Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/mA2pZ4e1q1QTqiZTDo3IT1PxBdI.roa
File: mA2pZ4e1q1QTqiZTDo3IT1PxBdI.roa (raw, json)
Hash identifier: s1stfzjKBO3qpb0hKkyXtSOhidW4fqlVwKmOrTT9U10=
Subject key identifier: 98:0D:A9:67:87:B5:AB:54:13:AA:26:53:0E:8D:C8:4F:53:F1:05:D2
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 093F
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mA2pZ4e1q1QTqiZTDo3IT1PxBdI.roa
Signing time: Fri 17 Jan 2025 01:23:43 +0000
ROA not before: Fri 17 Jan 2025 01:23:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 58.66.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=980DA96787B5AB5413AA26530E8DC84F53F105D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:69:16:19:69:96:2c:56:6b:bb:c6:0c:74:
0f:7f:79:29:1f:b1:4a:e6:84:7a:8b:83:2a:34:0b:
fb:d9:33:5b:9b:78:9e:da:66:de:65:33:84:50:a1:
80:a6:22:2c:10:8d:68:32:48:6f:e7:57:f4:fc:58:
2d:9b:6e:9c:16:60:85:38:d7:51:6b:2d:48:ee:98:
47:4d:05:09:5f:28:f8:24:d7:58:16:cf:1c:f9:4e:
84:c9:c7:24:7b:60:a2:d2:1e:21:6f:89:bb:fc:d1:
64:08:d1:4d:d4:af:26:66:27:74:46:4d:6b:ca:48:
74:0a:c5:b4:15:43:58:e8:a0:4f:53:f9:b3:e0:8e:
f7:8d:8b:01:c9:65:da:ec:1d:6a:77:d7:e4:cb:2c:
0a:04:c9:39:09:70:d8:bd:8a:8c:86:05:30:12:ec:
25:e6:ea:19:65:10:d2:fc:4e:54:d7:a9:8d:52:4d:
8e:ca:b1:b9:a7:4b:d9:14:77:82:d9:23:bf:f9:d6:
27:6b:cb:dd:69:04:63:46:5b:e2:1d:ee:12:a9:31:
e5:02:71:c3:2c:c0:b9:42:41:7e:4b:ad:f5:4b:28:
17:db:d7:91:87:e8:09:0b:c6:81:f8:8d:eb:89:71:
f2:24:0a:ca:ea:58:a7:32:f6:09:be:e4:f6:6e:79:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:A9:67:87:B5:AB:54:13:AA:26:53:0E:8D:C8:4F:53:F1:05:D2
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mA2pZ4e1q1QTqiZTDo3IT1PxBdI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:d9:ea:84:dd:1f:e1:7b:0f:34:83:d7:1c:4c:66:c8:09:3f:
ec:b1:3a:c8:4c:4c:69:cd:d9:f0:41:12:3e:b9:6f:c0:bf:e0:
88:d2:7c:8d:6f:1f:74:28:ee:de:e3:29:af:cc:d6:d9:4a:7b:
e0:a0:36:c5:9f:9a:99:fc:8b:84:b0:79:6b:0d:24:42:cb:c7:
f0:b3:4e:da:7c:1b:81:34:19:78:42:33:f2:a6:a4:c5:30:e6:
ac:4b:66:72:f2:66:80:60:6d:d1:d5:12:5f:79:e1:78:b7:04:
57:80:0c:ae:4a:f2:2c:03:f1:3a:30:41:92:38:6d:30:e9:7e:
cf:49:8f:0c:1a:35:d8:c6:3b:71:a1:12:18:e8:16:b8:17:ce:
06:cc:1c:56:ac:6f:24:bf:8f:73:65:07:a9:ed:0f:57:b1:49:
fb:c5:08:4b:69:46:c5:2d:4b:d7:bc:b0:0b:c6:1c:d0:03:39:
4c:e4:3a:9d:a2:bf:7e:a1:53:6b:0a:1f:1b:d6:b9:34:e5:2f:
9e:d4:0e:c5:f3:7d:bb:63:93:32:fc:33:64:56:ff:24:cb:36:
91:d5:ff:c0:9f:3a:28:a6:6a:78:c5:44:87:89:07:56:70:30:
9a:17:ea:05:c6:11:f8:a5:51:60:c8:18:c8:ff:03:8a:f7:c2:
0b:c9:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:15 2025 by rpki-client