Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa
File: dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa (raw, json)
Hash identifier: vvm+UpTNz/AtKJKr596ndjL9hzs6qVxLCGWgu64bItk=
Subject key identifier: 74:E5:1F:77:3D:2B:7D:E8:85:D3:8D:49:43:93:3A:2E:D9:75:31:A2
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 4F
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa
Signing time: Tue 27 May 2025 08:36:31 +0000
ROA not before: Tue 27 May 2025 08:36:31 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42f8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:36:31 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=74E51F773D2B7DE885D38D4943933A2ED97531A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:ae:f0:a3:e4:73:fd:48:ce:d7:56:f4:b1:
2b:57:4d:00:d5:e2:17:cb:64:6b:27:05:a6:25:7c:
4f:6a:fe:e9:dc:2e:97:79:75:c8:c6:36:3b:0a:76:
eb:ad:14:d5:f2:02:b9:07:ca:ec:88:3f:0b:ca:7b:
5a:26:b9:3f:a9:d6:e3:f2:fa:ed:5a:4b:5a:3e:5d:
f1:7d:d2:1a:83:74:24:94:cb:97:d2:31:b1:8f:3e:
37:6f:5e:dc:3b:9c:34:10:99:6f:89:1e:69:93:9f:
3e:92:e5:ae:56:5e:c9:58:f9:b6:17:0d:85:ba:f7:
a4:4f:8b:34:de:f4:bd:ac:61:cd:5f:42:5b:d6:c6:
8e:25:11:ca:10:2e:99:ee:f1:bc:e4:31:38:75:af:
5b:a8:c5:67:b2:3c:62:f1:ef:a6:00:7f:72:7e:a1:
69:6a:78:e8:4b:4e:b6:ab:e5:9a:ff:8b:da:e7:2e:
32:95:be:31:e0:cf:c2:2d:11:bf:15:60:fa:89:8f:
58:e9:bb:19:5d:5c:ba:4c:89:ce:9a:c4:46:ce:04:
a0:74:64:80:87:ff:6c:99:76:f6:32:40:bd:5b:27:
ce:73:8e:a4:2c:ed:d6:fd:f6:45:55:76:24:e2:33:
e3:f4:39:9d:7c:a5:ee:b2:31:b7:4b:11:59:70:b7:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:1F:77:3D:2B:7D:E8:85:D3:8D:49:43:93:3A:2E:D9:75:31:A2
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/dOUfdz0rfeiF041JQ5M6Ltl1MaI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42f8::/31
Signature Algorithm: sha256WithRSAEncryption
1e:34:28:2d:9a:54:d1:d3:b1:e8:6c:dd:80:62:84:f1:e8:7e:
dc:41:55:12:f9:aa:5f:a6:b7:13:72:3f:8f:9a:f3:6a:48:bc:
d0:4b:95:cb:4f:43:95:5b:5d:ed:0d:2d:d1:b8:15:5f:37:d2:
b1:32:9c:09:d6:1c:48:fc:cb:3a:38:d4:d2:54:a9:2b:5c:ef:
36:bd:1f:02:cc:51:98:29:e7:83:46:74:99:bf:80:e2:a1:24:
de:63:f2:87:43:fa:58:9b:8e:d2:34:19:67:4c:6c:ba:52:3e:
2f:78:3e:85:bb:40:0c:51:02:c2:4d:41:61:b2:23:c5:ee:1c:
3b:24:1b:2b:c4:36:24:ee:0e:df:69:d5:9f:d7:fa:3f:2d:2b:
85:79:10:6c:ea:22:7e:0c:22:95:0e:07:ed:ac:f8:56:fe:b4:
2f:24:e0:87:a9:f9:6f:04:af:ea:73:5a:24:7e:9c:99:8f:16:
38:0d:da:b3:4b:8f:bb:c1:70:e0:f9:53:db:25:5d:3d:de:dd:
46:7a:1b:eb:eb:1c:89:22:3c:b4:a4:a9:05:30:14:05:b3:2f:
7b:62:87:14:7c:e8:49:69:5c:37:e8:c8:74:e3:0c:4c:02:15:
da:73:db:b7:b8:33:22:68:cf:41:3f:7a:be:c4:0d:50:45:5b:
af:53:e7:56
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEVG
RjczOTJFMUVEQzEyMjVGQzRDRkI4RkFCNkVCNjE3QTlEMjREMB4XDTI1MDUyNzA4
MzYzMVoXDTI2MDUyNzA3Mzg0MVowMzExMC8GA1UEAxMoNzRFNTFGNzczRDJCN0RF
ODg1RDM4RDQ5NDM5MzNBMkVEOTc1MzFBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKmSrvCj5HP9SM7XVvSxK1dNANXiF8tkaycFpiV8T2r+6dwul3l1
yMY2Owp2660U1fICuQfK7Ig/C8p7Wia5P6nW4/L67VpLWj5d8X3SGoN0JJTLl9Ix
sY8+N29e3DucNBCZb4keaZOfPpLlrlZeyVj5thcNhbr3pE+LNN70vaxhzV9CW9bG
jiURyhAume7xvOQxOHWvW6jFZ7I8YvHvpgB/cn6haWp46EtOtqvlmv+L2ucuMpW+
MeDPwi0RvxVg+omPWOm7GV1cukyJzprERs4EoHRkgIf/bJl29jJAvVsnznOOpCzt
1v32RVV2JOIz4/Q5nXyl7rIxt0sRWXC3yd8CAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBR05R93PSt96IXTjUlDkzou2XUxojAfBgNVHSMEGDAWgBSU7/c5Lh7cEiX8TPuP
q262F6nSTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNjcy
L2xPXzNPUzRlM0JJbF9FejdqNnR1dGhlcDBrMC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbE9fM09TNGUzQklsX0V6N2o2dHV0aGVwMGswLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3Mi9kT1VmZHowcmZlaUYw
NDFKUTVNNkx0bDFNYUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUBJApC+DANBgkqhkiG9w0BAQsFAAOCAQEAHjQoLZpU0dOx6GzdgGKE8eh+3EFV
EvmqX6a3E3I/j5rzaki80EuVy09DlVtd7Q0t0bgVXzfSsTKcCdYcSPzLOjjU0lSp
K1zvNr0fAsxRmCnng0Z0mb+A4qEk3mPyh0P6WJuO0jQZZ0xsulI+L3g+hbtADFEC
wk1BYbIjxe4cOyQbK8Q2JO4O32nVn9f6Py0rhXkQbOoifgwilQ4H7az4Vv60LyTg
h6n5bwSv6nNaJH6cmY8WOA3as0uPu8Fw4PlT2yVdPd7dRnob6+sciSI8tKSpBTAU
BbMve2KHFHzoSWlcN+jIdOMMTAIV2nPbt7gzImjPQT96vsQNUEVbr1PnVg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:22 2025 by rpki-client