Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/teo5kbUT6OyEmu3WRwX8A6E5IoE.roa
File: teo5kbUT6OyEmu3WRwX8A6E5IoE.roa (raw, json)
Hash identifier: xvLZik6mHZlATm0A2+d42pAieS8w6LM1KnxP/QLJEQM=
Subject key identifier: B5:EA:39:91:B5:13:E8:EC:84:9A:ED:D6:47:05:FC:03:A1:39:22:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 019E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/teo5kbUT6OyEmu3WRwX8A6E5IoE.roa
Signing time: Fri 09 May 2025 05:38:13 +0000
ROA not before: Fri 09 May 2025 05:38:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 05:38:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B5EA3991B513E8EC849AEDD64705FC03A1392281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:6c:8a:cf:45:56:4b:fb:4a:49:27:e6:22:
2d:b8:5c:48:38:0a:42:81:ab:c6:e4:68:0b:8e:ad:
f8:ee:27:e9:f7:35:e9:66:86:ce:19:90:85:92:86:
d8:9e:71:31:19:69:b7:3d:ea:3f:92:ec:ae:b3:71:
d0:88:e5:5e:ab:83:db:51:6b:d9:10:87:4b:e6:01:
d0:a3:87:33:c3:90:92:f0:09:8b:a0:32:77:7e:4c:
53:e8:56:90:12:ec:ad:16:6b:0b:40:7c:66:cd:26:
02:d5:1b:30:15:fb:e0:09:0e:97:ed:6d:62:fc:88:
62:c0:cb:ed:c0:52:d8:81:ad:d4:80:64:93:a4:50:
0d:23:e4:59:24:2a:d0:6e:21:d7:eb:e4:16:b0:f4:
97:6e:fa:7a:bc:b0:d0:49:a9:b2:1a:4d:1d:a6:d5:
f9:13:61:5e:39:73:08:0e:b1:6f:e5:12:81:81:9e:
c6:10:59:05:fc:41:a8:f2:85:62:a9:62:01:6b:4d:
b0:fe:87:52:02:c1:98:4b:01:1b:29:74:9e:0d:d6:
d6:a4:b0:79:5d:af:3a:80:d6:db:49:fa:d1:30:ec:
16:be:63:07:7c:06:23:f9:ff:2d:14:d9:81:40:b9:
52:34:d1:bf:c0:4b:7f:6e:df:cb:41:e4:53:b6:71:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EA:39:91:B5:13:E8:EC:84:9A:ED:D6:47:05:FC:03:A1:39:22:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/teo5kbUT6OyEmu3WRwX8A6E5IoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:96:e6:48:df:26:a3:7e:a8:03:04:03:66:ba:c2:3b:20:67:
11:45:95:86:7d:6e:9b:94:69:bd:d8:62:84:39:ee:45:4b:4e:
a6:27:8d:65:1b:c0:df:02:f7:53:a4:06:35:fe:26:a3:92:af:
bd:bb:15:10:31:66:7f:bb:e5:be:ab:14:7f:da:23:2d:4e:d1:
47:47:1a:f8:6b:d3:fd:ba:0f:31:30:a6:5f:e1:58:0f:04:b3:
ca:ad:f3:35:9f:65:76:cc:d9:86:17:9d:60:ef:f6:a9:17:ec:
e4:57:2d:87:3d:72:14:17:ae:7c:de:5c:66:c2:94:ea:e1:fa:
7d:e6:cf:d1:6e:24:c0:a5:de:60:0c:df:2e:60:ae:12:e3:de:
44:bf:93:35:93:ea:b8:fb:b4:06:ea:6f:21:ca:b1:37:f9:2e:
68:b9:d7:e6:31:32:2f:11:5d:c7:f6:cd:3a:6e:f4:da:b6:2e:
ca:99:15:3d:4a:a2:d2:6e:74:93:ae:7f:4b:9d:f5:b0:14:18:
ec:65:49:ef:71:d7:f4:bf:61:49:73:a8:24:b4:4a:a2:c6:32:
e8:b2:22:52:48:59:be:fd:aa:06:df:0f:24:85:fe:c8:08:8f:
a1:8f:35:a6:6d:d1:44:b2:c3:05:07:c7:be:1d:d4:1f:93:c9:
0c:ec:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:24 2025 by rpki-client