Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/-wQcy0Ty6E9fftfrZPzbrrYHzmE.roa
File: -wQcy0Ty6E9fftfrZPzbrrYHzmE.roa (raw, json)
Hash identifier: 5wOsPyfClFAejOqnlE1Cg69wFsHjOfES2+I0lFCYq+4=
Subject key identifier: FB:04:1C:CB:44:F2:E8:4F:5F:7E:D7:EB:64:FC:DB:AE:B6:07:CE:61
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 4E
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/-wQcy0Ty6E9fftfrZPzbrrYHzmE.roa
Signing time: Tue 27 May 2025 08:36:30 +0000
ROA not before: Tue 27 May 2025 08:36:30 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56041
IP address blocks: 240a:42a8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:30 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=FB041CCB44F2E84F5F7ED7EB64FCDBAEB607CE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:9a:b4:71:a8:08:86:b6:32:15:07:2b:e6:
82:72:2a:01:ef:a1:8d:59:1d:8d:a2:a9:a7:40:f2:
bb:68:66:41:59:06:4f:59:b7:01:a8:9a:ef:fc:e9:
20:c6:30:90:e4:d3:fd:59:60:33:b1:4e:75:3e:74:
07:39:f6:63:1e:29:f4:6f:96:70:47:bd:93:70:c9:
8c:a4:64:71:b2:9c:de:0d:38:26:59:30:00:2f:87:
46:81:b1:41:ce:91:ac:e9:8a:92:bf:ca:54:57:54:
4e:e7:63:90:db:2e:ea:39:a7:da:59:96:b4:89:18:
56:83:1b:1e:3a:c0:48:79:2d:e1:e5:17:80:fc:76:
fe:b9:aa:02:4c:f7:6c:24:fa:39:1f:8e:9f:56:dc:
1a:be:85:7e:6e:e4:44:01:49:bd:89:01:dd:93:7e:
e8:84:db:0b:77:c6:32:87:9e:20:e9:1f:63:d4:04:
25:d5:11:da:5c:a7:af:d6:00:3c:c1:75:6b:01:34:
8f:55:1f:f4:12:63:27:bf:e8:4e:3a:49:20:f8:ad:
e1:ad:91:95:a9:c4:09:20:ce:f7:f3:61:72:45:73:
9f:f0:23:4b:c1:af:f3:80:92:27:17:8a:13:ce:a4:
02:2e:46:6b:1f:66:8c:1f:ba:7f:8f:d1:3f:e4:6e:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:1C:CB:44:F2:E8:4F:5F:7E:D7:EB:64:FC:DB:AE:B6:07:CE:61
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/-wQcy0Ty6E9fftfrZPzbrrYHzmE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42a8::/31
Signature Algorithm: sha256WithRSAEncryption
90:a7:41:49:8f:a7:3b:a0:08:4b:d9:71:bc:5e:ef:a3:0d:ea:
8e:4f:ea:26:9a:a9:5e:4e:a3:da:7d:0f:76:21:7d:3f:50:1d:
2d:e9:41:1f:4e:e3:f4:50:5f:97:68:63:5a:3d:3f:58:7b:f1:
b9:82:5e:80:e1:86:48:6d:7c:63:f9:3a:20:79:b8:78:10:98:
4a:38:e4:2b:2d:46:01:5a:0c:66:a5:5f:df:d3:ba:2e:9c:78:
8c:9a:e0:27:d2:27:a4:19:2f:73:3d:f8:5f:75:50:63:eb:b4:
6c:d4:26:45:5d:90:42:37:7e:44:f4:bc:6f:c0:bf:d7:5e:7b:
8f:39:cd:d4:06:f4:0c:22:df:95:f0:4d:6f:6b:1c:7f:eb:2b:
bf:bf:c9:95:98:6d:85:cc:7c:f4:de:f5:a6:e7:e4:e0:c8:7a:
f9:3d:d2:26:f4:f5:62:93:45:10:d6:c3:59:14:d5:eb:db:44:
25:4d:4d:e3:1e:05:f0:bc:52:07:0c:6a:ff:1a:e9:e4:4e:80:
c1:e6:9b:b5:cb:ae:5c:f3:58:b9:de:9a:b7:df:ad:5a:32:ea:
da:67:98:77:14:2c:dc:ec:2a:f8:5a:5a:d4:4f:67:dc:ff:b8:
73:7f:75:3e:0c:61:6b:02:80:ec:59:63:d3:aa:b0:47:d4:73:
d2:86:c3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:01 2025 by rpki-client