Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa
File: eDVpCKSCjOECYQXGK61_TpJvS2o.roa (raw, json)
Hash identifier: PEgLgUhf8PFFXZSGKxa9WlpLw+1acH+JmVO2jjDNgwk=
Subject key identifier: 78:35:69:08:A4:82:8C:E1:02:61:05:C6:2B:AD:7F:4E:92:6F:4B:6A
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 064F
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa
Signing time: Tue 04 Mar 2025 06:58:41 +0000
ROA not before: Tue 04 Mar 2025 06:58:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 211.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 06:58:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=78356908A4828CE1026105C62BAD7F4E926F4B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:83:be:b5:e9:33:1d:fc:5a:41:3e:4d:3f:
20:39:f7:ab:5d:d4:42:31:f5:c5:76:fc:ef:13:7c:
20:c5:2c:e5:8d:d0:a1:d9:2d:59:c5:7c:8e:7c:3c:
ef:37:04:98:12:ec:6f:83:c7:d3:db:ea:99:9d:a1:
3d:c8:d8:bd:d1:75:a2:49:a0:d2:a6:ad:43:ff:08:
c8:eb:7a:2e:85:40:77:81:9a:e3:78:33:f6:25:26:
37:89:f2:81:cc:12:1b:e4:c8:51:83:c1:1f:ea:d3:
b2:01:2f:54:80:9a:9b:5e:50:e8:31:f2:6f:81:c1:
47:c4:c5:74:5a:38:73:5b:74:3f:a5:a9:e8:58:b0:
33:25:19:59:87:51:d4:04:e6:58:d2:20:36:e6:e9:
93:02:3f:ad:7d:50:58:74:c9:b5:e3:2e:15:c7:39:
fa:cf:2a:f6:5a:f7:90:cd:79:c2:73:5c:bc:c8:ed:
5a:21:24:16:d8:6e:ed:65:11:12:46:c4:ba:e8:76:
79:43:ad:b0:b2:00:76:fb:16:3e:3a:2e:3e:90:e8:
a4:63:11:9f:48:f8:44:c5:c3:ab:c6:37:40:90:79:
04:b2:97:ae:47:e7:c0:32:91:2e:f7:b3:6a:50:81:
6c:59:3b:1e:78:1a:31:b7:3f:88:2b:92:a1:28:05:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:69:08:A4:82:8C:E1:02:61:05:C6:2B:AD:7F:4E:92:6F:4B:6A
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/eDVpCKSCjOECYQXGK61_TpJvS2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:52:6e:95:6c:f9:23:19:af:64:59:63:02:10:8d:17:ba:d9:
4d:82:c3:92:9d:57:e9:5f:a4:5e:3a:e7:4e:5e:4b:1a:6c:42:
5b:12:9d:51:f4:28:23:78:3e:60:62:1e:cd:df:5e:e5:b7:10:
8d:ea:34:dc:a6:ac:b4:60:e4:33:19:b8:b2:6c:13:28:52:72:
04:e2:44:15:ee:3c:8b:25:f2:6d:1b:79:2d:37:41:ab:c9:46:
74:60:7e:99:2f:1e:32:1e:1b:3c:ab:41:ff:bc:db:53:d6:5b:
4f:62:10:ee:00:37:df:81:c4:56:42:af:06:90:43:92:06:2e:
3a:0a:09:2a:43:8c:82:bf:28:62:f7:84:bd:04:41:91:7f:05:
da:e8:59:51:48:ca:a7:ab:17:4e:8e:f6:b8:9f:2c:22:89:5e:
6f:bf:7a:13:a0:e5:47:94:7f:72:a8:c8:ea:25:d1:b4:2a:81:
8d:e7:1d:97:64:2e:d8:d1:34:cd:0d:28:9d:0b:15:24:92:12:
08:4f:d4:26:45:9c:2e:19:d1:ab:7f:1d:14:eb:ed:bd:95:66:
a9:8e:6d:21:e9:bd:cf:29:44:77:6c:68:ac:a4:01:6b:4e:b4:
7c:b8:7f:29:29:eb:c9:1e:05:fa:f0:5d:0b:7c:3e:62:8b:d8:
76:7b:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:48 2025 by rpki-client