo6+u/4UNdFfPdetOol4tP
LO5CrtVzdVJNmexxoFPYiP0ZraM+l3slg3LPmUhP1yh+izEfjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:29 2025 by rpki-client