Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa
File: 8pET--HPS_iwNgKvdvhO6hUpYY8.roa (raw, json)
Hash identifier: 6SAZbRDpK1sENuyYvdYIHX9ysDsnTxmubEeumEfPXKI=
Subject key identifier: F2:91:13:FB:E1:CF:4B:F8:B0:36:02:AF:76:F8:4E:EA:15:29:61:8F
Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Certificate serial: 07
Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa
Signing time: Wed 28 May 2025 06:50:34 +0000
ROA not before: Wed 28 May 2025 06:50:34 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134765
IP address blocks: 150.242.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56
Validity
Not Before: May 28 06:50:34 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F29113FBE1CF4BF8B03602AF76F84EEA1529618F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:13:30:76:2f:a3:71:98:01:d1:ee:b8:40:
73:ef:28:fd:16:82:f5:36:d5:22:cf:ae:12:23:6e:
8d:e2:30:88:3e:14:68:43:52:c5:3d:c4:9b:a3:14:
cb:5b:74:33:90:34:19:28:5a:32:99:75:4e:cd:29:
0c:b9:57:31:35:6c:ea:f7:98:46:84:3d:3b:cf:46:
f5:7e:02:fe:de:1a:5b:85:e6:8c:df:8b:ac:ec:30:
4d:dc:ce:1e:b9:00:f2:a9:e3:68:f1:5c:76:d3:75:
db:b4:04:7a:db:83:fa:c5:12:98:13:c8:54:cc:a9:
be:5b:6a:ea:66:00:a9:ac:87:f2:cd:21:cd:88:08:
d5:8e:ee:bb:0e:1d:c3:ef:39:f0:40:a9:b0:9a:98:
f9:14:32:e6:ca:71:42:cd:64:33:48:32:06:46:c7:
e5:24:b9:8f:92:83:12:f2:f6:ce:2d:48:41:0b:6e:
ed:3a:5d:06:87:2e:52:df:0d:94:c2:77:47:e8:29:
25:7e:80:8c:cd:60:99:08:42:a3:bc:25:32:eb:b5:
1f:9d:62:97:12:4e:f7:e2:40:0a:c2:2b:74:6e:72:
74:3c:7d:5f:2c:06:9e:60:f6:61:08:2b:a6:89:78:
e3:b5:35:c4:af:87:41:c3:33:58:85:b8:ef:12:bc:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:13:FB:E1:CF:4B:F8:B0:36:02:AF:76:F8:4E:EA:15:29:61:8F
X509v3 Authority Key Identifier:
keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/8pET--HPS_iwNgKvdvhO6hUpYY8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:5b:f9:c7:21:41:d5:f0:dc:02:8d:5c:db:75:d9:01:c7:d1:
af:de:1c:ba:9c:d6:4b:a1:e2:cf:27:74:23:bc:30:de:4d:1b:
dc:17:ad:27:9e:ee:11:91:92:d9:69:6a:f2:0c:80:40:ce:b9:
60:ec:2b:ed:ff:ef:9a:29:b8:d0:69:85:3d:c8:1b:71:93:e0:
33:14:81:f1:f6:5c:a2:d7:0e:1e:b0:54:a6:85:a0:a9:e7:60:
96:dc:e5:d6:3a:ad:ab:e5:e8:a8:75:a0:2f:8c:40:4f:d1:67:
89:6c:67:73:ff:66:0d:0c:dd:df:98:e5:b3:5c:e9:a8:20:e5:
41:be:af:1e:75:75:7a:a9:8c:8c:86:5b:f9:35:69:06:22:91:
5a:ce:24:00:22:61:1b:f9:f7:c5:d2:ee:a2:04:c0:5b:81:39:
68:b7:83:31:bf:ba:39:91:98:e6:74:cc:d0:a1:0b:e8:74:28:
d5:f8:bb:5d:dd:d1:00:bf:67:7a:21:e5:9f:57:20:bb:df:01:
89:25:fb:f5:c2:2b:39:76:86:6d:d7:81:24:0f:0a:ce:71:c7:
ea:35:70:f7:b6:7f:b8:71:cc:aa:91:07:93:70:ad:c7:a9:fe:
7e:dd:3e:c8:36:77:65:3c:27:1d:37:9e:8f:d4:2b:f1:3a:15:
d2:9b:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:22:09 2025 by rpki-client