Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa
File: QRHswIE6i107KklP5tu8dOJh-PE.roa (raw, json)
Hash identifier: Mes742gMj0FBBe/d9eKBOxRBcIkkEQYJFVPssIx2QdM=
Subject key identifier: 41:11:EC:C0:81:3A:8B:5D:3B:2A:49:4F:E6:DB:BC:74:E2:61:F8:F1
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 1B
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa
Signing time: Tue 27 May 2025 08:11:32 +0000
ROA not before: Tue 27 May 2025 08:11:32 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:2060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:32 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=4111ECC0813A8B5D3B2A494FE6DBBC74E261F8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:fd:cc:f8:1d:95:67:ea:73:52:a2:50:76:
29:a4:88:04:e5:4a:25:4f:05:11:6c:d3:9e:ec:f4:
9e:9d:e6:1a:39:9e:4a:ae:59:c9:45:d6:8e:1d:7a:
3c:d0:e2:c4:84:e9:02:37:75:3e:99:0a:9f:04:35:
d8:5c:93:4a:b5:c9:0e:4a:87:2f:45:1a:28:92:0a:
64:f1:8d:87:d8:c9:4a:ab:3c:04:bc:70:12:1b:a9:
67:13:be:ff:64:42:63:60:4e:9d:93:2c:a6:e9:eb:
19:8a:4c:58:08:45:f9:fd:d7:02:ac:9f:cf:e5:1c:
bf:74:1e:d4:51:7a:be:b4:95:67:39:2a:47:b1:f7:
ff:40:e7:ec:90:3a:65:9d:4e:08:d2:f7:93:bf:99:
3f:48:44:47:e7:80:d2:c5:1f:36:69:5b:ab:5c:cc:
4f:2d:fb:26:f1:26:a4:56:00:ee:f0:6c:eb:30:40:
cc:1d:75:91:41:20:71:da:18:96:94:32:10:62:29:
78:6a:b3:20:89:dc:43:e9:c9:83:9e:b3:78:df:79:
2c:90:99:1b:96:7c:32:b6:87:d9:c8:2c:16:af:7e:
6d:ff:85:f7:c5:3c:26:d5:85:42:6b:0a:24:c4:ff:
96:d6:6b:58:69:6a:c3:d2:51:f5:e5:24:ba:a6:a7:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:EC:C0:81:3A:8B:5D:3B:2A:49:4F:E6:DB:BC:74:E2:61:F8:F1
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/QRHswIE6i107KklP5tu8dOJh-PE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:2060::/48
Signature Algorithm: sha256WithRSAEncryption
33:eb:68:66:b9:ae:dc:f0:cd:ec:7d:48:db:c4:7b:c9:e3:35:
f6:9f:1b:19:ae:16:51:9a:d6:e6:f7:ad:b1:7e:fe:21:cb:f6:
ba:02:ab:15:5c:cc:b7:3d:b8:4e:1a:b4:78:3d:fa:7a:cc:7a:
e4:f1:f3:87:d7:a0:ce:a2:12:4e:bd:d3:3b:29:ab:24:14:eb:
1b:f8:18:19:f9:ec:71:fd:b7:2a:47:72:52:be:65:a1:fa:24:
f5:30:48:53:7c:8c:ad:02:28:29:8d:62:5e:2f:1c:fb:b0:70:
fd:44:7d:de:db:71:04:10:06:a0:49:a1:81:0f:3f:32:92:8f:
b5:6f:c3:6d:86:1d:32:08:66:1a:6c:25:45:d1:dc:5b:0b:7a:
9f:a3:93:8e:18:3d:b5:54:ea:64:bd:8b:b9:2a:96:4d:9a:3d:
89:2e:f5:e9:d6:3b:fb:8b:39:9a:5a:af:9a:7c:22:ca:5c:cb:
9a:f7:d5:55:4a:76:d3:07:77:2f:bb:29:b6:90:55:8a:fd:85:
55:16:9d:fe:25:a7:55:0d:15:f5:62:4f:fe:07:97:87:8a:1a:
70:3d:20:7d:d9:5d:18:7b:f5:f9:d2:9c:00:32:ff:52:6f:f1:
37:6d:70:04:cf:98:ce:03:67:98:e6:67:5c:e9:f2:54:89:7d:
47:53:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:16:15 2025 by rpki-client