Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa
File: KNirltEkqj4tDEBAiDzpJGbvBSg.roa (raw, json)
Hash identifier: J61E136Vkhznu7NDsKVSiYdgQtqDHL3NxZzQs21IzSA=
Subject key identifier: 28:D8:AB:96:D1:24:AA:3E:2D:0C:40:40:88:3C:E9:24:66:EF:05:28
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: B3
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa
Signing time: Fri 06 Jun 2025 02:22:22 +0000
ROA not before: Fri 06 Jun 2025 02:22:22 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c1::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:22:22 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=28D8AB96D124AA3E2D0C4040883CE92466EF0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:61:cb:2e:80:69:e4:cc:60:53:47:e2:6c:
e3:c9:52:b5:53:91:1c:c0:1a:2c:81:03:60:dd:06:
21:91:58:23:95:bc:cd:b6:42:a2:88:a0:6a:d2:2f:
06:d3:bf:b2:54:70:29:74:d7:16:45:03:75:a2:3c:
4f:7a:4f:90:de:b6:55:11:6f:e3:4b:fa:b1:11:1c:
c5:7c:f8:82:82:97:38:cf:b4:94:7b:0b:a3:04:07:
06:d0:28:e4:8e:92:25:bc:de:97:02:27:84:ef:cc:
ed:f6:9f:74:a1:0b:9d:c5:ff:bb:03:99:0a:d4:90:
55:f2:c8:5a:17:50:e2:ea:62:5d:64:a0:c8:de:65:
77:a0:17:d9:f6:3f:a7:21:a5:26:63:28:d5:89:96:
04:79:e0:3b:ae:ea:4c:27:2e:cb:9a:33:1d:24:56:
60:8c:ee:e8:f4:a1:d2:11:62:3f:77:97:d6:cf:2c:
f9:aa:ad:b0:79:f6:35:9c:22:1d:65:1b:7f:de:9e:
f0:66:84:ff:60:0b:fd:08:6d:3e:d5:05:89:ce:11:
e4:99:7e:83:08:42:29:65:ea:c5:e1:60:fb:b1:0c:
da:ee:46:24:74:23:22:d1:e8:aa:04:4b:57:7f:3c:
9a:7c:b0:de:3b:6b:3e:f6:9d:f3:6d:7f:6a:84:a6:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:AB:96:D1:24:AA:3E:2D:0C:40:40:88:3C:E9:24:66:EF:05:28
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/KNirltEkqj4tDEBAiDzpJGbvBSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c1::/44
Signature Algorithm: sha256WithRSAEncryption
b9:30:8c:6f:82:d4:fb:9d:39:00:25:5c:1b:4b:e9:31:2a:ee:
cf:50:f9:ce:82:4c:55:e7:00:e3:fa:3b:5b:67:7f:1e:d2:7d:
9f:37:a3:79:f8:10:26:1f:01:22:d0:33:91:6c:9f:4f:f5:5b:
19:a2:df:99:38:a7:0d:60:3c:e0:34:64:73:38:17:99:a7:e4:
dd:ea:c8:73:cd:60:31:2f:f2:4b:48:5d:d9:90:12:0b:e9:60:
f2:c0:e2:24:b5:34:30:73:c4:7e:e3:7e:14:cd:b6:f1:a5:b9:
dd:66:00:8c:44:2f:e8:10:16:18:1c:cd:8c:33:e8:50:2e:41:
b6:f9:76:a3:df:96:ea:cb:e0:1c:8d:2a:07:02:0a:ea:e7:19:
ce:dd:53:b2:72:a3:7c:73:02:1d:75:76:67:c3:cc:72:ae:1f:
92:55:ac:45:02:b8:98:17:46:69:f7:17:98:d2:ec:ce:17:e6:
2d:79:10:d5:14:c4:25:4b:ab:06:96:92:07:7f:81:65:ea:bd:
49:ee:a4:cc:8b:ca:35:a0:4d:ea:32:05:4d:e7:12:ea:d7:d2:
c7:63:ed:22:0a:2a:ed:cb:8a:04:7f:3f:8f:68:75:73:b7:a5:
11:88:b4:0a:b4:f2:0e:08:a4:ea:03:00:d3:fe:ff:9c:f8:4b:
15:e7:cb:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:38 2025 by rpki-client