Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/boYyTCcOdkSTp9-h5jY1AqG4h3A.roa
File: boYyTCcOdkSTp9-h5jY1AqG4h3A.roa (raw, json)
Hash identifier: y+PN5U+es4DHeGgM1Z1LBLbEI83nq1HcaBTc/mu/EsY=
Subject key identifier: 6E:86:32:4C:27:0E:76:44:93:A7:DF:A1:E6:36:35:02:A1:B8:87:70
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0947
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/boYyTCcOdkSTp9-h5jY1AqG4h3A.roa
Signing time: Fri 17 Jan 2025 01:23:45 +0000
ROA not before: Fri 17 Jan 2025 01:23:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4766
IP address blocks: 58.66.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6E86324C270E764493A7DFA1E6363502A1B88770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:5a:20:d3:cb:85:ed:46:ab:0d:28:44:f8:
b7:5e:5c:9e:50:97:9b:20:49:e1:17:a1:b6:96:de:
f9:6a:97:b5:d5:aa:6d:29:ef:0f:96:76:9e:56:d9:
7e:6d:44:5d:5f:19:7e:f4:c8:2a:51:9c:cf:0c:81:
1b:17:a4:ba:41:19:fb:78:17:48:e3:3f:46:60:ea:
2f:88:b7:3f:d6:ca:d0:59:3a:7e:95:e8:52:be:ce:
9c:31:85:11:30:b5:de:bf:53:36:79:b1:58:ac:65:
22:13:e8:f3:b2:ce:cd:12:e1:bf:cf:18:0e:a6:f9:
51:7e:39:27:b1:50:0b:40:de:25:31:d9:cd:5e:66:
25:f4:ce:77:cb:4e:b8:32:c3:e3:7c:c6:cf:34:4b:
c0:48:c0:4e:ec:88:80:af:56:9b:23:85:2e:3a:e5:
12:63:ef:68:cd:2d:23:5e:e0:4b:25:34:d5:0a:6f:
1e:e5:40:b4:44:19:73:b3:b1:2d:66:ac:63:67:1e:
e4:a8:fb:ea:91:ac:a7:1d:f6:d5:12:57:8d:87:e6:
ff:91:d1:23:2f:b6:92:1a:a4:34:68:cb:90:ae:bc:
9a:c2:d6:f8:90:98:38:77:16:53:6b:e5:d8:75:53:
1d:d8:af:a4:63:b5:c7:77:f9:40:31:1c:ae:21:11:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:32:4C:27:0E:76:44:93:A7:DF:A1:E6:36:35:02:A1:B8:87:70
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/boYyTCcOdkSTp9-h5jY1AqG4h3A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.176.0/21
Signature Algorithm: sha256WithRSAEncryption
29:4f:d2:d2:bf:20:a7:c8:a6:d1:ae:a8:bb:e4:c5:7a:a7:7e:
a6:da:cd:21:9a:84:e0:e1:48:4b:70:59:34:0a:8c:10:f2:17:
77:45:ad:37:7c:0b:aa:de:09:c2:30:d5:e9:e1:01:d2:ac:87:
c8:6c:02:69:6d:89:f5:db:10:29:c9:c9:4c:c8:49:2a:42:29:
96:0f:ae:ee:9c:47:6c:61:13:00:c1:81:05:05:7d:d5:f4:66:
03:69:fa:3d:d5:f7:a3:2c:b7:7b:d5:08:bb:22:c3:89:07:77:
9a:06:16:88:65:5b:56:41:ad:e8:ae:a5:a8:a4:bc:b3:02:9c:
92:2c:2e:15:57:dc:e4:a6:b4:4d:b4:70:e8:3e:54:08:d9:63:
f8:57:ff:ec:e6:43:e4:d4:cd:b4:33:d4:ee:8c:6a:e1:27:9e:
fc:0a:75:64:74:f1:d5:c0:06:9a:b8:1c:e5:90:88:a6:9f:a5:
9f:72:b4:4f:f2:27:fe:db:df:16:0e:9d:fb:2f:58:fd:49:81:
c5:11:c4:4b:d8:68:f4:22:55:3b:c1:d6:0a:a4:1e:53:97:98:
d6:5e:68:ef:f8:10:64:e3:46:55:73:8c:5c:9c:1d:c4:d9:f2:
4e:ef:38:cb:12:2e:2b:ba:fb:41:5c:42:bf:b8:a0:f9:99:5d:
ce:44:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:20 2025 by rpki-client