Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/6t-cMM2C0JJFMY_nUeftj4OGPPw.roa
File: 6t-cMM2C0JJFMY_nUeftj4OGPPw.roa (raw, json)
Hash identifier: qv+F4Ksfq7pBnjs7rEPHUHeIeh5LcSMbOvBRzwnptkc=
Subject key identifier: EA:DF:9C:30:CD:82:D0:92:45:31:8F:E7:51:E7:ED:8F:83:86:3C:FC
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 56
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/6t-cMM2C0JJFMY_nUeftj4OGPPw.roa
Signing time: Tue 27 May 2025 08:36:32 +0000
ROA not before: Tue 27 May 2025 08:36:32 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 24444
IP address blocks: 240a:42b8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:32 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=EADF9C30CD82D09245318FE751E7ED8F83863CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:3f:b8:40:f2:da:17:d4:da:61:d6:17:3b:
d1:ef:6d:86:aa:fd:bd:80:70:f2:34:72:b4:98:8c:
90:8c:77:c9:5c:a3:9d:12:1f:94:30:a1:aa:f5:c2:
c4:87:16:1c:18:ad:62:19:d6:09:4f:e6:5e:2f:83:
87:52:2e:f4:3e:48:1c:43:31:24:35:50:3a:b4:48:
29:c1:fd:53:fa:ae:e4:ad:72:f1:81:27:3b:c4:bb:
89:aa:eb:6e:70:01:55:99:74:f4:03:29:9e:62:01:
7c:c2:96:22:87:bf:87:d2:b7:a6:b8:e0:e4:5a:1d:
8a:c8:b6:f2:8b:21:e5:2a:5e:ea:22:ab:e8:09:aa:
2c:c3:58:49:31:f7:3e:7d:30:b3:5a:e6:e9:64:71:
63:87:09:a3:9f:95:cb:4f:da:e5:36:c9:61:95:26:
58:02:af:5e:1f:ba:30:77:4e:a9:bc:5d:da:a9:85:
8f:19:2f:1f:dd:49:c4:df:99:35:b8:ec:9f:50:db:
f0:03:19:03:65:d5:22:8b:64:47:07:10:c1:c7:91:
1e:ad:d8:10:4a:fa:b8:d0:59:3c:16:8a:e2:b4:69:
c2:51:87:02:c2:46:a5:d3:0d:04:f9:78:e6:d9:c0:
15:76:4e:57:0b:dc:4c:5c:1a:0f:23:1a:30:fa:e4:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:9C:30:CD:82:D0:92:45:31:8F:E7:51:E7:ED:8F:83:86:3C:FC
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/6t-cMM2C0JJFMY_nUeftj4OGPPw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42b8::/31
Signature Algorithm: sha256WithRSAEncryption
17:9f:6b:c3:cb:6f:b3:24:bd:53:12:20:9e:4e:a8:12:db:eb:
21:bc:d7:45:10:5a:e7:70:14:d5:54:60:08:8e:0e:6a:9e:ae:
ee:6e:0c:2e:b2:c9:e8:4f:fa:eb:87:51:1a:d5:6e:3f:a7:64:
ff:55:29:39:19:9f:cb:3d:df:63:6e:9c:c5:4a:f0:73:a9:27:
e9:ca:55:dc:14:11:02:8f:38:0c:b1:b2:34:ff:b5:30:a3:d2:
ba:db:b4:3c:b9:2a:d1:9d:1f:6e:7c:bc:ce:25:52:3c:60:5e:
81:ad:4e:a7:ab:b0:e0:71:69:33:fa:72:0f:86:a1:4f:1c:cf:
55:3f:cf:1a:60:cd:28:ea:91:06:26:de:df:58:a2:63:02:80:
a0:0f:c3:ba:b2:49:c8:a6:25:22:a3:8b:d4:b7:69:3d:8a:6e:
39:9a:8d:7d:d8:93:ea:ad:07:ed:cc:1f:51:41:5e:09:a4:ab:
28:5a:f5:0c:c2:b8:f5:3e:bd:4f:fb:cd:f7:82:1f:7e:8e:b4:
ad:d3:ed:5b:d9:81:d8:45:08:25:01:32:09:20:57:4d:41:11:
c1:4b:c8:a7:32:d1:71:4e:86:39:5c:78:45:cf:6c:c9:12:0f:
7a:f7:00:d7:fc:7c:67:b6:a6:7b:dd:a3:72:54:f0:23:2e:46:
19:56:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:29 2025 by rpki-client