Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/viCL69LbmO2JydbmgFXwcu4ABLs.roa
File: viCL69LbmO2JydbmgFXwcu4ABLs.roa (raw, json)
Hash identifier: pSJMVsXhvdQVT+E0eGkfcl1CwPze5Z+7KacPD4Ww8Kk=
Subject key identifier: BE:20:8B:EB:D2:DB:98:ED:89:C9:D6:E6:80:55:F0:72:EE:00:04:BB
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 012B
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/viCL69LbmO2JydbmgFXwcu4ABLs.roa
Signing time: Tue 27 May 2025 03:57:57 +0000
ROA not before: Tue 27 May 2025 03:57:57 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 211392
IP address blocks: 45.248.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: May 27 03:57:57 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=BE208BEBD2DB98ED89C9D6E68055F072EE0004BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:66:31:de:ac:d4:4a:26:d2:f3:a9:45:e4:
4f:45:74:5e:62:24:40:a8:18:cd:81:8b:da:e2:99:
86:b4:39:07:f5:76:77:3a:7b:cb:7e:f7:eb:26:33:
17:ff:a6:c1:a8:ed:a4:aa:24:3e:aa:4d:49:24:23:
ec:60:dc:e1:fe:45:9f:3e:ea:2b:c4:a2:f4:a2:2e:
6f:2a:1b:98:5f:4f:15:a3:e5:89:c5:5c:1d:2c:69:
8a:07:aa:e3:af:ed:0c:01:4f:db:5b:82:10:8d:4c:
89:ff:78:95:b7:79:9d:a3:3f:b2:84:32:25:8a:e7:
a6:58:e5:52:b3:cd:24:44:25:bf:a0:17:37:e8:3a:
1d:23:4a:4d:b5:5d:04:44:bf:8b:50:9f:95:e0:d2:
d5:e7:15:63:51:d0:d3:e6:ea:c9:65:72:0a:90:da:
df:82:20:99:02:ca:05:30:5d:c0:e1:cb:93:68:e7:
e1:06:90:9d:e5:e5:1d:7a:23:01:cd:c1:9d:22:b0:
4c:5c:91:1e:af:01:8c:e7:95:30:0b:d7:5c:c6:41:
4b:04:34:95:66:c0:2d:ed:66:5d:57:ec:29:3c:07:
6b:95:a2:41:ff:30:21:a1:2c:18:55:aa:01:be:d2:
c8:39:98:39:55:0f:52:d8:ae:41:96:e3:03:a9:fc:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:8B:EB:D2:DB:98:ED:89:C9:D6:E6:80:55:F0:72:EE:00:04:BB
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/viCL69LbmO2JydbmgFXwcu4ABLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.88.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:2d:08:9d:96:bd:c7:23:01:07:2c:9c:82:22:dc:a0:bd:
6d:99:ed:5a:3b:0a:77:d8:40:c0:b4:05:75:3c:1b:27:e8:00:
c6:78:0d:e9:28:77:e6:ac:de:1d:71:48:c3:da:0e:30:70:87:
bf:99:7e:9f:6d:04:fb:db:80:f9:14:87:5c:96:d3:85:5b:f3:
61:6c:b2:ed:ea:ca:ac:3b:c8:e2:8d:3d:59:3f:d2:19:33:f7:
87:cc:54:ac:aa:2e:5a:51:4f:d0:d5:d6:94:7c:30:03:c1:68:
99:6d:d7:dc:bd:e4:de:1d:fc:de:bc:e6:05:14:0a:87:0b:5c:
e4:d1:0b:f4:7c:a3:89:fe:82:dd:24:f9:10:0d:04:e8:34:68:
12:a7:35:a0:d0:a9:4e:48:3f:d0:27:73:87:1c:23:d8:6d:d2:
25:71:89:cc:09:bf:38:e0:64:63:21:d4:71:da:40:67:87:a5:
25:cc:99:b2:39:27:38:0e:4c:5f:93:56:2b:07:42:94:8d:0d:
ed:94:98:c5:3b:7a:cb:e8:72:b9:29:52:21:90:9a:70:3f:d6:
9f:4e:5e:00:a2:15:94:ac:16:3b:05:67:01:be:57:80:64:39:
e7:7e:b3:df:39:27:58:0b:35:e2:23:97:43:01:42:62:fa:4a:
d3:c5:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:31 2025 by rpki-client