Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa
File: zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa (raw, json)
Hash identifier: u3jhGmvHSJ6O8mQSNnF8wUBl5Bheur4J+vLo6EJtbqk=
Subject key identifier: CC:4E:4F:FC:73:40:9A:96:B1:41:DC:AD:B0:8F:42:B7:17:86:40:84
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 063A
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa
Signing time: Fri 23 Aug 2024 14:39:17 +0000
ROA not before: Fri 23 Aug 2024 14:39:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 2914
IP address blocks: 58.66.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Aug 23 14:39:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CC4E4FFC73409A96B141DCADB08F42B717864084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:42:ad:86:53:32:1c:60:26:95:bb:0a:13:
ae:f9:15:50:00:f4:02:2e:2a:46:d0:71:75:d3:6f:
95:bf:12:fb:6f:76:d0:86:11:19:e3:37:af:6a:ba:
d3:13:0d:6b:c8:61:41:ff:f4:3d:4e:3a:b6:e6:7d:
ce:19:6c:48:87:cc:d7:6c:b9:09:af:63:0e:2e:cb:
1a:f8:c6:92:ae:bc:d9:96:ab:9c:55:96:9d:ca:01:
3b:42:e0:db:81:8a:3f:31:00:c4:74:c7:66:4d:09:
41:44:4c:ae:c8:09:b0:61:d2:9e:11:fa:61:4d:a8:
4a:a1:cf:f0:f8:58:67:07:82:14:dc:e5:7d:10:65:
d4:b8:1f:65:39:c8:b5:d3:e9:8f:c7:78:3a:3a:97:
d2:a7:ec:43:c4:07:2a:2d:06:5e:eb:89:0f:f7:12:
df:6a:88:c9:e9:12:77:90:e7:1e:9d:8a:23:49:7c:
7e:f8:3e:a7:34:53:f7:d7:f0:06:c2:5a:e6:81:15:
5f:ad:c8:56:29:aa:8b:6e:6d:8e:cd:39:94:90:52:
78:a6:f9:d6:63:bb:1c:89:1b:7f:7d:5a:30:35:91:
1d:a0:b6:6f:f2:00:a6:7a:a8:5c:23:40:29:d6:c5:
aa:47:a0:bd:fc:8f:3e:cf:9e:e3:90:67:7f:cc:42:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:4F:FC:73:40:9A:96:B1:41:DC:AD:B0:8F:42:B7:17:86:40:84
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/zE5P_HNAmpaxQdytsI9CtxeGQIQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:5b:9d:6c:98:c1:f7:3b:f2:01:e4:2b:aa:17:3a:c3:bb:3c:
4e:b1:21:a9:fd:65:1c:bb:41:c8:c0:25:00:88:75:9f:54:5a:
7a:fa:cf:23:f6:a7:4b:fe:45:47:4b:7a:73:6e:38:e2:14:a5:
ea:e5:0f:56:3b:67:a9:ee:4f:d8:17:c4:a5:6c:88:f1:71:17:
b0:c1:99:dc:6c:70:50:d2:70:d1:c6:d9:0b:1a:6d:fa:08:70:
ba:3f:8f:82:e5:db:fb:26:e5:fb:95:fd:eb:3a:45:11:6a:eb:
a0:60:d1:a8:db:90:8a:6e:f3:65:9c:fe:0b:50:ce:ba:02:d0:
c6:c7:b1:49:4e:3b:7a:ef:d9:9a:b6:95:8d:5c:41:15:57:59:
c7:2a:2c:bc:eb:a6:d7:35:75:78:99:77:e1:9c:39:e5:33:2e:
f6:a6:9e:33:f6:f0:38:ac:4b:7b:98:0f:9c:f5:dd:56:59:47:
53:e3:cc:81:ed:6c:ec:9b:62:8d:31:a0:b8:d7:df:a6:a7:c1:
c4:a3:97:9e:dd:f8:4e:ca:f9:43:e1:73:df:39:23:90:4e:15:
0a:04:75:14:3d:82:03:9f:86:ab:2e:f8:fe:2a:2c:19:83:bc:
93:6e:c5:b1:fd:58:a3:f6:8d:4b:fb:92:e1:f3:4d:4d:2f:22:
9f:ec:40:c1
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICBjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNDA4MjMx
NDM5MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENDNEU0RkZDNzM0MDlB
OTZCMTQxRENBREIwOEY0MkI3MTc4NjQwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLR0KthlMyHGAmlbsKE675FVAA9AIuKkbQcXXTb5W/EvtvdtCG
ERnjN69qutMTDWvIYUH/9D1OOrbmfc4ZbEiHzNdsuQmvYw4uyxr4xpKuvNmWq5xV
lp3KATtC4NuBij8xAMR0x2ZNCUFETK7ICbBh0p4R+mFNqEqhz/D4WGcHghTc5X0Q
ZdS4H2U5yLXT6Y/HeDo6l9Kn7EPEByotBl7riQ/3Et9qiMnpEneQ5x6diiNJfH74
Pqc0U/fX8AbCWuaBFV+tyFYpqotubY7NOZSQUnim+dZjuxyJG399WjA1kR2gtm/y
AKZ6qFwjQCnWxapHoL38jz7PnuOQZ3/MQphZAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUzE5P/HNAmpaxQdytsI9CtxeGQIQwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvekU1UF9ITkFtcGF4UWR5dHNJ
OUN0eGVHUUlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzpC
cDANBgkqhkiG9w0BAQsFAAOCAQEAo1udbJjB9zvyAeQrqhc6w7s8TrEhqf1lHLtB
yMAlAIh1n1RaevrPI/anS/5FR0t6c2444hSl6uUPVjtnqe5P2BfEpWyI8XEXsMGZ
3GxwUNJw0cbZCxpt+ghwuj+PguXb+ybl+5X96zpFEWrroGDRqNuQim7zZZz+C1DO
ugLQxsexSU47eu/ZmraVjVxBFVdZxyosvOum1zV1eJl34Zw55TMu9qaeM/bwOKxL
e5gPnPXdVllHU+PMge1s7JtijTGguNffpqfBxKOXnt34Tsr5Q+Fz3zkjkE4VCgR1
FD2CA5+Gqy74/iosGYO8k27Fsf1Yo/aNS/uS4fNNTS8in+xAwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:21 2025 by rpki-client