Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/k6VoZRwgpYfsnmKzMd6ZekbaL9M.roa
File: k6VoZRwgpYfsnmKzMd6ZekbaL9M.roa (raw, json)
Hash identifier: wfl1chbZla5TtNY5p/2hho2b/d+O27zOfcgJp8kVv2g=
Subject key identifier: 93:A5:68:65:1C:20:A5:87:EC:9E:62:B3:31:DE:99:7A:46:DA:2F:D3
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0A62
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/k6VoZRwgpYfsnmKzMd6ZekbaL9M.roa
Signing time: Thu 06 Mar 2025 01:31:07 +0000
ROA not before: Thu 06 Mar 2025 01:31:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 58.66.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Mar 6 01:31:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=93A568651C20A587EC9E62B331DE997A46DA2FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:78:42:05:76:0d:5c:1c:57:fb:c0:59:10:
b7:55:9c:5c:7e:8d:35:71:74:09:60:da:43:34:88:
92:8c:df:94:c7:b2:14:00:13:b9:de:b1:ed:9c:80:
4c:eb:e8:c4:1a:de:cc:31:b7:71:37:bf:af:09:1a:
89:aa:fa:b4:d1:7c:e6:08:20:90:d1:14:62:14:78:
6e:8e:3d:62:a6:5b:ac:29:14:b1:c2:dd:d2:12:2d:
12:20:fe:33:ec:28:12:e4:3b:8e:0c:5b:12:8c:71:
9a:c4:97:19:a4:c4:b5:42:23:74:a8:3a:dd:74:e6:
a1:07:11:c1:55:b0:09:86:5b:98:c2:f0:a9:ae:eb:
0b:84:ab:f9:60:6f:fd:f9:ac:34:bc:9b:c9:38:e3:
56:41:c4:f6:f8:ae:37:dd:fe:f7:46:fe:3a:a5:c4:
94:00:3e:77:b7:a8:12:7d:d2:3a:f6:e4:7b:c4:e6:
e8:11:81:98:17:ae:08:76:87:c2:37:97:98:1d:f2:
69:1d:1d:4a:67:fb:de:85:8e:c4:df:28:ea:41:f7:
0f:28:89:6d:6f:5b:fd:06:01:81:8c:f2:8f:00:93:
52:6d:4d:46:44:93:f4:b3:4c:6a:fc:01:00:88:90:
64:74:3f:04:a9:e4:20:4f:b5:d7:16:73:99:1f:0a:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:68:65:1C:20:A5:87:EC:9E:62:B3:31:DE:99:7A:46:DA:2F:D3
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/k6VoZRwgpYfsnmKzMd6ZekbaL9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:37:79:93:36:19:cb:1c:ff:de:05:12:0f:2c:47:7f:90:ca:
42:c2:6f:9a:e7:a5:56:47:fc:6f:eb:ad:d0:a5:b0:4a:1d:cc:
a3:47:51:dc:54:08:ad:13:04:52:56:ec:c5:d4:ef:3e:2d:f2:
11:0b:cf:15:0d:53:da:30:05:b5:d9:f8:dd:3c:ed:a3:b9:ca:
d5:d6:c3:09:13:4d:27:ce:2e:09:1a:f2:c2:ed:31:42:b2:7f:
2a:65:22:12:00:62:00:bd:59:81:48:c2:2b:ce:85:e0:c8:54:
6c:8e:15:27:08:47:3a:2f:11:32:70:54:2d:8a:f5:ac:d1:19:
f3:31:c7:ab:56:2f:e2:30:99:95:ec:a3:bf:d1:0e:0d:ed:1d:
df:82:db:b9:4c:b2:3d:b0:55:69:4b:c5:d8:c5:c0:c9:57:e5:
12:18:ca:6f:61:be:b4:2b:0b:7e:69:aa:b4:2f:50:ce:13:9f:
92:20:eb:52:9d:5e:56:28:4d:7d:d2:e3:bd:e6:28:5e:ee:6d:
83:f8:26:83:0a:0c:95:aa:01:48:08:cf:ce:90:31:b2:74:49:
e3:5f:7f:9e:d8:54:72:84:0d:1e:0f:2f:7e:dd:fb:f6:85:74:
5f:67:d9:f2:7e:76:d0:23:fe:9e:4d:5d:46:2b:ab:b7:42:db:
65:b0:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:50 2025 by rpki-client