Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/_52-t9Q68QWCMJwuKVDnfg5DHcI.roa
File: _52-t9Q68QWCMJwuKVDnfg5DHcI.roa (raw, json)
Hash identifier: 5yDxdKlRDTYz3p5r5Tu5T4C7zb9tHVcIMWGjMd6wHrM=
Subject key identifier: FF:9D:BE:B7:D4:3A:F1:05:82:30:9C:2E:29:50:E7:7E:0E:43:1D:C2
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0948
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/_52-t9Q68QWCMJwuKVDnfg5DHcI.roa
Signing time: Fri 17 Jan 2025 01:23:45 +0000
ROA not before: Fri 17 Jan 2025 01:23:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 58.66.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FF9DBEB7D43AF10582309C2E2950E77E0E431DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:5e:8a:ba:0f:81:d3:ff:15:ce:b7:06:c9:
63:47:ac:1a:08:b2:e8:f9:a2:dc:a1:73:1f:aa:5b:
87:3b:7b:09:f8:18:ab:72:eb:42:2a:30:75:ec:72:
66:7d:d7:68:78:4d:5f:80:2f:ef:ad:26:f9:5a:e6:
79:eb:3c:23:32:63:9a:67:63:ee:41:8b:1b:a1:4d:
2e:41:bf:43:14:c7:7a:f5:86:8f:b3:78:f9:05:f7:
9d:e3:b1:bd:43:f5:bf:f4:de:80:77:7f:98:2a:60:
be:6a:85:2f:59:0f:6c:58:7e:a1:63:2d:cb:52:c2:
fd:17:41:26:29:48:93:cd:8f:2d:fc:90:e9:e8:f2:
e7:de:4c:43:16:62:24:68:fd:c1:90:4e:25:5e:0c:
f1:35:9c:ee:4b:9d:10:e4:85:34:b2:b3:a8:f2:bd:
1e:64:d1:0f:67:20:2f:25:86:12:9a:7b:f9:77:f1:
ba:55:da:31:66:d4:77:77:d8:f8:55:5b:10:85:51:
af:29:1b:81:7f:4d:b4:80:b7:f2:20:06:d1:48:35:
7a:f3:8e:f2:c9:e7:5a:59:e1:d4:a2:60:9c:ec:23:
87:a3:41:96:5a:0f:35:1e:12:16:d9:2a:f9:c5:70:
23:fb:f5:82:6f:cb:ce:43:fd:77:fa:93:81:cf:3e:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:BE:B7:D4:3A:F1:05:82:30:9C:2E:29:50:E7:7E:0E:43:1D:C2
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/_52-t9Q68QWCMJwuKVDnfg5DHcI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.136.0/21
Signature Algorithm: sha256WithRSAEncryption
84:71:cd:0b:b4:2f:00:7e:a7:a6:a9:73:47:de:2c:6c:b7:f8:
c9:ee:d1:0b:ef:01:1a:09:81:ee:8a:b4:80:52:e8:f7:ac:be:
10:16:6a:6b:5e:c7:87:1c:f1:02:c7:74:61:2b:74:e9:3c:31:
d0:0e:d3:99:71:39:6a:d8:20:55:24:e8:d3:07:87:3c:51:d8:
00:aa:39:39:24:c8:ca:d5:ea:a8:56:3f:85:b7:6c:0e:4e:aa:
77:d8:8d:d8:7e:09:cb:ae:d5:87:32:f4:05:79:11:55:69:37:
60:1c:eb:38:b5:44:74:dc:a5:ef:73:c8:a1:28:25:7e:c8:66:
7e:da:ea:d9:a4:00:2e:e1:c8:59:2b:c3:93:e1:42:29:85:86:
a5:c1:6b:ca:8b:08:77:73:7f:7c:6b:61:91:87:22:ac:e5:0d:
f4:63:6e:47:4a:b0:47:40:af:50:c3:7b:9e:40:f5:95:12:bd:
6d:14:35:c8:af:e4:9f:4f:60:93:5f:f8:b1:ff:1e:85:db:b1:
c1:57:c1:68:c4:38:b6:11:40:96:c2:68:96:56:da:5c:51:d6:
0d:ef:43:4c:f5:d3:a7:51:ec:13:e4:2e:c6:9d:6c:d3:7f:1f:
77:2e:0e:4d:a4:6a:40:af:1f:79:1b:72:20:63:f1:06:31:64:
ac:5f:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:58 2025 by rpki-client