Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/mGrtDSFi1a0tcgFVh2M8V4nCryQ.roa
File: mGrtDSFi1a0tcgFVh2M8V4nCryQ.roa (raw, json)
Hash identifier: e/CO5VpgwZuxc7CsBWlsGAA4jbFtIFP4PTsClrgXLmo=
Subject key identifier: 98:6A:ED:0D:21:62:D5:AD:2D:72:01:55:87:63:3C:57:89:C2:AF:24
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 093D
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mGrtDSFi1a0tcgFVh2M8V4nCryQ.roa
Signing time: Fri 17 Jan 2025 01:23:42 +0000
ROA not before: Fri 17 Jan 2025 01:23:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 58.66.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365 (0x93d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=986AED0D2162D5AD2D72015587633C5789C2AF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:2a:0f:a0:56:cc:75:0b:c3:70:61:cb:b9:
51:5c:50:d8:3d:da:4a:87:72:89:50:11:a5:b6:63:
47:5a:96:c3:e0:cb:0f:c6:c4:2a:b8:65:78:71:ba:
94:8d:3f:00:bf:80:c7:6f:11:98:3f:4a:b8:16:84:
ba:d5:30:b6:0e:24:79:3c:4a:11:4e:a2:9e:2d:c7:
2e:68:b5:81:32:80:20:0d:ab:c9:a8:1f:e3:47:8c:
cb:e2:4f:6b:9d:01:b0:56:c2:48:08:77:dc:a4:55:
54:52:35:df:3d:d2:77:9e:f1:29:5f:5c:cb:f4:6e:
17:5c:d3:21:30:2f:0e:b2:94:a1:1a:c6:30:f8:3a:
5c:ab:da:4d:5e:0b:8c:ae:8b:43:8d:0d:d2:d6:77:
cb:25:04:e4:1c:1d:96:67:9b:6c:fc:84:af:4b:6f:
1e:89:90:ed:cf:e8:5b:73:f1:65:ce:fb:90:80:f4:
f4:9f:80:d5:ce:ec:09:5e:1b:a5:d6:a5:14:64:2b:
28:ae:76:fb:d2:e8:83:af:ab:9e:ab:82:dd:ae:d9:
d0:14:62:6d:e4:d9:0d:05:43:0a:76:d0:82:64:02:
ce:4e:8c:de:8c:01:42:29:f6:ed:ed:0b:f8:ad:5c:
5a:e5:8a:b6:f5:c6:a8:e8:2e:ae:4a:d0:91:6a:ec:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:ED:0D:21:62:D5:AD:2D:72:01:55:87:63:3C:57:89:C2:AF:24
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mGrtDSFi1a0tcgFVh2M8V4nCryQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.64.0/18
Signature Algorithm: sha256WithRSAEncryption
29:49:48:e8:fe:24:d4:ea:32:58:f9:53:b6:bf:aa:49:1f:fe:
05:49:70:25:8a:4c:b5:75:97:1f:1e:b6:b1:2d:b0:a1:32:53:
c9:fc:9c:94:07:41:4e:88:55:26:e0:41:04:94:8b:a4:b3:7d:
bd:fe:ff:61:41:97:07:ef:a9:e2:08:53:36:9d:5a:2e:bb:ab:
cb:4a:c5:79:44:c7:e5:41:26:0c:5d:dc:5a:57:bb:a0:a2:9b:
45:4e:16:76:14:fc:d8:d6:3e:ed:c3:09:99:27:29:dd:d1:d6:
b5:d9:48:2e:86:22:e5:7a:26:13:ca:b4:51:de:3b:06:1d:df:
85:4c:92:2e:d7:55:09:20:ab:18:a8:0f:8b:ae:8e:4b:5e:94:
04:3a:52:f6:ab:16:f3:7d:0a:35:68:16:94:d8:1a:6e:97:6f:
c5:b9:ce:26:78:35:67:e2:60:a4:f2:c6:c3:fb:34:8b:89:be:
e2:58:05:d2:ef:10:c2:7f:4a:b3:95:b4:5e:bd:35:c5:a3:31:
38:95:79:c0:d6:09:90:e8:43:fa:f1:7a:e3:4c:b7:27:a8:dd:
d1:a8:52:17:45:f1:54:32:fb:ea:4f:1a:62:52:67:7a:eb:7b:
d0:07:88:c1:c4:06:ff:45:da:69:88:41:d6:11:d2:5e:4d:6e:
c4:c5:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:40 2025 by rpki-client