Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa
File: gKAbgFF8MfWnhfFqBZLEu1JwopE.roa (raw, json)
Hash identifier: fB5pmc7bEnt1ilCruFSHSO95d7pSqdyB+JeS8jJ4mtA=
Subject key identifier: 80:A0:1B:80:51:7C:31:F5:A7:85:F1:6A:05:92:C4:BB:52:70:A2:91
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: EA
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa
Signing time: Fri 06 Jun 2025 02:37:04 +0000
ROA not before: Fri 06 Jun 2025 02:37:04 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:40c4:4010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: Jun 6 02:37:04 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=80A01B80517C31F5A785F16A0592C4BB5270A291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:88:3a:8a:ef:24:e4:05:d2:a8:c8:4b:c5:
9f:cf:b9:6b:99:9c:81:65:af:bb:a8:f2:a9:b2:b7:
7c:f8:0f:b1:4b:6a:69:b3:f3:04:93:e9:84:34:91:
fb:82:bc:8a:ae:ce:53:95:48:71:5e:ec:7b:f0:f9:
c7:19:ef:46:cf:9d:6c:ac:5c:76:86:53:ce:e6:c2:
ef:31:9d:e0:90:ae:0f:d4:3c:d5:f0:5a:34:d7:c0:
e4:1f:77:3a:ba:e9:91:74:ee:2e:4b:18:7d:6e:1a:
63:5a:ea:00:3b:5f:91:21:3c:fa:95:2f:01:12:63:
f2:bf:4e:15:80:cf:5b:31:ed:b3:51:7b:41:18:28:
87:f9:10:6b:e7:2a:96:34:f1:d1:7a:0a:53:f8:ff:
a7:d4:0c:18:52:48:e6:b7:36:d4:45:df:05:f1:77:
bb:a4:e5:df:08:35:b6:87:fd:33:01:51:bf:aa:ab:
9f:01:d8:3f:81:e1:12:76:1d:fb:cc:02:76:ef:55:
be:81:c0:dc:f9:8d:6f:28:6d:a7:f1:d7:9e:f3:e8:
bb:f2:f4:d5:31:fa:8e:c1:f9:44:ca:63:c0:73:85:
71:73:f3:86:d0:65:2d:8c:ab:30:9c:3a:61:5c:06:
0c:07:99:d8:f1:67:08:cd:c4:f9:f1:2d:71:7f:5f:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:1B:80:51:7C:31:F5:A7:85:F1:6A:05:92:C4:BB:52:70:A2:91
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/gKAbgFF8MfWnhfFqBZLEu1JwopE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:40c4:4010::/44
Signature Algorithm: sha256WithRSAEncryption
17:bd:f1:da:e7:4c:66:ac:17:54:2a:34:a5:39:7b:21:39:46:
ab:fd:23:6c:3b:a8:70:87:a5:38:4a:50:d0:1c:88:76:1b:e5:
73:79:c7:ec:c3:0a:a3:b1:3e:1f:c5:f0:34:50:30:75:41:29:
5b:83:04:68:51:1f:2f:d9:c6:66:e5:4a:9e:db:b4:e4:04:20:
16:69:d1:c1:e7:7c:0a:78:77:fc:bd:f0:fc:f9:0e:da:27:ff:
e2:e5:44:38:ed:82:c2:95:2a:06:e3:ba:34:b4:a5:9a:70:b6:
dc:37:a1:80:66:44:44:78:a0:15:00:46:41:75:3c:d9:61:b9:
49:1b:76:8c:4b:8b:67:f9:d9:85:20:80:9c:dc:9b:bc:37:71:
fb:ed:fa:1c:16:db:b3:5b:5e:ef:12:54:60:22:f3:b9:54:07:
b8:69:29:e5:d4:26:35:9c:6e:f1:31:9e:d8:01:6a:bc:9a:c3:
19:82:3d:40:14:20:a3:4f:e1:22:6d:91:ed:45:c2:0c:ff:d2:
36:24:a6:8e:95:68:04:f8:8d:6e:4f:ad:26:7a:d2:34:2d:72:
ae:a3:ce:44:ef:38:3c:fc:58:ce:42:b4:62:d5:84:e7:cd:58:
0a:fb:6b:23:b6:58:5c:ef:5a:d5:e0:3a:94:ad:31:57:fb:c4:
bf:58:3d:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:39 2025 by rpki-client