Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa
File: iPCP6IuT-0QUdjr7rWq4x3eahUs.roa (raw, json)
Hash identifier: 392WqWeFbPlBXrnmWzfBSMp8DlyfnVN0seKH8/K1kVA=
Subject key identifier: 88:F0:8F:E8:8B:93:FB:44:14:76:3A:FB:AD:6A:B8:C7:77:9A:85:4B
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14CD
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa
Signing time: Wed 09 Apr 2025 06:48:37 +0000
ROA not before: Wed 09 Apr 2025 06:48:37 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 34549
IP address blocks: 114.66.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5325 (0x14cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:37 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=88F08FE88B93FB4414763AFBAD6AB8C7779A854B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:87:ed:4a:b0:1c:92:7e:7a:3a:4b:ae:85:
a8:09:1d:63:b9:17:5d:5b:fd:e3:67:e2:df:f1:87:
4c:a4:15:02:a9:1e:b1:f7:d4:4c:11:56:b2:bc:f2:
8a:bb:9d:9f:67:a2:ef:45:7f:e7:8f:44:8c:3a:7a:
9e:56:4b:81:c5:6e:7a:15:ee:ab:09:4e:af:69:57:
e4:77:68:e2:11:db:4c:cd:f8:7a:31:a1:d8:ba:65:
19:94:eb:98:cf:0c:c5:85:9e:9f:81:26:5d:42:e8:
be:06:c0:82:48:fe:47:9c:a3:8b:86:7d:c2:9a:e1:
89:1e:a0:2b:d0:29:93:d8:2f:73:b0:99:da:f4:a0:
8e:71:05:6a:1c:1c:5e:0a:c1:79:c9:08:98:3f:57:
08:f5:53:8f:be:cb:98:e1:c0:9f:0c:20:bd:6d:6f:
b1:fb:56:6e:f0:12:3f:9d:c2:86:1e:a9:6f:e4:44:
e4:8b:04:d1:83:a1:e8:60:27:d1:75:17:4e:41:77:
02:62:de:38:3f:5a:c1:74:95:64:27:2d:70:ea:2e:
9f:7f:f2:6e:07:c6:21:9f:2f:f8:8a:83:00:aa:d9:
be:20:95:0c:5f:9d:40:dc:2b:9b:96:2e:8b:02:f5:
20:16:a5:b2:e7:89:4f:18:b1:72:94:72:61:16:e8:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F0:8F:E8:8B:93:FB:44:14:76:3A:FB:AD:6A:B8:C7:77:9A:85:4B
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/iPCP6IuT-0QUdjr7rWq4x3eahUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.183.0/24
Signature Algorithm: sha256WithRSAEncryption
22:dc:91:89:91:8a:94:8e:26:a5:16:cb:38:b7:4f:35:0f:83:
af:15:50:95:08:fb:71:c4:9e:a6:65:15:7a:49:62:91:6d:61:
d5:ee:26:d3:72:5c:45:12:d8:62:c1:bc:f8:18:dd:83:86:5b:
41:96:72:a6:0a:b0:92:72:5b:26:e0:bc:eb:ac:a2:9e:68:4a:
07:fa:48:47:a8:ce:93:c7:b7:54:d1:9d:47:31:fa:de:16:df:
f4:e3:1b:a4:e4:94:b4:d6:54:f6:9c:9c:dc:e1:1d:3f:3f:05:
cc:3d:71:4c:70:e3:08:bb:4c:4b:1a:a8:a2:37:a7:17:5b:77:
9b:48:b9:1f:b2:4e:70:d9:9d:92:d4:79:3f:ec:78:2f:d7:d6:
91:f6:d2:85:42:48:54:3d:1d:96:dd:c5:7c:ee:d2:8d:4f:00:
76:95:23:69:a2:a4:d1:f5:78:dd:5d:08:cc:de:fb:4c:be:60:
1a:ba:1f:db:5e:c0:64:97:ed:d0:56:77:9e:b1:03:21:cc:95:
7e:b4:fc:f4:2c:c4:93:69:eb:7d:70:45:1c:64:6f:b5:98:36:
f8:77:17:c6:8e:62:47:57:3f:e2:bf:98:c4:ea:78:26:57:25:
2e:83:f9:5f:a3:8f:10:e6:c7:01:84:1d:e7:77:06:5b:b4:4f:
45:a5:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:48 2025 by rpki-client