Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa
File: 0gbmlyAVWCwfJVFLsVZB5B11dEc.roa (raw, json)
Hash identifier: vsfTSGmfiod4GLzKID0JpoMEU7+ZmyIxg6AT8LBWFNk=
Subject key identifier: D2:06:E6:97:20:15:58:2C:1F:25:51:4B:B1:56:41:E4:1D:75:74:47
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 3C
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa
Signing time: Tue 27 May 2025 08:25:29 +0000
ROA not before: Tue 27 May 2025 08:25:29 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42c4::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:25:29 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=D206E6972015582C1F25514BB15641E41D757447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:fb:a8:e4:50:9c:aa:b6:21:91:4b:b1:b6:
9b:2d:a8:44:ee:d1:d7:07:2b:cc:da:90:40:02:66:
6b:c1:66:c6:c5:e7:74:b7:4d:a3:69:b5:62:a4:59:
8d:d7:09:8f:06:22:c7:da:c7:86:42:c2:0e:18:94:
59:da:d1:ec:b7:04:26:a7:b8:d8:28:dc:1d:d7:59:
05:df:d2:79:ec:3b:80:24:c4:ad:ab:90:77:e8:15:
a7:69:4e:52:67:d1:77:c9:b8:53:00:5b:bb:8a:e5:
79:e1:36:28:a3:65:5b:1d:44:9e:02:dd:c1:11:75:
1d:10:75:ee:a2:dd:62:c6:5a:45:2b:7f:7e:31:cc:
2a:77:24:dc:f5:ad:c1:67:67:60:a9:54:ce:2b:8a:
72:62:7b:f7:27:c7:7e:09:88:93:f5:d9:41:79:7c:
48:ce:d0:b3:b8:04:26:29:e1:38:70:6d:4f:d1:77:
7a:d0:60:2f:8c:e9:86:00:b6:81:64:77:12:62:8c:
86:9c:4b:36:d1:c8:04:f8:78:41:92:e6:b3:a2:d4:
a9:b3:2b:54:e8:62:34:76:53:6f:ce:6a:c3:ec:c9:
42:94:37:b7:9d:3a:0e:4a:ba:3e:51:cd:92:a3:9b:
b8:34:93:a1:f0:0b:9d:8c:98:4e:9c:4a:48:51:8f:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:E6:97:20:15:58:2C:1F:25:51:4B:B1:56:41:E4:1D:75:74:47
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/0gbmlyAVWCwfJVFLsVZB5B11dEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42c4::/31
Signature Algorithm: sha256WithRSAEncryption
30:23:aa:ed:ca:d9:23:3f:0a:f3:6c:da:ac:1a:af:2e:af:a2:
be:94:d0:a6:7f:53:34:9e:9a:d4:eb:b9:2e:81:e9:64:7b:d1:
24:c6:35:9d:0a:46:77:22:29:2d:85:48:7e:41:64:d1:f2:bf:
7c:b9:69:8e:a5:5e:59:06:ee:65:de:35:20:59:a8:68:e6:3e:
4e:bc:a0:21:46:e3:2c:ec:81:ae:e7:45:fb:5e:7d:f5:65:f8:
13:a1:a9:6a:f6:22:9e:2c:be:55:b9:f3:8e:09:ea:d2:e0:ad:
f4:7a:02:de:93:3d:2f:19:15:cb:e6:24:45:0e:31:f3:4f:0a:
0e:42:47:b1:66:08:09:ab:97:62:74:12:a4:8d:24:69:75:04:
8a:c1:df:aa:0b:2e:08:fe:1d:81:e0:6e:f9:93:16:ab:6e:9e:
1f:17:28:7b:06:0d:e5:7a:00:3a:78:b8:d5:30:43:20:a9:b5:
1f:d8:94:b7:75:f9:04:86:4b:3f:25:09:8a:b9:cd:d9:a0:4b:
22:c7:28:44:2a:11:19:b9:7e:ca:03:c5:0a:95:36:ff:6e:07:
e7:74:88:b9:16:87:86:ac:54:45:7b:ae:9b:2a:3f:dc:b8:4a:
ff:40:39:6c:43:62:ca:d2:fc:f1:45:c7:65:37:60:19:64:f3:
64:5b:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:35 2025 by rpki-client